$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa File: 53daf607-8fc8-3350-8063-ec3143c32ddd.roa (raw, json) Hash identifier: VoMqB9/3Hin/mVWjy9XCrKzi866FxHmMJQKFPdrJXKM= Subject key identifier: BA:AD:37:DA:21:9A:C0:EA:79:EC:F8:2D:8D:EC:89:7D:C4:7E:3E:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DBFF8D83F30B7E2145C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:db:ff:8d:83:f3:0b:7e:21:45:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3c4ddb9a-2861-4306-a257-7145297bed4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:39:19:96:59:a7:cb:86:80:3f:0f:b3:0d:71: 0a:49:2f:06:fa:97:8a:80:d9:2d:50:e0:35:38:5c: 92:29:5a:c2:8f:df:3f:a2:cb:e3:86:50:b7:6e:97: 32:1c:ca:13:6e:82:af:a0:47:3c:68:bb:6d:e7:16: 70:41:98:97:e8:26:e5:98:88:97:c3:b5:6f:39:04: 8d:57:dd:4c:c7:b7:95:d4:4a:81:2d:64:db:8a:63: 93:d8:0c:2a:a3:2b:89:1d:ce:5d:60:be:ab:9b:2b: 52:c6:50:ab:19:37:bf:d4:b8:72:fc:d5:95:d9:01: 4c:6b:17:8a:7b:14:81:27:ba:5c:68:ae:aa:1d:57: 73:61:80:5e:43:e7:36:af:c1:d4:ab:4b:b1:65:5b: b8:3a:2d:ae:43:04:12:13:82:e9:53:92:39:62:d3: 83:ae:ae:60:59:04:a3:d9:85:83:ab:64:89:c0:31: 08:44:75:73:c9:14:5a:02:05:8d:1f:ea:48:ce:94: 61:c3:de:2c:7f:b4:bb:57:2a:af:a9:2f:26:07:86: b0:f3:5e:91:bc:19:7a:f3:26:e3:ea:2f:0a:95:41: 53:f7:54:4b:31:3d:a2:7b:cd:aa:23:95:4b:01:27: 4e:f2:10:95:ef:a6:f1:44:83:ee:f7:58:30:4d:e9: b0:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:AD:37:DA:21:9A:C0:EA:79:EC:F8:2D:8D:EC:89:7D:C4:7E:3E:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53daf607-8fc8-3350-8063-ec3143c32ddd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:4c:4c:cd:d2:5c:7d:30:68:1e:a1:e7:8b:72:ea:4d:60:9c: 2e:dc:34:8b:5d:f8:f5:61:e2:c6:9f:ae:d3:f3:88:74:10:b4: 5e:d1:73:77:b2:c5:02:24:51:c6:6f:52:5f:76:cd:a0:64:0c: 87:b5:28:4d:7a:ea:47:b0:1b:4f:b3:61:84:fc:66:30:b1:56: ad:3e:3c:24:7b:56:38:b3:47:de:5a:76:13:5c:bc:00:1d:17: 33:5c:52:6c:2e:2d:4e:44:d8:ee:9b:79:74:00:46:4f:c2:08: a9:96:09:30:4e:48:52:4c:d7:17:88:75:ff:48:58:6a:3c:27: 22:be:22:5f:a8:e2:7d:15:11:f0:95:27:b0:f6:d4:36:ab:03: 75:b7:0a:47:bf:ca:db:06:b5:85:43:99:48:b5:1c:e0:bf:46: cb:f2:82:60:9a:fa:64:83:41:cb:ae:dc:31:d5:87:f1:29:4a: 42:8b:b9:27:60:f3:6a:3b:5e:36:97:19:09:59:8f:a7:85:50: 31:03:f1:bc:3b:85:7e:57:78:6e:8e:1f:cb:89:2c:65:34:17: ab:52:16:9c:04:a1:67:6f:04:b3:d1:ae:8f:4f:b7:55:f7:af: b1:f5:89:a4:04:f2:db:a0:b8:52:95:9b:e6:78:dd:3f:60:46: ff:5a:9a:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdv/jYPzC34hRcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2M0ZGRiOWEtMjg2MS00MzA2LWEyNTctNzE0NTI5N2JlZDRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4zkZllmny4aAPw+zDXEKSS8G+peKgNktUOA1 OFySKVrCj98/osvjhlC3bpcyHMoTboKvoEc8aLtt5xZwQZiX6CblmIiXw7VvOQSN V91Mx7eV1EqBLWTbimOT2AwqoyuJHc5dYL6rmytSxlCrGTe/1Lhy/NWV2QFMaxeK exSBJ7pcaK6qHVdzYYBeQ+c2r8HUq0uxZVu4Oi2uQwQSE4LpU5I5YtODrq5gWQSj 2YWDq2SJwDEIRHVzyRRaAgWNH+pIzpRhw94sf7S7VyqvqS8mB4aw816RvBl68ybj 6i8KlUFT91RLMT2ie82qI5VLASdO8hCV76bxRIPu91gwTemwpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLqtN9ohmsDqeez4LY3siX3Efj4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTNkYWY2MDctOGZjOC0z MzUwLTgwNjMtZWMzMTQzYzMyZGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZMTM3SXH0waB6h54ty6k1gnC7cNItd+PVh4safrtPziHQQtF7Rc3ey xQIkUcZvUl92zaBkDIe1KE166kewG0+zYYT8ZjCxVq0+PCR7VjizR95adhNcvAAd FzNcUmwuLU5E2O6beXQARk/CCKmWCTBOSFJM1xeIdf9IWGo8JyK+Il+o4n0VEfCV J7D21DarA3W3Cke/ytsGtYVDmUi1HOC/RsvygmCa+mSDQcuu3DHVh/EpSkKLuSdg 82o7XjaXGQlZj6eFUDED8bw7hX5XeG6OH8uJLGU0F6tSFpwEoWdvBLPRro9Pt1X3 r7H1iaQE8tuguFKVm+Z43T9gRv9amj8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:56 2025 by rpki-client