$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4764f622-d284-3683-bb0a-1d1f5c82a42d.roa File: 4764f622-d284-3683-bb0a-1d1f5c82a42d.roa (raw, json) Hash identifier: VsCcyLlIqGoWwHnUJ7gBIdb3/B7y4B+jjiW8AmBhX9o= Subject key identifier: D5:14:8D:D7:4F:E4:D6:2C:28:81:04:0E:B7:12:10:21:81:73:AD:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814443D6356F21040DC860 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4764f622-d284-3683-bb0a-1d1f5c82a42d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:44:43:d6:35:6f:21:04:0d:c8:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=73888031-20a8-49b2-a667-d12abb865a57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:97:b1:97:8c:c6:e6:41:33:04:d7:dc:84:17: e3:a7:e9:7a:6b:fe:32:89:40:a7:f8:26:1a:d3:4c: 7c:ba:4e:89:40:70:b4:3a:d4:69:29:ff:f3:bf:f7: 84:76:a1:c1:95:c0:35:1d:0b:c3:ae:78:15:7d:3b: 17:02:23:08:a8:2f:29:a3:28:c2:cc:a2:52:54:90: d8:72:95:66:36:eb:f1:29:91:5b:b0:76:ca:e7:23: 7f:50:67:e2:d7:f2:fc:89:45:40:4e:da:90:35:d2: de:38:80:cc:84:1b:c7:ae:c1:cf:b8:d8:4c:df:05: 0a:fb:c7:38:c4:b2:36:ed:cf:05:af:4f:95:08:cd: e5:74:db:4f:25:d4:37:27:5e:a5:2b:22:01:9f:2a: cc:36:9c:87:86:7b:41:bd:2e:18:65:65:19:2c:21: 23:48:67:36:a5:a0:0a:b9:86:b0:ed:09:12:b6:38: a5:a1:12:2f:dd:2c:f1:53:21:17:21:a1:b9:77:5e: dc:c9:07:31:42:10:48:ea:41:95:14:0e:e6:9f:cf: 9c:4a:0b:0e:79:38:77:36:1b:a8:5e:5d:54:78:e8: 56:45:43:5b:55:df:79:a5:df:44:b4:69:28:ac:8b: cd:4f:70:20:ea:30:13:32:cd:9b:40:b2:ad:a3:5f: f2:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:14:8D:D7:4F:E4:D6:2C:28:81:04:0E:B7:12:10:21:81:73:AD:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4764f622-d284-3683-bb0a-1d1f5c82a42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:e9:7f:e0:d0:19:06:7a:5b:ef:2a:f7:49:aa:2f:fd:e9:55: 14:75:bc:de:6f:d6:53:39:25:87:bf:47:ec:c7:71:39:d7:52: bf:dd:45:8d:5d:c9:cb:72:f8:de:a2:12:9e:ac:66:70:d2:c1: f2:92:66:3a:55:8e:eb:e7:de:77:a4:6a:a1:79:1d:b4:e9:5e: af:2c:3e:81:bf:af:9e:88:37:55:eb:b4:43:05:03:46:5b:f8: 2a:b7:54:3b:84:a7:bb:45:c3:4d:9d:c4:e3:e1:7d:38:a6:47: b4:0a:3a:97:8f:37:c7:6c:9f:85:fe:2b:cd:e2:6b:e3:00:3b: 90:be:7b:14:63:80:ae:17:39:77:28:30:72:97:76:38:c0:ac: fd:8f:48:0b:ba:2f:7c:a3:fd:ea:b4:53:9f:02:ea:c8:9f:b4: f7:a3:df:00:2f:79:9b:56:ee:ed:46:69:fc:9a:dc:8b:ae:7d: c5:2f:e3:95:72:05:89:22:df:4c:3f:c0:e0:14:57:a4:23:d2: 16:28:bc:97:5a:ff:4a:ea:e3:66:c6:57:d7:6a:c2:10:94:74: 5d:da:88:63:20:e6:4d:15:b3:d2:7a:28:fd:e4:dc:f0:df:24: 94:1f:4c:0e:0c:b0:e8:7a:89:65:a2:b4:1b:f1:8e:73:c0:22: 94:dc:c2:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgURD1jVvIQQNyGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzM4ODgwMzEtMjBhOC00OWIyLWE2NjctZDEyYWJiODY1YTU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJexl4zG5kEzBNfchBfjp+l6a/4yiUCn+CYa 00x8uk6JQHC0OtRpKf/zv/eEdqHBlcA1HQvDrngVfTsXAiMIqC8poyjCzKJSVJDY cpVmNuvxKZFbsHbK5yN/UGfi1/L8iUVATtqQNdLeOIDMhBvHrsHPuNhM3wUK+8c4 xLI27c8Fr0+VCM3ldNtPJdQ3J16lKyIBnyrMNpyHhntBvS4YZWUZLCEjSGc2paAK uYaw7QkStjiloRIv3SzxUyEXIaG5d17cyQcxQhBI6kGVFA7mn8+cSgsOeTh3Nhuo Xl1UeOhWRUNbVd95pd9EtGkorIvNT3Ag6jATMs2bQLKto1/yqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUUjddP5NYsKIEEDrcSECGBc60IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDc2NGY2MjItZDI4NC0z NjgzLWJiMGEtMWQxZjVjODJhNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACDpf+DQGQZ6W+8q90mqL/3pVRR1vN5v1lM5JYe/R+zHcTnXUr/dRY1d ycty+N6iEp6sZnDSwfKSZjpVjuvn3nekaqF5HbTpXq8sPoG/r56IN1XrtEMFA0Zb +Cq3VDuEp7tFw02dxOPhfTimR7QKOpePN8dsn4X+K83ia+MAO5C+exRjgK4XOXco MHKXdjjArP2PSAu6L3yj/eq0U58C6siftPej3wAveZtW7u1Gafya3IuufcUv45Vy BYki30w/wOAUV6Qj0hYovJda/0rq42bGV9dqwhCUdF3aiGMg5k0Vs9J6KP3k3PDf JJQfTA4MsOh6iWWitBvxjnPAIpTcwlc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:24 2025 by rpki-client