$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa File: 4381f79e-f9af-3c5f-9483-1dd302308e4c.roa (raw, json) Hash identifier: 7+SqEWU9gf4/OqBlUeIMHbWXRQbx4GmU6Bjui5MyO9s= Subject key identifier: 4F:F6:78:6D:D1:FD:3B:5A:43:8C:EA:84:D4:82:6F:4A:4F:F3:EA:D3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581479CE80DE529F1AE8700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.201.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:47:9c:e8:0d:e5:29:f1:ae:87:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=bedfeec7-a6a5-41ee-9628-c4eccbc2b800 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:4e:0b:0e:e3:16:46:92:af:43:0d:27:64:97: 02:30:fd:ed:81:57:39:6b:a1:b9:dc:03:2f:62:a6: 9a:0e:44:8f:49:67:47:50:9c:0a:f4:0f:e3:a6:13: 59:59:ea:9f:a6:ce:1f:1c:b0:b0:ca:1c:83:27:34: ea:4b:8c:34:df:15:16:45:0c:90:d8:07:63:9e:cf: 94:66:83:e3:f2:bb:52:2e:b0:93:03:4e:be:db:98: d6:99:ca:1b:8e:95:9c:2d:98:a3:c8:f5:ea:cc:51: 97:d6:70:bf:02:86:e2:8f:22:d4:cf:10:57:c7:ca: 7c:95:ff:a0:4f:ad:05:38:72:19:38:57:9f:e1:5b: 27:ba:75:b7:e1:94:79:01:20:3b:6a:c0:8c:1b:b0: 89:5d:77:b3:27:fb:79:89:9a:09:b3:7f:67:73:32: 42:da:d2:ce:91:fa:cf:08:24:bf:fa:83:76:9e:37: 1b:a5:28:d4:9a:55:c4:3e:86:41:6f:f9:3a:07:3c: 70:68:62:99:dd:63:10:7f:ca:46:2d:47:6e:4b:3f: 5f:9a:6a:8c:af:f6:4b:95:d1:fe:f9:1a:a8:59:d4: da:bf:1d:56:b9:9e:06:53:6c:03:b9:81:9a:7d:79: 1f:3a:93:1c:47:a0:a3:43:2d:8b:ae:91:53:8a:df: a5:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:F6:78:6D:D1:FD:3B:5A:43:8C:EA:84:D4:82:6F:4A:4F:F3:EA:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4381f79e-f9af-3c5f-9483-1dd302308e4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.201.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:0a:1b:2e:b1:34:7e:9f:7d:98:05:f4:1a:67:d5:a5:f3:60: 4a:ca:a0:09:5e:07:e1:23:c4:00:b7:ae:91:42:be:ea:86:ee: 70:61:39:59:a4:d3:08:cf:7c:28:21:c5:eb:03:8d:69:0b:17: 41:44:4e:2f:62:6c:cc:a5:13:20:f6:88:59:f3:ee:58:99:5d: da:7f:36:37:00:5e:87:a7:e7:97:d9:9d:5a:06:50:aa:f3:ce: 6b:9b:31:c4:ec:b1:06:e6:ac:b5:b3:ff:0e:76:fa:b9:6a:75: fc:e5:63:d3:5c:4d:73:0b:d9:77:21:7b:99:74:7c:40:45:bf: fc:48:7a:9d:5f:36:d9:2b:0d:45:87:0d:ff:d7:f5:6c:fe:8d: c4:22:e7:ee:3d:0d:75:03:63:bb:4a:0c:72:50:85:8c:21:cd: 99:2d:2c:50:83:b4:48:a9:a0:f1:2b:0d:c4:57:84:4a:0d:81: ea:93:0a:c7:98:d5:b2:e1:85:0b:c3:3c:0f:b8:77:91:93:04: ef:43:63:dc:d2:55:8e:04:a9:14:34:e6:ab:04:a2:c3:ed:7b: 6b:fa:b8:0d:22:98:53:de:e2:39:38:8d:03:10:36:1e:bf:81: e5:d3:9b:b2:c4:b9:06:db:5c:d1:2f:51:6d:d4:b3:5b:b1:7d: db:4e:a9:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUec6A3lKfGuhwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmVkZmVlYzctYTZhNS00MWVlLTk2MjgtYzRlY2NiYzJiODAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlE4LDuMWRpKvQw0nZJcCMP3tgVc5a6G53AMv YqaaDkSPSWdHUJwK9A/jphNZWeqfps4fHLCwyhyDJzTqS4w03xUWRQyQ2Adjns+U ZoPj8rtSLrCTA06+25jWmcobjpWcLZijyPXqzFGX1nC/AobijyLUzxBXx8p8lf+g T60FOHIZOFef4VsnunW34ZR5ASA7asCMG7CJXXezJ/t5iZoJs39nczJC2tLOkfrP CCS/+oN2njcbpSjUmlXEPoZBb/k6BzxwaGKZ3WMQf8pGLUduSz9fmmqMr/ZLldH+ +RqoWdTavx1WuZ4GU2wDuYGafXkfOpMcR6CjQy2LrpFTit+l8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE/2eG3R/TtaQ4zqhNSCb0pP8+rTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDM4MWY3OWUtZjlhZi0z YzVmLTk0ODMtMWRkMzAyMzA4ZTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG0KGy6xNH6ffZgF9Bpn1aXzYErKoAleB+EjxAC3rpFCvuqG7nBhOVmk 0wjPfCghxesDjWkLF0FETi9ibMylEyD2iFnz7liZXdp/NjcAXoen55fZnVoGUKrz zmubMcTssQbmrLWz/w52+rlqdfzlY9NcTXML2Xche5l0fEBFv/xIep1fNtkrDUWH Df/X9Wz+jcQi5+49DXUDY7tKDHJQhYwhzZktLFCDtEipoPErDcRXhEoNgeqTCseY 1bLhhQvDPA+4d5GTBO9DY9zSVY4EqRQ05qsEosPte2v6uA0imFPe4jk4jQMQNh6/ geXTm7LEuQbbXNEvUW3Us1uxfdtOqf4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:42:12 2025 by rpki-client