$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3da1330b-0c2b-379c-9434-6889a4cd4513.roa File: 3da1330b-0c2b-379c-9434-6889a4cd4513.roa (raw, json) Hash identifier: UMf8/K96UzranBjarRC6EQ0XkDf2F0pcUeKYOj4s3Ag= Subject key identifier: 3E:04:9B:2D:1D:9A:B5:1F:E6:6A:47:E1:98:5F:7B:4A:A7:BC:0A:54 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58149293154402349DC7F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3da1330b-0c2b-379c-9434-6889a4cd4513.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:49:29:31:54:40:23:49:dc:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8e44c269-0dd8-47b5-ab1c-c92b5c2d88d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:f0:93:9a:d6:47:8a:e3:be:f3:e9:ad:e5:7f: 99:be:05:c1:87:d9:e6:a8:69:ef:9c:00:d5:d8:1e: 6f:45:d6:bf:d5:4e:c5:23:1b:22:ea:b5:5c:90:b5: b7:78:6a:2e:08:f9:c8:29:83:fa:aa:d4:e7:c1:d0: 50:68:4a:8d:82:40:37:fd:9c:29:d0:0b:9a:73:22: 04:83:13:4e:46:a0:7d:a7:b4:c3:c1:69:a8:88:7f: 7f:99:bb:53:9e:a7:85:4b:ba:0d:b9:96:5b:dd:32: 54:03:74:5e:d7:9f:b5:8e:07:df:b1:33:52:6a:f7: 8d:7e:ab:14:05:af:de:47:42:55:d0:b5:f9:b3:38: 3a:dd:51:0a:14:a4:27:c6:89:34:a6:0f:54:d2:99: 25:b4:1f:82:15:51:cb:54:a6:a0:24:69:f5:1e:51: ab:56:ff:04:d5:a3:16:82:cf:1a:ed:2b:bb:0c:1d: 79:3d:a6:db:c4:d4:cf:b0:28:36:ce:85:fb:9a:71: a7:83:f6:43:79:93:2a:ec:c8:fe:80:c9:43:41:35: 72:f1:38:b3:9d:a3:38:92:79:e3:20:a5:43:8a:1d: 8a:17:f1:c3:e9:52:55:52:76:2c:32:48:62:50:11: 01:92:41:e5:30:7e:27:38:86:cf:ad:fc:14:77:03: 7d:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:04:9B:2D:1D:9A:B5:1F:E6:6A:47:E1:98:5F:7B:4A:A7:BC:0A:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3da1330b-0c2b-379c-9434-6889a4cd4513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:25:12:01:9a:b0:83:96:fc:a3:b7:49:85:7f:a5:40:3e:5f: 20:9d:37:69:8e:75:43:fd:6c:80:f2:9d:2f:c8:0d:a8:07:a9: 59:28:e6:fb:ab:00:64:bf:ea:e3:ee:86:ea:8d:de:11:75:04: 7a:63:0b:f0:62:6c:e7:8b:64:cf:a8:1c:b7:bb:f0:31:61:d3: fe:57:8b:3a:c2:20:d3:ee:f5:45:ad:f8:13:be:3d:81:58:28: f9:5a:92:9e:e6:03:f0:14:80:3d:72:94:69:55:5a:fe:39:0e: 0e:63:53:ea:f5:95:b4:51:44:8c:2e:74:1c:7b:f0:2a:17:0b: 2c:e9:0f:61:bc:fe:18:15:ba:61:a7:f1:9d:4f:6f:76:98:24: 25:91:66:b4:fa:14:32:25:0a:53:79:41:c2:3b:11:6f:31:02: 99:8b:fa:30:4d:79:c2:91:b0:c1:50:20:ff:8a:dc:45:49:4e: 20:e5:c5:a9:29:92:53:04:24:22:03:9c:bf:eb:cc:4a:67:c3: 45:5b:b0:81:9e:cf:af:7e:39:b0:e9:53:0e:f7:2a:a4:da:cc: 95:20:a1:32:37:d3:08:da:fd:7d:3e:01:d1:bd:11:cc:39:5c: 77:96:3b:af:70:a8:ab:b6:88:90:49:5c:c0:6e:4b:7d:e5:90: 95:78:ac:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUkpMVRAI0ncf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGU0NGMyNjktMGRkOC00N2I1LWFiMWMtYzkyYjVjMmQ4OGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPCTmtZHiuO+8+mt5X+ZvgXBh9nmqGnvnADV 2B5vRda/1U7FIxsi6rVckLW3eGouCPnIKYP6qtTnwdBQaEqNgkA3/Zwp0AuacyIE gxNORqB9p7TDwWmoiH9/mbtTnqeFS7oNuZZb3TJUA3Re15+1jgffsTNSaveNfqsU Ba/eR0JV0LX5szg63VEKFKQnxok0pg9U0pkltB+CFVHLVKagJGn1HlGrVv8E1aMW gs8a7Su7DB15PabbxNTPsCg2zoX7mnGng/ZDeZMq7Mj+gMlDQTVy8TiznaM4knnj IKVDih2KF/HD6VJVUnYsMkhiUBEBkkHlMH4nOIbPrfwUdwN9hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4Emy0dmrUf5mpH4Zhfe0qnvApUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2RhMTMzMGItMGMyYi0z NzljLTk0MzQtNjg4OWE0Y2Q0NTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHglEgGasIOW/KO3SYV/pUA+XyCdN2mOdUP9bIDynS/IDagHqVko5vur AGS/6uPuhuqN3hF1BHpjC/BibOeLZM+oHLe78DFh0/5XizrCINPu9UWt+BO+PYFY KPlakp7mA/AUgD1ylGlVWv45Dg5jU+r1lbRRRIwudBx78CoXCyzpD2G8/hgVumGn 8Z1Pb3aYJCWRZrT6FDIlClN5QcI7EW8xApmL+jBNecKRsMFQIP+K3EVJTiDlxakp klMEJCIDnL/rzEpnw0VbsIGez69+ObDpUw73KqTazJUgoTI30wja/X0+AdG9Ecw5 XHeWO69wqKu2iJBJXMBuS33lkJV4rOo= -----END CERTIFICATE-----Generated at Sat Apr 12 00:01:09 2025 by rpki-client