$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa File: 438239bd-ffa5-3739-be76-61c3fe8b13b8.roa (raw, json) Hash identifier: Rdl4wqEcP2IyeSwjaZ51gli9f9T/YzWI3KJtPtofAa0= Subject key identifier: 86:2E:D5:35:8E:E8:74:17:80:B8:91:8D:A8:13:B9:FA:1B:74:E3:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DCE93072F599A5212BE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.51.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:dc:e9:30:72:f5:99:a5:21:2b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=930a0c47-70a9-4b0f-9bc6-471c39df232e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:67:bd:6d:e0:ce:91:c1:1a:fd:a3:b7:f2:d9: 0e:3a:d6:ad:33:e7:1f:db:5c:5a:a3:d7:7e:6e:0f: 8f:ea:81:89:e8:b9:58:d2:8d:e0:16:17:47:43:0f: 2e:91:7d:8b:fc:18:13:6e:b6:97:7a:66:0c:b1:90: 99:4f:c8:a5:b9:b2:e6:3f:e7:fb:c2:dc:07:8f:b0: 0f:ce:d5:ff:29:82:fa:cd:ab:1b:d4:43:c2:d9:3c: c2:b3:03:59:ec:c3:20:3f:2c:25:82:60:be:fe:1a: fe:9b:ca:c0:0a:be:78:40:d6:97:5e:f9:19:78:ad: 9c:35:9a:3f:3c:63:0b:d0:9f:aa:56:e2:21:95:7f: 00:7a:70:a1:f3:3d:c7:15:56:38:10:e9:c1:94:47: 23:b9:4c:c1:50:9c:e2:c6:7c:13:c8:30:f8:78:37: ab:29:99:48:c5:6e:fc:59:28:b2:8c:76:7d:b4:9b: 48:84:68:f8:92:4c:e6:e5:0a:e7:62:b2:13:c0:d1: e3:66:12:9f:e9:e3:e8:f8:ae:5a:7c:c5:cb:3c:71: 14:6a:84:ed:48:f3:72:bc:db:18:f0:9e:15:aa:69: 37:44:df:3e:93:49:5f:58:e0:4d:7b:94:06:6f:de: 91:1e:6a:8c:d0:4c:4c:43:8c:1e:08:fc:49:61:f6: c3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:2E:D5:35:8E:E8:74:17:80:B8:91:8D:A8:13:B9:FA:1B:74:E3:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/438239bd-ffa5-3739-be76-61c3fe8b13b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.51.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:3a:15:12:de:c8:d1:c6:6e:91:04:7a:e4:4f:68:44:68:b7: 10:cd:63:57:05:8c:ce:09:c1:a0:6f:74:f6:49:44:3c:cd:11: c5:5c:13:e8:2c:01:5e:22:73:47:04:16:69:9b:f4:0d:b7:35: 30:7c:c1:8b:17:c9:79:b7:4c:a7:fa:33:09:aa:9e:8b:13:d6: 5c:54:8e:c2:65:76:0c:65:5f:80:4d:4a:bf:e1:86:5c:80:25: 12:ce:8a:e7:9f:56:e1:58:01:ec:63:fa:f2:21:20:c0:ba:f4: 75:5e:c3:32:05:96:fd:e1:b3:c1:83:e6:98:64:41:44:50:ed: 42:75:47:0e:b2:52:81:31:41:f4:9f:74:c9:c1:de:49:6c:28: cb:16:24:a9:23:05:a9:75:74:3f:48:e4:57:e5:60:14:dd:84: 5c:98:c6:ef:10:33:1b:a0:35:54:45:db:31:ea:1f:1e:e7:27: 3e:dc:19:ed:b0:bf:02:8d:64:6e:c2:10:fc:ea:de:c8:e7:82: 25:0f:9c:b8:f9:ba:09:c8:f5:de:fd:81:da:54:c4:d1:80:ec: 84:4a:d0:cb:78:15:b7:f7:5c:5e:63:ca:ac:4a:7f:59:d7:f1: 6f:85:f0:6f:2e:06:42:22:a6:52:57:86:6c:72:84:11:1d:fe: 78:c6:71:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdzpMHL1maUhK+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTMwYTBjNDctNzBhOS00YjBmLTliYzYtNDcxYzM5ZGYyMzJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWe9beDOkcEa/aO38tkOOtatM+cf21xao9d+ bg+P6oGJ6LlY0o3gFhdHQw8ukX2L/BgTbraXemYMsZCZT8ilubLmP+f7wtwHj7AP ztX/KYL6zasb1EPC2TzCswNZ7MMgPywlgmC+/hr+m8rACr54QNaXXvkZeK2cNZo/ PGML0J+qVuIhlX8AenCh8z3HFVY4EOnBlEcjuUzBUJzixnwTyDD4eDerKZlIxW78 WSiyjHZ9tJtIhGj4kkzm5QrnYrITwNHjZhKf6ePo+K5afMXLPHEUaoTtSPNyvNsY 8J4Vqmk3RN8+k0lfWOBNe5QGb96RHmqM0ExMQ4weCPxJYfbD0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIYu1TWO6HQXgLiRjagTufobdOMLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDM4MjM5YmQtZmZhNS0z NzM5LWJlNzYtNjFjM2ZlOGIxM2I4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANI6FRLeyNHGbpEEeuRPaERotxDNY1cFjM4JwaBvdPZJRDzNEcVcE+gs AV4ic0cEFmmb9A23NTB8wYsXyXm3TKf6MwmqnosT1lxUjsJldgxlX4BNSr/hhlyA JRLOiuefVuFYAexj+vIhIMC69HVewzIFlv3hs8GD5phkQURQ7UJ1Rw6yUoExQfSf dMnB3klsKMsWJKkjBal1dD9I5FflYBTdhFyYxu8QMxugNVRF2zHqHx7nJz7cGe2w vwKNZG7CEPzq3sjngiUPnLj5ugnI9d79gdpUxNGA7IRK0Mt4Fbf3XF5jyqxKf1nX 8W+F8G8uBkIiplJXhmxyhBEd/njGce4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:46 2025 by rpki-client