$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41cb8abc-f780-3d19-b7d4-34310b93e17e.roa File: 41cb8abc-f780-3d19-b7d4-34310b93e17e.roa (raw, json) Hash identifier: HTOWA9aC775YgBXx2CQGb1k/AGOSQ88SPWooSYsiGME= Subject key identifier: 3A:5C:6F:56:A0:F3:8C:A3:50:F4:89:AD:99:F9:A1:39:CE:63:B0:13 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DCB0CEC9FEDA1815C770 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41cb8abc-f780-3d19-b7d4-34310b93e17e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:dc:b0:ce:c9:fe:da:18:15:c7:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a95fe2b6-6845-43b6-a5ed-44c419c13e3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:04:86:ae:52:a9:41:3b:f1:08:9c:df:7f:ae: 7b:aa:d3:a8:1b:b1:6f:4b:aa:c6:af:c3:3f:6a:76: c7:b8:6a:76:88:23:20:2d:5c:d7:61:75:63:8f:3a: f1:32:b1:d0:ce:f3:35:0d:2a:71:88:45:2c:cb:cc: 23:60:3c:d8:65:56:23:10:cc:5e:a7:43:86:3c:88: af:2a:5f:23:be:45:d5:98:21:73:e0:f8:bf:e2:75: 54:0d:56:c4:31:78:37:0a:ae:9d:27:86:30:be:17: 5c:b9:bf:d9:b7:ff:8a:7d:59:11:19:7a:cf:2b:3a: 15:29:86:da:2d:72:59:f9:51:bc:89:4d:55:82:fb: 10:9f:d3:81:ca:21:08:88:6d:b1:e6:e6:19:78:82: 0b:19:72:27:b2:e9:4a:cb:3a:49:45:5c:43:ef:42: 52:2e:ae:c2:54:42:12:ef:7a:07:4e:9f:46:c1:81: f3:5f:7a:a4:3d:60:80:cc:32:90:f5:55:d6:55:0e: 4a:23:a5:b5:0f:68:d9:06:34:20:3b:59:ef:52:27: 09:55:f0:0d:62:d3:5d:65:55:15:74:50:5d:3e:3d: a0:96:bc:a5:7f:3a:05:21:55:f6:48:88:e9:3b:cb: 9a:c5:db:85:d9:c8:cf:c1:c4:fd:8d:a3:64:72:17: 77:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:5C:6F:56:A0:F3:8C:A3:50:F4:89:AD:99:F9:A1:39:CE:63:B0:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41cb8abc-f780-3d19-b7d4-34310b93e17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:b8:97:8e:10:b8:55:15:e4:c5:a2:e0:18:18:5e:ac:13:6f: d4:70:5c:21:66:73:09:05:a7:25:d9:db:3a:09:a1:49:25:87: 4c:ff:d6:72:45:41:85:32:2c:89:65:7e:a5:65:50:53:6a:28: 53:e1:99:7f:1a:26:ae:31:7c:e5:1c:e1:f0:d4:d0:79:8d:d8: 28:7e:96:4e:41:ba:c1:72:e2:c9:23:ff:47:57:69:40:2e:2d: b8:7b:a6:bc:f6:77:28:60:09:a8:b9:a3:7c:a5:eb:1f:21:53: e9:01:c1:af:a8:ef:2c:41:81:ec:72:5c:f2:b1:47:1e:2f:5c: 13:88:9a:db:d7:de:be:50:5e:6d:a0:c8:17:c6:88:10:31:14: e6:00:85:0e:e6:4c:3d:51:15:91:bb:b1:5f:a1:4a:6c:00:a6: 5b:90:41:af:a9:0b:e1:14:1f:80:52:b8:fb:d4:c1:f5:c0:eb: df:74:57:ec:49:8a:09:35:9a:90:35:a8:10:30:87:27:93:23: bd:d4:3e:8a:b8:2d:8d:70:c5:0b:b5:57:84:73:6e:a3:c3:92: e9:be:f0:d2:5b:e6:7d:91:ef:fb:fd:b4:70:2a:74:83:2e:b9: f5:3c:ff:57:62:72:fa:1c:5c:25:98:74:22:f3:27:49:72:3e: a2:b6:47:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdywzsn+2hgVx3AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTk1ZmUyYjYtNjg0NS00M2I2LWE1ZWQtNDRjNDE5YzEzZTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wSGrlKpQTvxCJzff657qtOoG7FvS6rGr8M/ anbHuGp2iCMgLVzXYXVjjzrxMrHQzvM1DSpxiEUsy8wjYDzYZVYjEMxep0OGPIiv Kl8jvkXVmCFz4Pi/4nVUDVbEMXg3Cq6dJ4Ywvhdcub/Zt/+KfVkRGXrPKzoVKYba LXJZ+VG8iU1VgvsQn9OByiEIiG2x5uYZeIILGXInsulKyzpJRVxD70JSLq7CVEIS 73oHTp9GwYHzX3qkPWCAzDKQ9VXWVQ5KI6W1D2jZBjQgO1nvUicJVfANYtNdZVUV dFBdPj2glrylfzoFIVX2SIjpO8uaxduF2cjPwcT9jaNkchd3mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpcb1ag84yjUPSJrZn5oTnOY7ATMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFjYjhhYmMtZjc4MC0z ZDE5LWI3ZDQtMzQzMTBiOTNlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFm4l44QuFUV5MWi4BgYXqwTb9RwXCFmcwkFpyXZ2zoJoUklh0z/1nJF QYUyLIllfqVlUFNqKFPhmX8aJq4xfOUc4fDU0HmN2Ch+lk5BusFy4skj/0dXaUAu Lbh7prz2dyhgCai5o3yl6x8hU+kBwa+o7yxBgexyXPKxRx4vXBOImtvX3r5QXm2g yBfGiBAxFOYAhQ7mTD1RFZG7sV+hSmwApluQQa+pC+EUH4BSuPvUwfXA6990V+xJ igk1mpA1qBAwhyeTI73UPoq4LY1wxQu1V4RzbqPDkum+8NJb5n2R7/v9tHAqdIMu ufU8/1dicvocXCWYdCLzJ0lyPqK2R4Q= -----END CERTIFICATE-----Generated at Fri Mar 14 09:22:27 2025 by rpki-client