$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa File: 4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa (raw, json) Hash identifier: t0loxoCm4IXBPgWt1OcnQnl189NoJSmBvVyBL+4vmRQ= Subject key identifier: B9:40:2E:DD:2A:E1:69:9A:6F:02:84:44:F4:16:3D:69:A0:A5:3E:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DAE7513D6C2524B55C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:da:e7:51:3d:6c:25:24:b5:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=797e5e75-f368-4e6c-a9ad-4dc434bc0241 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:2e:20:40:c1:73:7d:d8:4b:2f:78:8a:52:18: de:98:0a:c3:ab:0f:71:1a:4f:25:58:df:0a:57:71: bb:83:06:c2:d2:4d:d2:46:b2:0b:2b:34:89:3e:b8: 0f:a8:c8:c3:5c:d0:b1:bb:57:10:ea:e4:04:97:99: 35:a4:cc:d6:a6:55:d3:c3:9e:ae:50:83:1a:4f:b5: e9:93:2f:e6:44:4e:34:5f:1a:6f:17:32:8e:e3:5c: fd:48:e5:59:0c:39:f1:57:f9:e5:00:7e:0c:1c:bd: a5:9f:9c:be:0e:3f:5e:2e:5a:1a:fe:c7:5b:74:03: 8a:8b:56:b4:94:cd:9d:bb:80:07:0a:04:f0:20:6e: 4f:95:3c:95:bf:30:d7:bb:2c:a0:c8:db:8c:72:88: 83:fb:9a:29:fd:cf:ea:4e:22:8d:5c:ae:d3:d6:6b: 28:7c:05:bb:90:f2:82:9e:2b:91:e5:d4:d0:bc:12: fd:dd:0d:c5:d0:3b:9a:62:d5:15:92:52:a1:9e:90: 1c:56:b2:ab:64:17:85:ca:63:57:70:66:94:35:f4: b4:cf:3d:2a:9a:c0:0c:4b:dd:73:83:ec:d6:24:56: 8a:98:9a:68:1a:29:a0:bd:b8:3e:a6:ca:c5:47:82: 8a:49:ba:d6:a1:69:50:9e:bc:db:08:85:8f:28:e1: 3f:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:40:2E:DD:2A:E1:69:9A:6F:02:84:44:F4:16:3D:69:A0:A5:3E:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b88fca3-866c-3556-86aa-5a5ec0d904cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d4:74:e5:7a:5e:5f:0f:99:a8:fc:f2:bb:20:b3:17:93:46:72: 8a:ff:04:45:1d:23:8d:0c:32:66:0c:2d:73:b7:49:94:7d:8f: d6:31:d2:34:4d:0b:f3:03:bb:c9:46:d6:e1:20:bd:09:73:84: 96:15:38:f8:1a:d0:0e:f7:9d:5c:bc:a3:bb:7c:90:a6:52:7e: fe:6e:18:9b:b1:37:96:4d:1e:73:d5:2a:90:64:fc:8c:5e:d9: 3e:b6:23:62:f3:61:2b:7a:c7:7b:80:cc:47:0c:0e:28:b2:73: b6:2b:4b:da:49:e0:d9:05:f7:22:f1:2c:1d:01:e6:9a:7a:6a: d7:8c:07:24:30:13:9c:f9:d5:70:2d:bb:45:34:0d:9b:15:d0: 77:46:f2:98:35:42:0f:36:8a:a1:d4:2b:57:5d:5d:d9:f6:75: 39:9e:dc:5f:e3:1d:66:93:80:09:d1:f5:77:54:c8:1b:05:3b: e9:95:4a:92:82:20:9f:8b:69:b1:10:00:3f:d7:17:20:ee:e8: 6f:38:62:c4:90:e7:cc:2c:1f:5e:9b:7a:b0:db:07:76:48:c2: 65:cb:4e:1f:cc:cb:b8:b4:0e:51:94:8f:12:2c:e3:d7:01:90: de:d1:9a:74:8f:f5:a4:3d:3c:bd:c0:41:aa:43:10:c4:89:54: e2:81:69:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdrnUT1sJSS1XAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Nzk3ZTVlNzUtZjM2OC00ZTZjLWE5YWQtNGRjNDM0YmMwMjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAli4gQMFzfdhLL3iKUhjemArDqw9xGk8lWN8K V3G7gwbC0k3SRrILKzSJPrgPqMjDXNCxu1cQ6uQEl5k1pMzWplXTw56uUIMaT7Xp ky/mRE40XxpvFzKO41z9SOVZDDnxV/nlAH4MHL2ln5y+Dj9eLloa/sdbdAOKi1a0 lM2du4AHCgTwIG5PlTyVvzDXuyygyNuMcoiD+5op/c/qTiKNXK7T1msofAW7kPKC niuR5dTQvBL93Q3F0DuaYtUVklKhnpAcVrKrZBeFymNXcGaUNfS0zz0qmsAMS91z g+zWJFaKmJpoGimgvbg+psrFR4KKSbrWoWlQnrzbCIWPKOE/vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlALt0q4WmabwKERPQWPWmgpT5kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGI4OGZjYTMtODY2Yy0z NTU2LTg2YWEtNWE1ZWMwZDkwNGNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANR05XpeXw+ZqPzyuyCzF5NGcor/BEUdI40MMmYMLXO3SZR9j9Yx0jRN C/MDu8lG1uEgvQlzhJYVOPga0A73nVy8o7t8kKZSfv5uGJuxN5ZNHnPVKpBk/Ixe 2T62I2LzYSt6x3uAzEcMDiiyc7YrS9pJ4NkF9yLxLB0B5pp6ateMByQwE5z51XAt u0U0DZsV0HdG8pg1Qg82iqHUK1ddXdn2dTme3F/jHWaTgAnR9XdUyBsFO+mVSpKC IJ+LabEQAD/XFyDu6G84YsSQ58wsH16berDbB3ZIwmXLTh/My7i0DlGUjxIs49cB kN7RmnSP9aQ9PL3AQapDEMSJVOKBae0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:10 2025 by rpki-client