$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa File: 53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa (raw, json) Hash identifier: tAu17jJsUmB9lLVLwkCz3Wz9sYkcIltp+zSAs99DGb0= Subject key identifier: 1B:48:5C:14:79:F0:F6:08:30:0B:A2:36:A7:D6:AB:4A:DB:A1:8A:C3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E11E58D29B2C30133CA0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e1:1e:58:d2:9b:2c:30:13:3c:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e56d065b-f3fc-4f12-9fc6-35d2d6fb70b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e9:44:2a:f2:95:76:bd:4b:84:0a:60:ac:51: fa:44:e5:32:a4:a4:77:86:80:fa:25:aa:1d:c1:09: 10:89:98:a3:2e:b2:15:17:2f:fb:cf:2c:aa:39:1e: 75:5f:56:65:e8:f1:67:6a:6a:a1:27:4b:a1:00:8f: 85:28:ee:59:eb:0c:67:c5:f3:59:73:90:7d:f0:84: cc:b2:a6:90:ed:75:99:3f:ac:f0:d7:f3:0f:82:09: 34:e8:a4:50:86:8e:f5:25:63:15:59:8b:7d:84:bd: 4e:b2:16:82:75:85:75:77:b4:ea:ea:8a:af:3c:08: 6d:10:d0:65:e0:90:6d:81:7e:79:87:78:fb:fd:50: d3:70:bb:40:cb:b9:7f:fc:58:6b:a2:dd:d6:17:06: 9c:87:8d:82:db:25:eb:7e:92:35:48:f9:9e:6f:65: 54:4e:63:92:c6:47:93:ba:9a:57:4c:64:9f:21:91: 0e:ba:75:e9:af:99:30:b5:16:90:47:f2:34:dd:80: 56:d0:11:be:62:b8:f7:0b:17:e2:9e:f2:d5:98:bf: 0a:92:45:4c:ff:92:f1:f5:d5:d9:1f:52:1f:34:8b: e3:38:93:71:06:c1:13:25:c0:5d:46:e0:75:90:34: 30:ff:18:52:5f:d2:5b:c9:e5:c4:27:1a:19:23:02: 13:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:48:5C:14:79:F0:F6:08:30:0B:A2:36:A7:D6:AB:4A:DB:A1:8A:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53d3eec5-52d6-3d16-91a8-d715f4ebc5a2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:e8:ca:47:7e:ba:4f:96:24:86:82:9c:47:27:1f:0b:90:68: dd:77:8e:0c:c8:06:09:a3:bb:7a:df:28:c0:12:6f:fa:4b:dd: b8:4e:6f:42:23:19:35:10:2a:5b:a9:6b:eb:8a:83:b7:09:61: 93:86:98:2a:e5:c5:ef:5c:9e:c3:56:f3:6f:cb:cf:37:7e:a9: 3e:17:d6:29:bc:9e:17:14:a6:c6:b0:77:c6:d8:c8:a8:a6:a4: 38:1f:59:58:23:5c:2e:c7:81:6b:92:5e:16:bd:b3:5b:85:04: c7:42:4e:0a:1e:07:6b:4a:81:50:95:08:ee:ca:61:d9:f1:be: f0:97:4c:bb:07:20:6f:46:4f:69:53:42:fa:1e:fc:c4:f5:06: f5:6f:24:a4:71:17:fb:04:24:56:11:d2:34:58:11:9f:cd:32: c2:c5:f8:af:7c:ac:3e:d3:fd:94:97:ed:4a:57:80:1f:cf:04: 2f:59:1c:3b:cb:85:3f:a1:93:8f:4e:73:e4:61:2d:4f:0e:4c: c8:f2:a5:df:fc:da:01:1d:41:0c:26:bf:4e:dc:41:e6:9f:be: d2:80:5e:35:95:70:86:36:93:8b:e0:f7:e4:22:2a:83:ca:fd: 0a:88:b9:9e:78:3c:d3:c9:a7:14:0b:0a:c9:c8:84:0d:7a:6e: 7e:04:5f:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeEeWNKbLDATPKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTU2ZDA2NWItZjNmYy00ZjEyLTlmYzYtMzVkMmQ2ZmI3MGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzOlEKvKVdr1LhApgrFH6ROUypKR3hoD6Jaod wQkQiZijLrIVFy/7zyyqOR51X1Zl6PFnamqhJ0uhAI+FKO5Z6wxnxfNZc5B98ITM sqaQ7XWZP6zw1/MPggk06KRQho71JWMVWYt9hL1OshaCdYV1d7Tq6oqvPAhtENBl 4JBtgX55h3j7/VDTcLtAy7l//Fhrot3WFwach42C2yXrfpI1SPmeb2VUTmOSxkeT uppXTGSfIZEOunXpr5kwtRaQR/I03YBW0BG+Yrj3CxfinvLVmL8KkkVM/5Lx9dXZ H1IfNIvjOJNxBsETJcBdRuB1kDQw/xhSX9JbyeXEJxoZIwITlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBtIXBR58PYIMAuiNqfWq0rboYrDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTNkM2VlYzUtNTJkNi0z ZDE2LTkxYTgtZDcxNWY0ZWJjNWEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjoykd+uk+WJIaCnEcnHwuQaN13jgzIBgmju3rfKMASb/pL3bhOb0Ij GTUQKlupa+uKg7cJYZOGmCrlxe9cnsNW82/Lzzd+qT4X1im8nhcUpsawd8bYyKim pDgfWVgjXC7HgWuSXha9s1uFBMdCTgoeB2tKgVCVCO7KYdnxvvCXTLsHIG9GT2lT Qvoe/MT1BvVvJKRxF/sEJFYR0jRYEZ/NMsLF+K98rD7T/ZSX7UpXgB/PBC9ZHDvL hT+hk49Oc+RhLU8OTMjypd/82gEdQQwmv07cQeafvtKAXjWVcIY2k4vg9+QiKoPK /QqIuZ54PNPJpxQLCsnIhA16bn4EXwo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:08:20 2025 by rpki-client