$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa File: 5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa (raw, json) Hash identifier: pqXK2fetr0EoZRyXg9Vc0JFJo0JVtP33PKJ8eOrcDYg= Subject key identifier: B6:0B:62:C8:C6:AD:8E:CF:00:A2:A8:DE:A3:EC:5F:92:4B:B5:74:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DD2105B7E8F16CFFC4F0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:dd:21:05:b7:e8:f1:6c:ff:c4:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=365aba09-f5da-4126-8a82-f3dc24a0288c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dd:48:79:9b:ba:a1:01:94:ef:a9:41:a5:03: d5:85:8d:be:36:57:b6:e7:bd:3b:1c:5f:05:7c:f2: 92:2a:24:4c:28:51:ea:38:96:13:a4:c2:a7:35:23: 9a:88:4d:ba:3e:23:03:59:0c:56:88:c6:8b:a6:36: 38:78:73:9a:5e:52:83:1b:9e:7d:50:9c:dc:49:27: 39:fe:87:c2:4b:24:51:3c:51:27:26:aa:f6:4b:31: 6d:33:93:5f:e8:e7:cf:fe:80:4a:1e:20:47:9c:fa: ea:20:e8:41:25:51:b6:6a:34:8c:23:6d:6b:33:53: 22:6b:b6:93:51:10:ca:7b:51:12:77:f8:01:73:6f: c8:57:35:d5:d2:d8:03:a2:bb:d9:0d:db:4b:76:0c: 8d:72:7d:5d:b9:9d:cd:ce:b5:47:27:e9:75:c1:ba: fa:b7:54:23:0c:e4:f9:67:6a:b3:60:fd:46:d3:17: ec:bb:4a:42:73:80:28:26:34:fb:ba:ac:fd:40:90: 32:83:ab:30:9c:64:34:e7:57:0b:32:a7:40:41:1d: 92:f9:0a:d3:8c:89:da:0c:ad:26:b4:7d:e1:dc:e1: cf:11:d3:8b:03:83:df:e3:97:6d:80:60:bc:05:e2: c1:58:d9:11:bb:21:81:ce:23:91:e1:9d:e6:19:3e: 27:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:0B:62:C8:C6:AD:8E:CF:00:A2:A8:DE:A3:EC:5F:92:4B:B5:74:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:32:b7:0a:fc:db:66:c3:d3:d5:b1:c9:cf:92:86:71:88:4f: 7c:5f:70:f9:22:6e:a3:2a:fe:46:9d:b4:f2:10:3e:02:bd:77: 4a:4e:bc:e4:ea:45:19:2b:70:42:ee:79:b4:27:a8:0a:21:db: ed:3c:47:e6:b1:06:ec:bf:55:96:a8:89:f1:2d:36:47:7f:f6: 42:bb:a4:a9:ca:2b:f3:1f:ef:e9:ba:cf:79:3c:de:63:10:9e: 39:20:ca:9f:a4:22:15:79:f6:51:d5:07:50:9c:3e:12:ca:8d: 63:c1:9e:22:7b:c3:b8:85:cd:72:c0:49:e6:0a:f4:8e:4e:f2: 0b:cf:d4:e3:f7:17:7b:e1:87:85:92:7a:61:b7:32:fb:a2:f7: ee:1c:fd:d4:f8:91:e1:5c:ab:1e:d2:bc:62:c7:96:98:4a:6a: 2c:c6:bf:d5:86:b7:0e:8a:42:9a:2e:56:0c:bf:05:19:7a:93: 72:9c:3a:2c:3a:76:37:dd:63:88:17:b8:cb:da:5e:81:82:49: 64:5e:31:25:9d:a6:7c:09:24:7c:ed:9f:17:06:9b:c1:72:2a: ed:dd:39:46:a8:27:d1:00:80:6c:8e:49:4c:9e:2b:22:59:89: 98:aa:0f:03:ca:d2:29:e6:36:88:08:b9:9e:25:df:07:16:2c: eb:57:f2:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd0hBbfo8Wz/xPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzY1YWJhMDktZjVkYS00MTI2LThhODItZjNkYzI0YTAyODhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhN1IeZu6oQGU76lBpQPVhY2+Nle25707HF8F fPKSKiRMKFHqOJYTpMKnNSOaiE26PiMDWQxWiMaLpjY4eHOaXlKDG559UJzcSSc5 /ofCSyRRPFEnJqr2SzFtM5Nf6OfP/oBKHiBHnPrqIOhBJVG2ajSMI21rM1Mia7aT URDKe1ESd/gBc2/IVzXV0tgDorvZDdtLdgyNcn1duZ3NzrVHJ+l1wbr6t1QjDOT5 Z2qzYP1G0xfsu0pCc4AoJjT7uqz9QJAyg6swnGQ051cLMqdAQR2S+QrTjInaDK0m tH3h3OHPEdOLA4Pf45dtgGC8BeLBWNkRuyGBziOR4Z3mGT4nQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYLYsjGrY7PAKKo3qPsX5JLtXRTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE1OTliMmYtYzYwMC0z YWNkLWI4ODUtNWNlYjNmZWZkNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE0ytwr822bD09Wxyc+ShnGIT3xfcPkibqMq/kadtPIQPgK9d0pOvOTq RRkrcELuebQnqAoh2+08R+axBuy/VZaoifEtNkd/9kK7pKnKK/Mf7+m6z3k83mMQ njkgyp+kIhV59lHVB1CcPhLKjWPBniJ7w7iFzXLASeYK9I5O8gvP1OP3F3vhh4WS emG3Mvui9+4c/dT4keFcqx7SvGLHlphKaizGv9WGtw6KQpouVgy/BRl6k3KcOiw6 djfdY4gXuMvaXoGCSWReMSWdpnwJJHztnxcGm8FyKu3dOUaoJ9EAgGyOSUyeKyJZ iZiqDwPK0inmNogIuZ4l3wcWLOtX8nQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:56:20 2025 by rpki-client