$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5502b859-d951-3cc1-965c-4b7ec3e6649e.roa File: 5502b859-d951-3cc1-965c-4b7ec3e6649e.roa (raw, json) Hash identifier: 9QjQUQRqxqmvledF89a8xmJfOqQ2UsdTGXVnFaXOZc0= Subject key identifier: D7:36:89:A0:5A:C6:03:EC:C5:90:FD:6E:1B:31:BE:C2:B7:09:30:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DE49987F19D9248B9100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5502b859-d951-3cc1-965c-4b7ec3e6649e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:de:49:98:7f:19:d9:24:8b:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=667c89c5-947b-41d6-972b-a7b3b4411975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:59:56:22:59:a7:d3:d0:f1:dd:e1:e8:80:89: 7e:1a:14:5c:8b:b9:f3:b8:30:a9:c3:47:9e:78:5b: 1d:a8:f1:a2:6f:40:66:a8:80:66:0d:97:9b:38:0b: 1d:64:33:e3:77:6a:31:9b:c0:49:fe:17:d4:bd:9d: d7:30:15:ad:40:30:a8:3a:d0:7b:71:14:7c:84:0f: 14:d2:9c:a2:7e:4a:fe:65:b2:06:3f:b8:c4:d6:95: 55:15:b4:b7:1c:f6:c9:05:fb:6c:a7:92:33:65:aa: 3f:1e:ac:8a:0d:f2:75:1e:f7:61:20:0e:2a:35:ae: 0e:07:3e:37:2a:04:e7:28:11:3c:27:ab:7b:35:2b: c4:73:2d:82:db:d4:3a:9c:05:84:74:50:15:b4:1c: e0:3b:a4:a8:1f:3b:65:b1:5f:53:eb:0c:ee:24:d8: 14:fb:b4:4c:f9:14:92:09:09:bc:b0:e9:e2:88:fc: da:06:48:bb:33:7d:f1:af:24:e2:f0:39:5a:e7:64: 5b:65:29:6b:c5:f6:4d:44:25:c3:94:2c:5f:ad:b5: 8c:32:5d:b9:e3:37:5d:0c:b9:08:f1:8f:19:59:7d: 06:a0:98:36:33:4d:5c:67:e5:3a:5e:b5:df:10:ca: 86:1a:b5:90:2a:af:a2:21:df:66:1d:f7:37:cd:a8: 0c:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:36:89:A0:5A:C6:03:EC:C5:90:FD:6E:1B:31:BE:C2:B7:09:30:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5502b859-d951-3cc1-965c-4b7ec3e6649e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:6e:ef:ea:f6:bd:96:d9:28:2b:b9:24:5e:92:6c:1c:4e:5c: 80:97:8d:19:56:86:de:8b:e8:b3:ad:06:53:6b:03:df:44:dc: cc:d0:35:12:65:2f:77:14:5c:ac:96:67:14:96:ef:26:e6:07: 17:fb:c8:be:c0:01:3f:6f:25:89:89:e3:68:ba:bf:4d:c6:45: 2e:60:e4:8b:42:48:a6:44:20:37:1e:01:a6:81:25:76:03:55: fe:44:a5:66:02:99:84:a5:2d:6f:71:ef:6b:0d:dd:ef:b9:42: 83:b9:3a:29:36:e1:5d:6c:00:b3:b4:38:e3:29:8b:36:17:fd: 35:61:8f:81:77:20:e6:bf:9d:89:26:6e:16:23:6d:1e:68:0a: 7f:84:a8:34:2f:8f:60:bd:e4:6b:51:07:d6:bc:0e:5e:f1:4c: 78:ad:28:30:c6:33:3b:ba:83:3e:e5:fd:ec:8f:ee:e7:d2:1c: e3:f9:bb:d3:bd:98:47:15:1c:97:60:70:4b:39:94:2e:2f:be: 9f:05:0c:0c:70:33:3b:ba:45:60:c6:4f:10:6d:6e:67:ed:f5: e1:b7:75:42:3e:d5:e5:db:e3:63:29:94:b0:e9:d6:5d:82:ba: 19:33:4c:23:ec:f4:77:2d:99:70:dc:17:06:4f:e2:72:7b:6a: be:f1:14:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd5JmH8Z2SSLkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjY3Yzg5YzUtOTQ3Yi00MWQ2LTk3MmItYTdiM2I0NDExOTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6llWIlmn09Dx3eHogIl+GhRci7nzuDCpw0ee eFsdqPGib0BmqIBmDZebOAsdZDPjd2oxm8BJ/hfUvZ3XMBWtQDCoOtB7cRR8hA8U 0pyifkr+ZbIGP7jE1pVVFbS3HPbJBftsp5IzZao/HqyKDfJ1HvdhIA4qNa4OBz43 KgTnKBE8J6t7NSvEcy2C29Q6nAWEdFAVtBzgO6SoHztlsV9T6wzuJNgU+7RM+RSS CQm8sOniiPzaBki7M33xryTi8Dla52RbZSlrxfZNRCXDlCxfrbWMMl254zddDLkI 8Y8ZWX0GoJg2M01cZ+U6XrXfEMqGGrWQKq+iId9mHfc3zagMfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc2iaBaxgPsxZD9bhsxvsK3CTBXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTUwMmI4NTktZDk1MS0z Y2MxLTk2NWMtNGI3ZWMzZTY2NDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBu7+r2vZbZKCu5JF6SbBxOXICXjRlWht6L6LOtBlNrA99E3MzQNRJl L3cUXKyWZxSW7ybmBxf7yL7AAT9vJYmJ42i6v03GRS5g5ItCSKZEIDceAaaBJXYD Vf5EpWYCmYSlLW9x72sN3e+5QoO5Oik24V1sALO0OOMpizYX/TVhj4F3IOa/nYkm bhYjbR5oCn+EqDQvj2C95GtRB9a8Dl7xTHitKDDGMzu6gz7l/eyP7ufSHOP5u9O9 mEcVHJdgcEs5lC4vvp8FDAxwMzu6RWDGTxBtbmft9eG3dUI+1eXb42MplLDp1l2C uhkzTCPs9HctmXDcFwZP4nJ7ar7xFMA= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:42 2025 by rpki-client