$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa File: 65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa (raw, json) Hash identifier: CFp8sSdwiRTtSPMVebd1JtURFKB/mHxEyxy4imWZp5M= Subject key identifier: BF:44:A1:00:7F:B9:30:2D:3F:58:33:83:A2:C0:30:81:EE:B6:DA:0F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DA0F8F67AF89F839D280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:da:0f:8f:67:af:89:f8:39:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=add880e8-03a0-44cf-acaa-ab2b658d1e27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:ac:fe:8d:2f:37:e9:b2:73:4c:c4:d8:59:0d: 1e:93:8f:aa:42:34:56:cd:48:19:9b:4b:d3:b1:08: 57:39:90:df:50:73:16:9a:71:c6:0d:bd:5e:12:1f: f0:7a:09:70:fb:75:1f:04:8b:bb:98:2d:39:14:eb: ca:d6:78:04:f9:3b:38:e5:b8:89:8b:b8:f6:80:f3: 1a:39:62:83:ca:99:cd:a6:71:81:73:28:e9:d1:c4: cc:16:c2:56:12:2c:d2:b2:07:ce:f8:eb:52:ec:6a: 71:04:b6:ca:64:e4:70:d1:0f:66:8c:c9:10:76:ee: 57:ce:cc:f2:ac:31:03:f6:15:28:ba:a3:99:fc:73: 67:a3:5f:6f:62:6a:2f:e2:1f:bc:25:6a:ab:40:37: 9d:6e:c6:31:91:e1:f1:b6:29:05:cb:0c:62:a7:cc: f4:72:e6:3c:fe:6e:bc:54:ef:07:5d:e9:ea:53:4f: 48:6d:a3:f4:72:55:0a:b8:63:e4:98:90:42:c4:38: be:65:34:4f:dc:70:82:ad:11:aa:13:92:87:f5:be: 5a:e6:70:7c:18:44:a9:a7:ea:7c:3b:27:a2:70:c4: e7:72:bc:92:c9:b0:50:9c:cf:fd:55:87:e4:f5:cf: d4:2b:22:4b:3f:fe:33:74:37:06:ad:c7:03:d2:38: b8:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:44:A1:00:7F:B9:30:2D:3F:58:33:83:A2:C0:30:81:EE:B6:DA:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:98:4c:63:69:65:95:5f:e0:4f:ef:ae:75:b1:b6:36:76:19: 0d:d7:32:9d:83:6e:76:a7:f2:bd:fe:5e:0c:29:d9:d5:58:d9: 51:02:ce:0d:a9:17:57:63:7a:96:fd:36:95:4c:4f:ef:e1:b3: 14:d0:3b:4f:24:a9:34:ab:55:32:5b:7c:95:2f:ef:e2:10:f1: 92:e5:bc:ba:00:81:52:53:4b:16:14:80:ef:74:d8:93:ae:fe: 2c:60:9b:98:07:a9:e8:07:27:0c:c5:fb:95:5b:e7:f2:97:55: 89:40:76:79:6c:a6:6a:ed:52:79:ab:01:b0:e3:91:46:85:74: 0f:99:41:94:f9:21:41:8d:8f:99:db:bf:1e:0b:3a:a5:4e:61: f4:a5:55:09:8b:2c:9e:f0:40:c5:89:94:a8:7f:78:3f:81:14: 7a:bb:f9:23:04:67:9d:d0:25:68:4a:5a:93:58:cb:78:b7:58: b2:6d:1a:68:79:57:c1:3b:a8:4c:4c:f8:59:9f:e7:0f:bf:a9: e3:ac:88:ab:96:64:e4:46:3c:8d:84:c1:80:1e:61:46:ce:2d: a4:2a:11:02:4b:a8:ef:29:06:4c:53:31:da:2f:d5:ea:6b:23: 80:61:5c:5b:43:b5:e8:8d:9e:ab:fc:11:38:9e:a3:06:15:fe: ad:af:fa:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdoPj2evifg50oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YWRkODgwZTgtMDNhMC00NGNmLWFjYWEtYWIyYjY1OGQxZTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6z+jS836bJzTMTYWQ0ek4+qQjRWzUgZm0vT sQhXOZDfUHMWmnHGDb1eEh/weglw+3UfBIu7mC05FOvK1ngE+Ts45biJi7j2gPMa OWKDypnNpnGBcyjp0cTMFsJWEizSsgfO+OtS7GpxBLbKZORw0Q9mjMkQdu5Xzszy rDED9hUouqOZ/HNno19vYmov4h+8JWqrQDedbsYxkeHxtikFywxip8z0cuY8/m68 VO8HXenqU09IbaP0clUKuGPkmJBCxDi+ZTRP3HCCrRGqE5KH9b5a5nB8GESpp+p8 OyeicMTncrySybBQnM/9VYfk9c/UKyJLP/4zdDcGrccD0ji4ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9EoQB/uTAtP1gzg6LAMIHuttoPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjVkOWRjZDItMTNmZC0z ZTg0LWE1YTctYjljZDJkOGE3MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGCYTGNpZZVf4E/vrnWxtjZ2GQ3XMp2Dbnan8r3+Xgwp2dVY2VECzg2p F1djepb9NpVMT+/hsxTQO08kqTSrVTJbfJUv7+IQ8ZLlvLoAgVJTSxYUgO902JOu /ixgm5gHqegHJwzF+5Vb5/KXVYlAdnlspmrtUnmrAbDjkUaFdA+ZQZT5IUGNj5nb vx4LOqVOYfSlVQmLLJ7wQMWJlKh/eD+BFHq7+SMEZ53QJWhKWpNYy3i3WLJtGmh5 V8E7qExM+Fmf5w+/qeOsiKuWZORGPI2EwYAeYUbOLaQqEQJLqO8pBkxTMdov1epr I4BhXFtDteiNnqv8ETieowYV/q2v+mw= -----END CERTIFICATE-----Generated at Sun Apr 13 00:43:32 2025 by rpki-client