$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa File: 5a906593-7518-3717-93a1-36f415626e0f.roa (raw, json) Hash identifier: qXSVX5WUw/a5yq2ucoitNehNgMDM+YaT1Va2rerDNPA= Subject key identifier: 54:71:EA:89:61:B3:2D:A3:30:E5:43:61:BA:21:20:D1:DF:87:A8:1A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E095BE602EB583F90AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e0:95:be:60:2e:b5:83:f9:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=141e5a6e-ce65-4d60-a9c2-6bf30c32cef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:f9:66:e0:8e:0b:94:95:90:44:c7:b8:96:41: ff:42:5f:3d:04:81:92:ae:cf:21:36:58:3e:9d:2f: b4:33:79:03:9e:96:c2:79:6c:b8:71:17:01:84:9c: bc:be:86:6e:1c:f4:9c:01:d3:94:35:d4:e6:b7:6e: 22:61:1f:9b:27:2b:27:ec:6f:58:f8:c9:d1:52:10: db:47:2d:1c:9d:64:dd:a3:ac:c4:31:45:30:35:5c: c2:70:33:d9:39:a1:f2:2f:e6:59:c0:58:62:49:07: c0:e2:eb:3d:08:de:d1:b1:0a:14:51:23:d5:13:c3: ac:66:7d:45:45:48:5b:de:8d:45:ae:1c:98:d7:35: 43:39:1c:17:09:41:d5:fb:dd:b7:07:40:3f:f0:47: 06:db:b8:9c:a7:6c:cf:fa:9b:51:db:20:73:ae:69: 88:12:a2:03:93:a5:2a:c7:6b:4b:6c:98:83:2c:70: 03:1f:ff:a4:ac:68:f3:2f:05:7c:ab:01:74:e7:fa: 09:ab:d1:87:6f:b2:77:c3:a8:a9:03:35:f8:6d:7c: 06:23:30:77:99:83:f7:7e:c9:9a:30:8a:08:c3:98: bb:9f:47:c4:ae:c4:23:55:85:b1:b7:e8:91:86:3a: 4a:38:32:9b:0f:35:65:a4:3a:5f:8a:23:b6:be:09: 63:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:71:EA:89:61:B3:2D:A3:30:E5:43:61:BA:21:20:D1:DF:87:A8:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a906593-7518-3717-93a1-36f415626e0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:84:2d:b0:2c:b1:d4:ea:4e:81:90:d4:df:83:f4:93:ce:a9: 44:3d:a9:1c:a9:cc:27:99:3a:97:90:d9:2a:1c:95:92:19:44: 40:19:0d:d1:41:2a:d9:e1:b3:23:4e:a7:d0:52:4b:51:08:b4: ce:89:24:01:28:cb:0b:a3:ed:be:51:f4:a8:09:77:16:65:23: a8:a9:59:f9:e3:97:5a:75:3d:80:52:27:dd:33:09:8e:e6:75: c1:37:91:b4:bf:18:53:44:ba:21:81:2c:45:51:f2:68:69:51: ae:fa:31:74:4a:45:e7:51:66:8e:9d:29:35:22:1a:0c:66:a7: 5e:ca:39:cb:ed:e9:c5:10:24:86:bd:c7:f2:32:92:5a:7b:f7: f7:82:1a:0e:03:bf:fe:cb:b5:05:cd:e4:31:4e:03:01:32:44: ee:0b:3c:e8:e3:e0:41:1f:fd:3d:79:00:0b:1f:c4:63:fa:da: 59:0e:85:f7:20:45:3d:4b:d2:99:e8:c4:a5:5e:d5:59:3e:36: 5f:df:5d:93:2c:e5:28:bf:62:2c:2a:72:ba:27:61:b9:54:b0: 77:fb:54:d4:15:8d:d7:d1:f4:50:59:5b:7e:65:4e:2c:9b:ac: 03:cb:a3:b5:16:52:9b:44:a8:e8:5d:91:78:dc:d4:1d:da:8d: 29:30:ce:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeCVvmAutYP5CsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTQxZTVhNmUtY2U2NS00ZDYwLWE5YzItNmJmMzBjMzJjZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiflm4I4LlJWQRMe4lkH/Ql89BIGSrs8hNlg+ nS+0M3kDnpbCeWy4cRcBhJy8voZuHPScAdOUNdTmt24iYR+bJysn7G9Y+MnRUhDb Ry0cnWTdo6zEMUUwNVzCcDPZOaHyL+ZZwFhiSQfA4us9CN7RsQoUUSPVE8OsZn1F RUhb3o1FrhyY1zVDORwXCUHV+923B0A/8EcG27icp2zP+ptR2yBzrmmIEqIDk6Uq x2tLbJiDLHADH/+krGjzLwV8qwF05/oJq9GHb7J3w6ipAzX4bXwGIzB3mYP3fsma MIoIw5i7n0fErsQjVYWxt+iRhjpKODKbDzVlpDpfiiO2vgljOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRx6olhsy2jMOVDYbohINHfh6gaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE5MDY1OTMtNzUxOC0z NzE3LTkzYTEtMzZmNDE1NjI2ZTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG+ELbAssdTqToGQ1N+D9JPOqUQ9qRypzCeZOpeQ2SoclZIZREAZDdFB KtnhsyNOp9BSS1EItM6JJAEoywuj7b5R9KgJdxZlI6ipWfnjl1p1PYBSJ90zCY7m dcE3kbS/GFNEuiGBLEVR8mhpUa76MXRKRedRZo6dKTUiGgxmp17KOcvt6cUQJIa9 x/Iyklp79/eCGg4Dv/7LtQXN5DFOAwEyRO4LPOjj4EEf/T15AAsfxGP62lkOhfcg RT1L0pnoxKVe1Vk+Nl/fXZMs5Si/YiwqcronYblUsHf7VNQVjdfR9FBZW35lTiyb rAPLo7UWUptEqOhdkXjc1B3ajSkwzhA= -----END CERTIFICATE-----Generated at Fri Apr 11 23:10:48 2025 by rpki-client