$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa File: 39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa (raw, json) Hash identifier: D1ZZI+38+zcJ/ilgqPrqF20eSqKfV1Dk/HqNOEBjt5Y= Subject key identifier: 78:F0:84:23:6F:6F:1D:F8:E2:F7:6A:2A:13:B6:19:7A:7A:37:02:3A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58144EAD2919FEDD63D2F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:44:ea:d2:91:9f:ed:d6:3d:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d428bd03-3298-4c09-bca5-d82dc66de3ab Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:35:ab:11:51:19:34:b2:2a:e0:3f:75:bc:20: 61:28:a4:87:b4:32:3e:df:a9:a2:4b:e3:83:c9:0c: 8a:c9:9b:b0:a3:29:cd:ae:d7:0a:e2:c4:10:a8:a6: e4:9f:9e:8a:45:78:4f:4e:69:4f:4a:32:29:f6:74: 92:3a:dc:a8:8c:08:6f:95:ae:9c:fd:15:b3:59:6f: 5a:d0:6e:a9:bb:a8:19:5c:79:52:cb:78:71:9c:06: 1c:a4:b9:1f:f8:ac:e6:4e:a2:18:1d:97:3d:69:0f: 1f:ab:92:e4:cb:f1:76:d0:8c:34:1b:fc:a5:d6:e0: ac:ca:dd:90:07:cb:fb:a8:a6:9f:ad:f1:56:4b:7f: 86:f3:17:1e:04:ab:2a:dc:39:86:3b:86:a1:55:f5: 2f:c0:18:19:18:4e:43:84:c1:01:23:4a:13:8c:58: 0c:24:9a:20:8a:ca:c0:85:ad:50:72:d7:02:b6:b5: 6b:47:67:4c:4a:a9:7e:2d:af:d5:0c:df:bb:dd:62: 64:d6:0d:1d:fe:60:b5:1a:5f:e3:be:39:38:51:7d: 18:58:44:7a:b0:0d:5d:a0:e5:c8:61:14:9b:ef:92: 9d:68:3f:cf:41:df:66:a9:be:28:22:56:c6:98:9a: ce:95:4e:f6:99:83:c1:0c:46:5e:81:bd:3c:2a:e6: ec:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F0:84:23:6F:6F:1D:F8:E2:F7:6A:2A:13:B6:19:7A:7A:37:02:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39aaca10-92d5-38ba-8e46-6dc19fc7fee2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2d:7a:c4:32:47:26:de:8c:23:a2:62:c9:38:3b:1d:c3:67: 19:b1:27:f1:d6:79:47:a8:c5:7c:39:2c:c1:f5:86:43:10:17: 58:f3:e8:a2:fe:5e:d6:79:74:b8:bc:aa:6e:38:67:1e:10:f9: 81:08:19:c6:72:02:13:5f:a4:20:b6:33:f5:cf:42:2e:fe:9d: 5b:67:8d:48:e8:51:9f:18:e3:a0:d1:32:92:06:2c:cb:24:0a: df:66:d0:7a:a5:cc:e1:cc:e2:68:e7:a5:de:8a:3b:f9:dc:99: 2b:18:92:2a:89:69:0f:10:dd:bf:0a:1f:f6:6a:9b:98:40:55: f1:dd:9d:75:99:60:59:45:06:1f:81:a3:52:60:2e:ff:cf:3c: 31:30:78:f1:ff:a3:ff:09:e9:ec:39:4d:5f:50:9d:92:5b:99: 30:93:f9:10:0e:12:6d:68:15:d6:f8:d4:31:62:14:c6:ad:0d: f9:2f:19:3c:d8:db:b3:98:75:d8:90:8d:ce:9b:3a:ae:64:bf: 93:08:29:35:51:69:46:ed:7b:0f:b2:c8:75:61:b5:89:f4:4b: 87:79:9f:99:7c:f2:19:9a:f5:1b:b1:fc:ce:84:8c:5d:4d:47: fc:45:1c:de:1e:d5:3f:1e:2d:37:93:40:98:cf:e3:c0:24:70: cd:5c:a1:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUTq0pGf7dY9LwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDQyOGJkMDMtMzI5OC00YzA5LWJjYTUtZDgyZGM2NmRlM2FiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDWrEVEZNLIq4D91vCBhKKSHtDI+36miS+OD yQyKyZuwoynNrtcK4sQQqKbkn56KRXhPTmlPSjIp9nSSOtyojAhvla6c/RWzWW9a 0G6pu6gZXHlSy3hxnAYcpLkf+KzmTqIYHZc9aQ8fq5Lky/F20Iw0G/yl1uCsyt2Q B8v7qKafrfFWS3+G8xceBKsq3DmGO4ahVfUvwBgZGE5DhMEBI0oTjFgMJJogisrA ha1QctcCtrVrR2dMSql+La/VDN+73WJk1g0d/mC1Gl/jvjk4UX0YWER6sA1doOXI YRSb75KdaD/PQd9mqb4oIlbGmJrOlU72mYPBDEZegb08KubsSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjwhCNvbx344vdqKhO2GXp6NwI6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzlhYWNhMTAtOTJkNS0z OGJhLThlNDYtNmRjMTlmYzdmZWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUtesQyRybejCOiYsk4Ox3DZxmxJ/HWeUeoxXw5LMH1hkMQF1jz6KL+ XtZ5dLi8qm44Zx4Q+YEIGcZyAhNfpCC2M/XPQi7+nVtnjUjoUZ8Y46DRMpIGLMsk Ct9m0HqlzOHM4mjnpd6KO/ncmSsYkiqJaQ8Q3b8KH/Zqm5hAVfHdnXWZYFlFBh+B o1JgLv/PPDEwePH/o/8J6ew5TV9QnZJbmTCT+RAOEm1oFdb41DFiFMatDfkvGTzY 27OYddiQjc6bOq5kv5MIKTVRaUbtew+yyHVhtYn0S4d5n5l88hma9Rux/M6EjF1N R/xFHN4e1T8eLTeTQJjP48AkcM1cofs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:07 2025 by rpki-client