$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa File: 442ff00f-ad65-3434-8575-a778d87e141b.roa (raw, json) Hash identifier: vLm9SWurUyLk+DMOpbOUWSImmFDQchpQ9fZIEkFOwnI= Subject key identifier: 77:F6:6A:CC:4A:3E:6A:EC:0E:B7:96:F2:57:41:2C:D0:37:B2:B8:FC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DEF08D35E0DD0ADD0500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:de:f0:8d:35:e0:dd:0a:dd:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cc30449a-1b19-4d69-bc0f-508e7fae766e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:9f:ed:48:de:32:a0:6f:bf:ff:bb:d6:71:b8: d7:66:ce:9e:75:f1:9a:26:e2:31:e4:b3:bd:32:16: d8:b2:cc:af:60:9a:f6:16:8e:bd:88:6c:47:e3:b9: 0a:5e:90:7e:da:de:3d:75:b6:8f:49:37:1c:35:3a: 6b:b6:af:af:d8:2f:59:5b:67:4d:fe:f7:e4:69:e6: b9:16:44:ce:28:45:7b:82:b4:84:5e:7f:69:08:91: 8e:a8:8c:ca:0f:7f:af:3a:78:fc:a7:17:6d:cb:d6: 71:77:18:38:3a:ef:cf:df:0b:70:cb:86:43:05:31: 68:17:71:6f:45:b7:dd:d3:2f:97:47:03:68:15:4c: 3d:48:ca:38:49:a3:0c:2d:df:3b:4d:ec:3e:5c:4d: 38:22:46:ed:a5:a5:c5:c1:2c:35:b7:c1:a8:32:39: 18:23:1a:8c:2d:d9:e6:6c:fe:55:f1:4f:a7:53:b6: 7d:7c:e0:82:79:db:49:c1:ed:3b:9e:32:14:9d:72: 39:f3:92:90:7b:de:92:88:07:f7:84:40:ad:90:4b: cd:3e:de:72:39:bf:53:b9:18:a9:9f:f5:01:29:67: 9b:c5:45:7e:0d:73:ae:20:2a:1b:7d:e3:b3:9d:02: 26:9a:18:63:fe:c9:c3:a3:e2:67:e0:6b:cc:4b:5a: 51:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:F6:6A:CC:4A:3E:6A:EC:0E:B7:96:F2:57:41:2C:D0:37:B2:B8:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:7a:03:b9:ec:ee:fc:d3:f8:bf:b3:c1:62:aa:cc:b8:d9:90: 44:69:ae:45:de:f9:11:c8:4b:9a:64:38:d8:07:30:76:ca:5a: 79:ac:d8:b4:63:db:36:70:1e:9d:6c:df:c9:1f:bc:8a:4c:db: b8:75:db:95:31:04:67:98:e7:5a:fc:4f:0c:ba:72:97:55:f6: 4c:3d:be:0b:07:41:f6:17:96:ce:03:96:22:e3:5d:09:eb:a7: d9:12:c9:a0:b9:0a:d7:65:39:4e:f8:4c:1c:9d:87:40:66:26: 87:05:8d:26:3d:dd:e2:31:8a:45:86:e6:4a:8b:89:c6:0c:ca: b5:c1:95:08:de:51:f4:54:8a:48:b3:bd:2e:b4:19:a6:15:ce: df:67:5e:49:92:5f:0c:0f:95:0b:3f:06:72:99:99:31:bd:73: 9e:5f:75:61:a8:7a:88:e5:c2:da:c0:b1:c9:71:e2:92:e9:f9: 4f:47:e6:43:18:8d:43:24:f8:a1:09:69:ca:68:01:89:57:51: fc:24:e6:bd:4d:26:46:21:cb:45:1a:e2:9b:8c:ea:d6:74:a3: c3:ce:ff:02:a1:6a:ab:64:58:30:74:83:05:99:9b:92:37:52: 73:e5:c8:91:42:e6:8c:f2:82:f2:b0:81:84:b9:d4:c7:21:59: f7:5c:81:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd7wjTXg3QrdBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2MzMDQ0OWEtMWIxOS00ZDY5LWJjMGYtNTA4ZTdmYWU3NjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5/tSN4yoG+//7vWcbjXZs6edfGaJuIx5LO9 MhbYssyvYJr2Fo69iGxH47kKXpB+2t49dbaPSTccNTprtq+v2C9ZW2dN/vfkaea5 FkTOKEV7grSEXn9pCJGOqIzKD3+vOnj8pxdty9Zxdxg4Ou/P3wtwy4ZDBTFoF3Fv Rbfd0y+XRwNoFUw9SMo4SaMMLd87Tew+XE04IkbtpaXFwSw1t8GoMjkYIxqMLdnm bP5V8U+nU7Z9fOCCedtJwe07njIUnXI585KQe96SiAf3hECtkEvNPt5yOb9TuRip n/UBKWebxUV+DXOuICobfeOznQImmhhj/snDo+Jn4GvMS1pRKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHf2asxKPmrsDreW8ldBLNA3srj8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQyZmYwMGYtYWQ2NS0z NDM0LTg1NzUtYTc3OGQ4N2UxNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJF6A7ns7vzT+L+zwWKqzLjZkERprkXe+RHIS5pkONgHMHbKWnms2LRj 2zZwHp1s38kfvIpM27h125UxBGeY51r8Twy6cpdV9kw9vgsHQfYXls4DliLjXQnr p9kSyaC5CtdlOU74TBydh0BmJocFjSY93eIxikWG5kqLicYMyrXBlQjeUfRUikiz vS60GaYVzt9nXkmSXwwPlQs/BnKZmTG9c55fdWGoeojlwtrAsclx4pLp+U9H5kMY jUMk+KEJacpoAYlXUfwk5r1NJkYhy0Ua4puM6tZ0o8PO/wKhaqtkWDB0gwWZm5I3 UnPlyJFC5ozygvKwgYS51MchWfdcgbA= -----END CERTIFICATE-----Generated at Fri Apr 11 22:37:56 2025 by rpki-client