$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57c3f995-df83-3afa-aeac-7353f1f7daa1.roa File: 57c3f995-df83-3afa-aeac-7353f1f7daa1.roa (raw, json) Hash identifier: pgAO0KIoIDEHq2mtPfyo0v7gchEcc2pyArhe7i+Ma4c= Subject key identifier: AE:79:CD:D8:E3:90:63:D9:37:B3:C2:79:B9:FA:39:92:50:95:55:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58142E4928978F4E36A9740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57c3f995-df83-3afa-aeac-7353f1f7daa1.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:42:e4:92:89:78:f4:e3:6a:97:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9899ef9c-abd8-4a72-b6ac-14544d8ea445 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:10:18:c0:3e:00:94:21:de:a2:b7:30:58:7a: c1:ca:5a:0e:75:7e:6a:f8:63:85:33:c1:d5:b1:89: 08:a1:70:97:dd:c3:5e:21:ff:b3:a2:89:03:33:22: 7d:18:e0:fa:06:27:54:69:b9:dc:07:32:e4:fb:f9: 79:d6:3e:4d:35:24:9a:e1:92:8c:03:7b:9f:b8:ef: 01:bc:59:1d:31:68:18:1a:27:17:e3:84:c1:6a:81: 7d:69:fc:2a:50:1b:e9:dc:4a:98:31:c6:6b:72:12: 7e:72:56:f8:c8:05:5a:23:4e:4b:42:80:05:4d:b4: 2d:22:21:a7:79:01:c6:19:97:f6:e3:7a:07:3b:fe: 5f:1c:cc:d8:e0:be:f6:b1:18:37:89:c0:7c:ec:81: 91:85:87:01:70:0c:7a:10:6c:27:87:e6:df:e9:7d: bd:c5:18:38:b9:d5:96:25:80:32:90:51:8f:2e:87: 38:32:78:97:a0:a2:de:3e:be:e4:4b:a3:25:1b:8a: c0:3a:1d:dd:90:76:dd:3d:48:48:df:41:c7:e0:aa: 56:d2:87:52:0a:5d:a9:4c:03:7d:1e:00:4d:7a:2d: e3:93:90:f9:5b:d0:3a:08:8c:a6:64:1d:05:9e:da: 9d:df:eb:57:cf:fd:dc:74:48:1c:25:62:77:3b:02: fe:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:79:CD:D8:E3:90:63:D9:37:B3:C2:79:B9:FA:39:92:50:95:55:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57c3f995-df83-3afa-aeac-7353f1f7daa1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:95:b5:5e:b7:1f:dd:ae:29:ca:a9:87:e1:36:58:55:32:66: 6b:53:66:c3:dd:93:19:6e:e3:71:e3:9c:35:19:94:c3:a8:d1: c5:45:17:c2:28:45:cb:d8:10:7d:39:fc:6b:a0:93:4b:3f:f7: 79:94:4b:4f:5d:1a:c2:d9:15:93:c2:8a:cc:0e:62:df:71:1c: 00:1d:74:a4:c6:f4:9b:96:bb:dd:ff:89:cd:7c:a0:8e:fa:02: 82:2f:2a:b2:5e:8f:67:62:65:d9:22:e9:2d:a8:00:8c:30:11: b3:a8:a3:80:07:c4:65:6f:72:26:3c:6d:39:9e:14:f0:8b:cd: 5d:94:3f:6c:de:25:e6:9f:6a:80:0e:c2:43:14:c1:31:5e:12: 83:77:19:26:3d:a8:04:75:05:d9:bc:a7:c5:64:d7:93:6e:d6: ec:d1:1f:99:07:fe:b4:cf:5a:72:7d:4c:75:22:b7:c2:aa:da: f2:4f:b2:c9:33:fa:eb:67:e6:18:3d:54:b5:5f:8f:55:04:f1: 79:ff:4e:81:59:5e:47:a0:9e:2c:e3:e2:6c:df:b5:92:ef:65: 22:c9:d6:20:44:df:5d:c4:6b:ed:86:ec:2d:4e:78:9d:05:17: 07:1b:f4:71:e5:95:97:da:32:83:ce:ca:f7:ed:92:fd:a6:23: 2f:1f:60:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgULkkol49ONql0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTg5OWVmOWMtYWJkOC00YTcyLWI2YWMtMTQ1NDRkOGVhNDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhAYwD4AlCHeorcwWHrByloOdX5q+GOFM8HV sYkIoXCX3cNeIf+zookDMyJ9GOD6BidUabncBzLk+/l51j5NNSSa4ZKMA3ufuO8B vFkdMWgYGicX44TBaoF9afwqUBvp3EqYMcZrchJ+clb4yAVaI05LQoAFTbQtIiGn eQHGGZf243oHO/5fHMzY4L72sRg3icB87IGRhYcBcAx6EGwnh+bf6X29xRg4udWW JYAykFGPLoc4MniXoKLePr7kS6MlG4rAOh3dkHbdPUhI30HH4KpW0odSCl2pTAN9 HgBNei3jk5D5W9A6CIymZB0Fntqd3+tXz/3cdEgcJWJ3OwL+FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK55zdjjkGPZN7PCebn6OZJQlVUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTdjM2Y5OTUtZGY4My0z YWZhLWFlYWMtNzM1M2YxZjdkYWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2VtV63H92uKcqph+E2WFUyZmtTZsPdkxlu43HjnDUZlMOo0cVFF8Io RcvYEH05/Gugk0s/93mUS09dGsLZFZPCiswOYt9xHAAddKTG9JuWu93/ic18oI76 AoIvKrJej2diZdki6S2oAIwwEbOoo4AHxGVvciY8bTmeFPCLzV2UP2zeJeafaoAO wkMUwTFeEoN3GSY9qAR1Bdm8p8Vk15Nu1uzRH5kH/rTPWnJ9THUit8Kq2vJPsskz +utn5hg9VLVfj1UE8Xn/ToFZXkegnizj4mzftZLvZSLJ1iBE313Ea+2G7C1OeJ0F Fwcb9HHllZfaMoPOyvftkv2mIy8fYEY= -----END CERTIFICATE-----Generated at Fri Mar 14 10:35:24 2025 by rpki-client