$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa File: 5df3a7fd-61a7-3250-8c36-0f4508465895.roa (raw, json) Hash identifier: ACmSH2SlZZ8FJBgzU58qo3/G523XBF2hUTXqOX0AXj4= Subject key identifier: 28:15:35:D4:C5:BE:37:B3:21:C9:9B:3B:5F:21:11:3B:BC:1B:E1:2F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DEE5AE48EF8AF374A060 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:de:e5:ae:48:ef:8a:f3:74:a0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=131cdfda-35ed-43d5-98d4-a944fc09584c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:ae:1a:3d:e3:7a:b6:7b:b0:e8:7f:8e:0e: 95:94:5f:d4:96:87:e8:dd:85:fb:15:d3:f1:fb:53: 7c:a9:77:58:67:71:e9:cc:a9:f0:a1:cd:11:20:f2: 2e:5f:c8:62:39:86:3d:77:18:ca:f9:20:11:ee:83: d0:80:c1:99:8d:dd:40:92:ee:7a:ba:6e:43:ae:3b: 33:9e:2c:44:be:0b:06:0b:7d:b3:e6:f8:f0:ba:d5: d7:0d:16:51:ac:bc:d7:0d:66:01:e1:b6:5e:86:d4: 27:3d:66:bd:80:43:16:f1:e7:9a:47:bc:63:52:4a: 71:89:29:86:55:2d:b8:eb:d7:b9:2a:76:e7:53:2f: 9d:eb:3c:ff:65:fc:f4:9a:b0:9c:64:f9:80:1c:31: bb:a9:74:76:1c:ca:4d:66:70:9e:51:89:f1:d9:85: 07:7d:de:34:6e:f8:41:59:be:e8:5f:b0:2a:9d:3a: d2:c9:0a:54:82:c8:db:19:a8:2d:50:a2:89:bb:10: 4a:53:b5:9b:50:d7:d1:ed:fb:f3:90:3f:ce:bb:2d: 5a:eb:5a:2b:02:96:6b:17:b4:8f:01:8a:37:c2:81: 6b:2c:8e:27:87:05:42:13:76:b6:a2:bf:b6:6e:fb: 3e:6e:0b:3d:b1:b4:c8:b2:14:c2:7a:a3:6d:97:0a: e4:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:15:35:D4:C5:BE:37:B3:21:C9:9B:3B:5F:21:11:3B:BC:1B:E1:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5df3a7fd-61a7-3250-8c36-0f4508465895.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:18:ca:77:1d:19:83:fe:44:23:63:5f:f5:06:20:a1:be:8f: dc:b8:9c:b5:6e:0b:36:37:50:a1:9c:96:72:44:97:d0:fe:f7: 2a:5d:85:dc:ee:b8:35:d3:88:ef:8e:ec:b6:6b:ab:f6:4e:d1: 36:2c:ce:a3:39:bd:c1:08:2b:fe:c5:a6:36:a0:ef:cb:36:65: fa:ad:e3:c7:a5:7c:a4:81:00:29:06:29:85:25:4f:e7:b8:df: cf:25:0c:40:30:20:b9:ed:07:df:78:ac:57:40:17:cd:4a:21: ab:29:2b:14:86:09:e6:8a:b6:29:7b:44:98:39:f5:24:50:0e: c0:c9:a2:ae:f7:d2:8c:74:8a:d1:1f:74:da:54:41:e4:dc:6e: b6:83:77:f6:7d:e3:92:7a:7d:f4:0f:c5:e4:a5:cc:6c:6d:04: 34:c1:31:17:b8:42:3c:0c:0f:3e:c2:ef:a7:4c:ec:4c:38:9d: 29:5f:27:fd:7b:20:40:73:2f:4c:b4:eb:0a:3b:49:8a:05:44: 7c:b4:af:6f:ec:df:1c:2b:9d:da:19:d0:d5:e1:0e:16:db:60: 4a:b3:60:10:87:17:25:2f:77:5d:26:7d:29:22:41:7e:c3:93: c2:d5:ee:52:12:f2:e4:8e:9c:9b:99:74:f9:3d:f8:b8:ee:c4: 73:d3:e9:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd7lrkjvivN0oGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTMxY2RmZGEtMzVlZC00M2Q1LTk4ZDQtYTk0NGZjMDk1ODRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU6uGj3jerZ7sOh/jg6VlF/Ulofo3YX7FdPx +1N8qXdYZ3HpzKnwoc0RIPIuX8hiOYY9dxjK+SAR7oPQgMGZjd1Aku56um5Drjsz nixEvgsGC32z5vjwutXXDRZRrLzXDWYB4bZehtQnPWa9gEMW8eeaR7xjUkpxiSmG VS2469e5KnbnUy+d6zz/Zfz0mrCcZPmAHDG7qXR2HMpNZnCeUYnx2YUHfd40bvhB Wb7oX7AqnTrSyQpUgsjbGagtUKKJuxBKU7WbUNfR7fvzkD/Ouy1a61orApZrF7SP AYo3woFrLI4nhwVCE3a2or+2bvs+bgs9sbTIshTCeqNtlwrkEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgVNdTFvjezIcmbO18hETu8G+EvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWRmM2E3ZmQtNjFhNy0z MjUwLThjMzYtMGY0NTA4NDY1ODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ0YyncdGYP+RCNjX/UGIKG+j9y4nLVuCzY3UKGclnJEl9D+9ypdhdzu uDXTiO+O7LZrq/ZO0TYszqM5vcEIK/7Fpjag78s2Zfqt48elfKSBACkGKYUlT+e4 388lDEAwILntB994rFdAF81KIaspKxSGCeaKtil7RJg59SRQDsDJoq730ox0itEf dNpUQeTcbraDd/Z945J6ffQPxeSlzGxtBDTBMRe4QjwMDz7C76dM7Ew4nSlfJ/17 IEBzL0y06wo7SYoFRHy0r2/s3xwrndoZ0NXhDhbbYEqzYBCHFyUvd10mfSkiQX7D k8LV7lIS8uSOnJuZdPk9+LjuxHPT6cU= -----END CERTIFICATE-----Generated at Fri Mar 14 10:21:26 2025 by rpki-client