$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa File: 387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa (raw, json) Hash identifier: bGCdVkWMajNlePc1GXemEz/IivwkF0514sk7VfZdh9c= Subject key identifier: 26:57:54:F4:0D:F3:8A:30:69:3A:4D:57:22:43:FC:32:DB:F6:ED:29 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58144C22AA95D107CB83E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:44:c2:2a:a9:5d:10:7c:b8:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e69b68ff-5531-4831-b1fb-85156a8ebd4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:5b:7d:90:43:00:8d:3a:76:5b:80:23:9e:de: 42:80:5c:12:0d:19:86:6f:d6:d8:5f:92:da:e4:ec: fb:71:ed:d1:a6:24:f4:86:02:c0:cb:d8:5a:95:91: 42:28:71:f0:5e:76:ce:9e:94:eb:b0:4e:59:04:3c: 77:01:ee:5b:c6:4f:a0:98:5a:dd:26:32:6b:b0:e6: c9:f8:8b:df:1a:3b:0a:b3:b3:fb:77:b9:d2:01:ff: 10:0f:46:0f:05:d6:47:b5:e4:e9:29:ff:43:11:62: 13:e9:2b:5c:68:28:9f:5c:63:44:0b:40:32:2b:9f: 12:37:0b:28:b2:a6:e9:0b:97:47:95:97:be:37:5a: 2a:eb:ac:fd:7a:ee:71:5c:14:8a:51:c9:f2:5c:ba: b4:b0:40:06:b1:57:d8:d3:c0:76:61:16:f5:aa:44: c3:0f:89:6a:dc:7f:b0:08:58:d8:8a:fb:a6:d4:14: d4:2f:d0:79:1d:0c:f3:d6:ef:a5:e5:2c:83:a7:44: c7:89:8a:75:f2:62:1d:69:31:ef:13:43:74:e4:20: f1:e9:ea:ea:82:bb:bd:e2:4b:dc:6a:d7:c4:77:50: bd:e1:66:fe:f1:31:64:59:2c:67:9b:71:6b:3d:42: b8:25:fd:ac:e4:b2:81:32:71:67:ff:5f:00:39:17: dc:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:57:54:F4:0D:F3:8A:30:69:3A:4D:57:22:43:FC:32:DB:F6:ED:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:93:48:f4:d0:2f:5e:52:ff:b0:74:7f:11:00:ae:96:a0:07: 73:15:04:20:d3:9c:00:fe:91:ef:59:13:48:f4:ca:7e:0b:f7: 0f:cf:0e:27:0b:7d:10:fc:fb:52:52:92:2d:c8:7c:f4:10:50: 13:ba:1e:a2:ed:bd:a3:af:9f:5e:cd:c8:35:8b:25:f6:d6:ec: 80:c6:85:da:1c:58:03:d8:27:71:d9:c1:a6:4b:1b:07:64:39: 14:0d:11:d0:5c:2f:c2:48:50:ae:a3:b5:82:5a:fe:a8:58:0e: fd:3c:97:28:22:f3:92:3d:92:a6:62:e2:be:bf:b5:d0:46:0a: a0:2c:e3:ab:f0:b8:bb:c5:2a:63:f0:5c:fc:25:bc:f5:95:e8: 2c:4b:d9:27:52:75:48:d8:89:b1:83:b1:d2:2d:7c:80:0e:d5: f0:ad:8c:f3:85:83:58:20:80:5e:76:7c:c9:01:22:43:a9:1e: 83:23:51:21:1b:aa:2e:63:3e:ba:1c:e3:c7:d2:66:83:29:07: c7:99:c4:d3:3b:9d:27:f7:fb:b5:8d:8d:e9:95:f8:fc:9b:85: 25:50:45:39:77:a2:bd:6b:d5:aa:e4:c8:ec:d8:13:31:83:f3: cc:53:d3:b2:91:a8:02:4d:dc:42:ff:3e:cc:35:9e:b0:a4:6c: 75:5b:e5:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUTCKqldEHy4PgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTY5YjY4ZmYtNTUzMS00ODMxLWIxZmItODUxNTZhOGViZDRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1t9kEMAjTp2W4Ajnt5CgFwSDRmGb9bYX5La 5Oz7ce3RpiT0hgLAy9halZFCKHHwXnbOnpTrsE5ZBDx3Ae5bxk+gmFrdJjJrsObJ +IvfGjsKs7P7d7nSAf8QD0YPBdZHteTpKf9DEWIT6StcaCifXGNEC0AyK58SNwso sqbpC5dHlZe+N1oq66z9eu5xXBSKUcnyXLq0sEAGsVfY08B2YRb1qkTDD4lq3H+w CFjYivum1BTUL9B5HQzz1u+l5SyDp0THiYp18mIdaTHvE0N05CDx6erqgru94kvc atfEd1C94Wb+8TFkWSxnm3FrPUK4Jf2s5LKBMnFn/18AORfcIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZXVPQN84owaTpNVyJD/DLb9u0pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzg3YTg3YTEtNzE2ZC0z Yzg3LWIzZGMtODNlM2ZiN2YxMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuTSPTQL15S/7B0fxEArpagB3MVBCDTnAD+ke9ZE0j0yn4L9w/PDicL fRD8+1JSki3IfPQQUBO6HqLtvaOvn17NyDWLJfbW7IDGhdocWAPYJ3HZwaZLGwdk ORQNEdBcL8JIUK6jtYJa/qhYDv08lygi85I9kqZi4r6/tdBGCqAs46vwuLvFKmPw XPwlvPWV6CxL2SdSdUjYibGDsdItfIAO1fCtjPOFg1gggF52fMkBIkOpHoMjUSEb qi5jProc48fSZoMpB8eZxNM7nSf3+7WNjemV+PybhSVQRTl3or1r1arkyOzYEzGD 88xT07KRqAJN3EL/Psw1nrCkbHVb5eY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:23 2025 by rpki-client