$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59f32a32-bb5f-3be6-9252-719327f222d7.roa File: 59f32a32-bb5f-3be6-9252-719327f222d7.roa (raw, json) Hash identifier: mtlueTSGrryUFpEWGcrPHVseWmvQdKVCb5/sHzayr3A= Subject key identifier: C0:A1:52:9C:AC:13:4E:3B:16:02:09:B1:19:6F:FA:EA:7F:30:C2:44 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58145E0EA649349E6D2BDE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59f32a32-bb5f-3be6-9252-719327f222d7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.126.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:45:e0:ea:64:93:49:e6:d2:bd:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c0738f4b-6f44-4985-83fe-e68d8f374028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:83:51:3f:0c:4b:1f:52:ab:6f:67:d1:cf:11: 6b:30:8a:86:53:dc:dd:8c:4b:9c:9b:0e:b4:ae:56: 4c:d8:0b:e1:86:13:1b:c2:85:89:cd:d8:0f:35:64: ae:a5:f6:0c:dc:20:ae:a0:43:25:dc:b9:99:a7:00: 1a:02:c4:0f:a7:ef:d6:44:5c:ea:db:74:21:d5:28: a3:59:3d:0c:3b:2f:7d:0a:54:cf:b2:98:1e:c8:9d: 96:fa:53:88:2d:51:a6:50:96:be:fd:03:07:86:cc: c8:7b:b7:73:70:75:d8:75:61:dd:a0:d0:f9:c9:0d: 4c:86:cc:c0:46:47:89:32:bb:fa:0e:bb:ee:67:96: 2e:cb:1c:e6:6a:8a:d8:bd:fc:13:8a:4f:f9:9a:a7: 0b:af:96:1c:25:3e:12:7b:36:ad:89:a1:1c:57:91: 96:c1:7f:a1:ab:a0:72:ff:80:ae:f4:0e:7f:51:cc: 62:56:fe:d9:95:f9:24:be:16:b9:ca:fa:fe:b1:94: fd:6a:74:3c:41:95:93:71:99:15:f7:82:2c:d8:ca: 03:cf:db:e8:cb:4a:1a:7b:12:0c:72:50:f0:82:77: 1b:24:8a:7f:39:81:15:bb:99:07:14:24:61:2a:7a: 88:a0:02:75:8d:32:48:c9:63:0d:25:ad:0a:3f:65: c6:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A1:52:9C:AC:13:4E:3B:16:02:09:B1:19:6F:FA:EA:7F:30:C2:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59f32a32-bb5f-3be6-9252-719327f222d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.126.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:0d:2c:d8:5a:55:77:24:a8:9a:52:8b:3d:68:08:e2:b1:a3: 6d:f4:05:a0:5f:f3:83:42:1c:1e:bc:74:9a:3b:df:a9:4c:e3: 68:70:f7:b9:f4:77:6c:30:5b:ac:ff:bc:e3:35:51:60:8f:07: 69:2c:4a:ae:34:60:b3:e3:9e:91:3e:1c:79:eb:a0:4a:b3:3f: d4:d1:c7:e1:6a:79:80:fa:da:3c:a5:6c:41:6d:4d:70:c9:21: 78:8b:31:20:aa:1f:57:0d:37:24:68:1b:c6:83:d0:4e:05:3c: 7c:5c:b8:5e:e7:28:72:87:89:fc:6d:b6:82:a7:f9:7c:47:ea: fb:00:03:5f:64:80:d3:ed:73:f2:f8:6f:f5:31:ec:78:1d:56: 81:be:7b:40:87:0f:4d:a7:f9:99:80:41:25:38:53:3e:02:14: 73:3a:b4:50:0d:0d:88:bc:e4:0c:09:a9:40:a5:b6:ad:4f:d7: 39:73:28:5e:18:91:f5:fb:bc:62:34:50:a4:d4:dd:43:db:f1: a6:0e:3f:70:c3:94:c6:e1:64:62:a0:7d:ba:4e:83:1f:de:33: 51:fc:06:5c:fd:99:c4:55:57:30:b5:5a:61:1b:52:d7:12:44: 76:fd:7d:40:b3:6e:f8:24:a9:ba:4f:48:d2:40:60:3d:86:e6: 7b:83:8e:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUXg6mSTSebSveAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzA3MzhmNGItNmY0NC00OTg1LTgzZmUtZTY4ZDhmMzc0MDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAioNRPwxLH1Krb2fRzxFrMIqGU9zdjEucmw60 rlZM2AvhhhMbwoWJzdgPNWSupfYM3CCuoEMl3LmZpwAaAsQPp+/WRFzq23Qh1Sij WT0MOy99ClTPspgeyJ2W+lOILVGmUJa+/QMHhszIe7dzcHXYdWHdoND5yQ1MhszA RkeJMrv6DrvuZ5YuyxzmaorYvfwTik/5mqcLr5YcJT4SezatiaEcV5GWwX+hq6By /4Cu9A5/UcxiVv7Zlfkkvha5yvr+sZT9anQ8QZWTcZkV94Is2MoDz9voy0oaexIM clDwgncbJIp/OYEVu5kHFCRhKnqIoAJ1jTJIyWMNJa0KP2XGUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMChUpysE047FgIJsRlv+up/MMJEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTlmMzJhMzItYmI1Zi0z YmU2LTkyNTItNzE5MzI3ZjIyMmQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4NLNhaVXckqJpSiz1oCOKxo230BaBf84NCHB68dJo736lM42hw97n0 d2wwW6z/vOM1UWCPB2ksSq40YLPjnpE+HHnroEqzP9TRx+FqeYD62jylbEFtTXDJ IXiLMSCqH1cNNyRoG8aD0E4FPHxcuF7nKHKHifxttoKn+XxH6vsAA19kgNPtc/L4 b/Ux7HgdVoG+e0CHD02n+ZmAQSU4Uz4CFHM6tFANDYi85AwJqUCltq1P1zlzKF4Y kfX7vGI0UKTU3UPb8aYOP3DDlMbhZGKgfbpOgx/eM1H8Blz9mcRVVzC1WmEbUtcS RHb9fUCzbvgkqbpPSNJAYD2G5nuDjt0= -----END CERTIFICATE-----Generated at Fri Apr 11 23:01:12 2025 by rpki-client