$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa File: 63502d4e-89a2-30eb-9321-3bea98daae34.roa (raw, json) Hash identifier: 5tynQdcn1DbW1RlP/w5ufijTKHYj32oL8ug6mrF6O0s= Subject key identifier: C4:D1:15:55:BD:C4:E3:1D:48:51:12:82:1B:90:FC:38:62:DF:2D:3B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814935ADA88CFBE9DA0080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:49:35:ad:a8:8c:fb:e9:da:00:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cda03f36-cf08-407a-ae75-e6d4d6f14bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:da:1a:0d:91:61:c9:f3:5b:b3:37:7c:05:06: f7:6d:e4:1b:7b:fc:f8:59:e2:5c:e4:f5:3d:cc:5b: 74:21:0c:1e:c6:a4:7f:e4:9e:17:1f:da:47:9e:45: 61:1c:4e:d7:82:1b:1b:06:a7:28:3d:69:ab:0c:91: b2:9a:fd:f0:b2:b7:2e:c1:c4:a8:f7:cc:7d:97:0c: 44:5c:4f:ed:5f:cb:7f:32:f4:34:90:60:4c:bc:f7: 77:32:c0:f8:50:a1:84:2a:89:7c:34:ba:2c:be:2b: cb:28:9c:8f:fe:b1:b6:90:f4:3c:cf:c1:cc:43:c5: fb:ab:49:23:6a:69:94:9a:4c:5c:c7:9b:a1:5b:aa: 5d:cb:ca:c8:8d:df:78:86:8e:06:cf:fb:20:48:d4: 9f:67:96:b9:82:9f:f8:59:a8:b9:72:17:7f:21:51: 9a:b5:2b:f9:d2:3b:30:f3:c0:a4:2a:8a:00:bb:e5: 49:7b:ce:28:2d:a7:1c:cc:76:17:ce:c2:fa:76:2f: 82:e3:1e:d5:eb:7a:1f:7e:57:28:c1:9e:2a:87:2a: b1:7a:7f:19:07:7c:71:c7:7b:ab:f5:55:c1:69:66: ea:a5:a1:9e:67:af:8f:f5:e4:8a:27:fd:a0:1e:a7: 5f:e4:70:b5:9d:dc:94:eb:6d:63:23:b3:b6:21:6d: 74:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D1:15:55:BD:C4:E3:1D:48:51:12:82:1B:90:FC:38:62:DF:2D:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/63502d4e-89a2-30eb-9321-3bea98daae34.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:54:48:9b:a5:f9:1d:e0:7f:39:11:7f:eb:3c:84:22:e6:f0: 0e:8d:73:d1:c6:4c:97:f4:27:d4:b0:bb:68:f4:66:dc:b8:b5: 43:05:5e:60:64:b5:63:43:bf:11:3b:3a:57:dd:09:63:20:dd: 01:14:15:cc:4c:5a:18:d2:7d:db:ce:cc:c2:a1:5b:1e:5c:24: 4c:0a:21:c3:05:75:01:ac:f8:c6:ee:eb:59:50:cd:ee:70:5b: 7f:de:e9:64:ac:38:d5:10:78:a8:3e:37:59:e6:a4:93:a3:00: dd:16:11:25:67:89:93:cb:d4:17:0f:9b:d3:56:96:94:fc:62: 20:6a:c0:8c:8a:53:cc:5d:74:0f:44:7e:e9:17:0e:29:b1:5c: c8:5b:ed:29:31:3f:af:6a:10:d1:36:0c:39:6e:48:fb:58:df: 20:00:00:17:84:08:42:a5:50:b5:c4:26:0a:80:38:33:62:93: 90:98:36:ee:b7:5f:b4:c7:e2:b4:72:62:94:e5:e0:27:58:5b: 31:82:2c:63:51:44:b2:b0:83:47:10:50:3f:12:8e:cd:fa:e6: d6:4d:30:ae:bd:f7:00:58:4e:8f:95:aa:8f:22:33:6a:b0:0f: 79:62:6c:b7:d0:10:44:c1:99:07:97:23:9a:53:59:08:47:2b: 92:92:4f:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUk1raiM++naAIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2RhMDNmMzYtY2YwOC00MDdhLWFlNzUtZTZkNGQ2ZjE0YmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9oaDZFhyfNbszd8BQb3beQbe/z4WeJc5PU9 zFt0IQwexqR/5J4XH9pHnkVhHE7XghsbBqcoPWmrDJGymv3wsrcuwcSo98x9lwxE XE/tX8t/MvQ0kGBMvPd3MsD4UKGEKol8NLosvivLKJyP/rG2kPQ8z8HMQ8X7q0kj ammUmkxcx5uhW6pdy8rIjd94ho4Gz/sgSNSfZ5a5gp/4Wai5chd/IVGatSv50jsw 88CkKooAu+VJe84oLacczHYXzsL6di+C4x7V63offlcowZ4qhyqxen8ZB3xxx3ur 9VXBaWbqpaGeZ6+P9eSKJ/2gHqdf5HC1ndyU621jI7O2IW10awIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTRFVW9xOMdSFESghuQ/Dhi3y07MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjM1MDJkNGUtODlhMi0z MGViLTkzMjEtM2JlYTk4ZGFhZTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZUSJul+R3gfzkRf+s8hCLm8A6Nc9HGTJf0J9Swu2j0Zty4tUMFXmBk tWNDvxE7OlfdCWMg3QEUFcxMWhjSfdvOzMKhWx5cJEwKIcMFdQGs+Mbu61lQze5w W3/e6WSsONUQeKg+N1nmpJOjAN0WESVniZPL1BcPm9NWlpT8YiBqwIyKU8xddA9E fukXDimxXMhb7SkxP69qENE2DDluSPtY3yAAABeECEKlULXEJgqAODNik5CYNu63 X7TH4rRyYpTl4CdYWzGCLGNRRLKwg0cQUD8Sjs365tZNMK699wBYTo+Vqo8iM2qw D3libLfQEETBmQeXI5pTWQhHK5KST5g= -----END CERTIFICATE-----Generated at Fri Mar 14 08:27:11 2025 by rpki-client