$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa File: 5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa (raw, json) Hash identifier: yUayug0715huzHVHv7wjkGqbNLCwatUNEZMWilGLJZ0= Subject key identifier: 06:B0:1D:23:84:FE:05:00:1F:D1:61:2A:89:6B:4B:40:B4:E0:CD:C9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814512F1771A0645E42A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:45:12:f1:77:1a:06:45:e4:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1f991a45-0045-475c-b5ed-414208c34e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:65:60:66:9d:2d:9e:39:d1:c4:b7:1c:6c:1e: d4:d1:2d:63:57:06:a3:b4:0b:63:04:b6:00:69:4f: 7b:f2:d5:92:f1:13:b0:ba:5b:b7:70:54:74:18:ff: 72:75:4e:43:a1:75:9b:cd:e5:57:49:4e:b3:f1:ea: 76:00:69:d4:84:34:a0:79:3e:cb:65:34:e0:12:45: a0:ca:54:c7:e7:31:67:df:9b:4d:50:72:72:38:be: f9:2b:7e:56:5e:94:7f:b1:b5:e3:c8:3a:b2:a5:0c: 2c:59:7e:6b:be:74:07:ff:50:80:88:fb:16:44:c2: d0:c9:e2:ec:d8:dd:d2:de:30:8b:94:bf:98:cc:b8: b3:de:f2:fd:3f:44:29:6b:d2:62:ce:77:77:b6:5b: 21:7e:c5:b1:08:99:98:a3:57:96:0a:4b:f3:1a:93: 45:b3:df:dd:56:12:27:1d:77:21:2f:e6:e7:22:ce: 85:81:59:6a:27:52:eb:ed:f2:be:2b:a3:2d:6e:32: 42:f0:b7:14:a2:96:2e:ac:bd:6e:39:25:f1:de:69: e5:bb:db:66:be:6e:2a:2d:08:b7:36:52:03:75:45: f7:61:37:9f:52:86:2c:d1:2c:5f:59:43:7c:9e:13: 64:b4:0a:14:d9:ac:96:d2:63:96:74:40:59:da:59: ed:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:B0:1D:23:84:FE:05:00:1F:D1:61:2A:89:6B:4B:40:B4:E0:CD:C9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:8e:00:54:b7:a0:14:8c:2d:b1:c6:ea:42:42:46:9d:61:e7: f6:0f:6f:95:43:db:cd:26:f4:9b:7c:7d:c3:a1:24:3c:2f:bf: f8:12:ca:f6:4d:21:31:91:30:3b:d6:17:40:ac:cd:67:ed:74: 89:92:1b:1d:88:91:40:4f:7e:23:63:8d:99:79:e3:16:00:f1: 87:2b:17:4e:a5:77:8d:14:44:4a:7f:6b:91:34:32:9a:15:ba: 29:5a:42:aa:ef:7c:bb:60:1c:74:19:d7:34:0f:5f:c2:54:8f: 65:ef:3d:15:04:71:b2:a7:b9:7c:97:a6:72:b6:ab:ee:55:4d: f4:81:b8:38:d5:14:e5:37:9a:8e:4d:38:66:c9:0d:06:e9:be: 6d:65:64:08:68:b9:9a:6d:75:89:78:3d:b3:28:3c:82:61:ce: 70:99:e5:85:2b:f4:8d:55:71:19:02:1a:52:a8:a9:d8:10:26: 24:3a:66:02:73:06:a9:dc:e8:81:ee:5b:a3:92:00:6d:fd:c8: 59:8c:24:c7:fe:e5:f4:53:0e:a6:63:74:88:81:8a:ee:38:31: 6d:73:72:3d:c5:2e:02:21:f5:a9:f7:8e:22:23:6f:a5:2d:9b: c7:4b:e0:07:49:3c:f7:b3:d4:ed:3f:e7:5a:a7:94:a1:0a:0d: 84:23:c0:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUUS8XcaBkXkKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWY5OTFhNDUtMDA0NS00NzVjLWI1ZWQtNDE0MjA4YzM0ZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2VgZp0tnjnRxLccbB7U0S1jVwajtAtjBLYA aU978tWS8ROwulu3cFR0GP9ydU5DoXWbzeVXSU6z8ep2AGnUhDSgeT7LZTTgEkWg ylTH5zFn35tNUHJyOL75K35WXpR/sbXjyDqypQwsWX5rvnQH/1CAiPsWRMLQyeLs 2N3S3jCLlL+YzLiz3vL9P0Qpa9Jiznd3tlshfsWxCJmYo1eWCkvzGpNFs9/dVhIn HXchL+bnIs6FgVlqJ1Lr7fK+K6MtbjJC8LcUopYurL1uOSXx3mnlu9tmvm4qLQi3 NlIDdUX3YTefUoYs0SxfWUN8nhNktAoU2ayW0mOWdEBZ2lntywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAawHSOE/gUAH9FhKolrS0C04M3JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWExZDY4YTYtZGVhMS0z YmU5LThiNmItZDBhMGFmMmFiOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyOAFS3oBSMLbHG6kJCRp1h5/YPb5VD280m9Jt8fcOhJDwvv/gSyvZN ITGRMDvWF0CszWftdImSGx2IkUBPfiNjjZl54xYA8YcrF06ld40UREp/a5E0MpoV uilaQqrvfLtgHHQZ1zQPX8JUj2XvPRUEcbKnuXyXpnK2q+5VTfSBuDjVFOU3mo5N OGbJDQbpvm1lZAhouZptdYl4PbMoPIJhznCZ5YUr9I1VcRkCGlKoqdgQJiQ6ZgJz Bqnc6IHuW6OSAG39yFmMJMf+5fRTDqZjdIiBiu44MW1zcj3FLgIh9an3jiIjb6Ut m8dL4AdJPPez1O0/51qnlKEKDYQjwBg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:48 2025 by rpki-client