$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa File: 68f42845-cc20-3621-b523-10070dd8ca9f.roa (raw, json) Hash identifier: YKhLrk1+4OH6OQ0JkUHb9OZFHJlCEhWbcshZrhfxHuc= Subject key identifier: 14:44:B0:85:E1:F1:DB:61:C1:41:7F:3F:90:A9:C0:28:F5:83:BE:D1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D5958617BA7980777C20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d5:95:86:17:ba:79:80:77:7c:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=835fec0c-93b7-474c-b7d9-bcebb4db0515 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:1d:a1:75:25:9f:06:4a:73:4c:54:a5:f4:dd: c3:26:91:ef:46:1a:ec:ef:b3:fa:6d:43:df:fc:10: 55:82:5b:59:41:0d:68:c5:17:3f:ea:26:5d:35:ce: a1:12:5f:df:fc:9e:fa:ed:3a:6a:89:b1:cb:fc:94: af:43:a7:68:c9:70:93:8c:1a:ad:fb:7b:e3:e6:18: 96:e5:2a:1e:91:95:6b:ac:60:ab:d2:93:e4:27:15: bf:19:aa:13:66:a0:50:82:47:4a:5c:a7:6a:27:14: 51:01:5f:e4:9b:66:8d:0e:74:5a:72:19:a5:03:e2: 36:ae:71:ee:6f:90:a5:c5:2e:ea:39:b3:b2:4e:67: f9:3a:51:74:86:0b:8e:07:84:02:b7:88:6d:d1:2c: b2:9f:b3:9b:c2:6e:3c:2d:c5:7f:cf:65:e3:c5:05: 9d:9b:13:f3:1d:d1:36:92:3e:0d:46:a5:e0:9d:b5: bd:87:3c:ab:22:c7:29:3c:7b:3c:5b:f0:65:ba:de: 42:4e:b9:62:4d:51:f3:94:88:5c:cd:46:4d:78:85: f9:7c:f3:2c:e9:fe:4d:14:59:a2:f9:36:3f:47:13: 02:2d:79:39:70:4b:a7:43:7a:34:ca:74:2b:eb:92: 54:66:14:a8:d8:70:90:98:ff:0a:5e:56:ed:73:09: 49:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:44:B0:85:E1:F1:DB:61:C1:41:7F:3F:90:A9:C0:28:F5:83:BE:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c5:4d:6c:da:e3:7b:93:7f:34:16:3f:9c:a8:ce:e8:e3:fe:29: fc:ac:f6:12:a9:fb:ac:71:df:0f:3b:44:d7:b1:01:a5:09:d2: 34:70:75:f0:35:cd:70:1d:35:09:d0:3f:62:a2:9c:a8:37:3d: a6:c0:2f:a7:db:c0:a0:b4:06:a2:33:1c:86:d4:b4:97:de:0c: f6:2e:e9:b7:c6:7b:c9:65:24:5e:4b:71:60:db:0e:68:67:92: 1b:e2:3e:5d:76:78:8f:e7:f1:84:d7:99:9b:85:e6:a6:1c:8b: b8:07:a7:72:ad:f6:5b:68:3c:2d:0f:6e:7d:8e:c0:57:db:6d: 8d:20:6f:a7:69:1c:12:cf:10:97:05:3d:7f:97:fc:d1:71:20: 18:ec:f6:bf:04:4a:1f:6b:8d:d0:a2:02:ad:a3:68:48:8d:dd: 27:97:7a:82:2b:ac:20:29:a5:21:84:4a:81:da:74:45:83:19: 7a:17:e4:93:65:19:ef:82:8e:f2:71:55:70:a5:9a:4d:4e:3a: bf:af:0b:9c:55:a0:93:3c:7f:cd:2d:d9:fc:53:45:49:a5:7d: 6b:34:98:1f:c3:48:ce:18:53:9e:3d:b9:1b:97:70:67:fb:b5: 34:ba:0a:f6:a0:7d:a7:59:25:21:54:0e:a5:1e:75:f5:81:80: 81:0c:21:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdWVhhe6eYB3fCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODM1ZmVjMGMtOTNiNy00NzRjLWI3ZDktYmNlYmI0ZGIwNTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3B2hdSWfBkpzTFSl9N3DJpHvRhrs77P6bUPf /BBVgltZQQ1oxRc/6iZdNc6hEl/f/J767TpqibHL/JSvQ6doyXCTjBqt+3vj5hiW 5SoekZVrrGCr0pPkJxW/GaoTZqBQgkdKXKdqJxRRAV/km2aNDnRachmlA+I2rnHu b5ClxS7qObOyTmf5OlF0hguOB4QCt4ht0Syyn7Obwm48LcV/z2XjxQWdmxPzHdE2 kj4NRqXgnbW9hzyrIscpPHs8W/Blut5CTrliTVHzlIhczUZNeIX5fPMs6f5NFFmi +TY/RxMCLXk5cEunQ3o0ynQr65JUZhSo2HCQmP8KXlbtcwlJnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBREsIXh8dthwUF/P5CpwCj1g77RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjhmNDI4NDUtY2MyMC0z NjIxLWI1MjMtMTAwNzBkZDhjYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPITMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMVNbNrje5N/NBY/nKjO6OP+Kfys9hKp+6xx3w87RNexAaUJ0jRwdfA1 zXAdNQnQP2KinKg3PabAL6fbwKC0BqIzHIbUtJfeDPYu6bfGe8llJF5LcWDbDmhn khviPl12eI/n8YTXmZuF5qYci7gHp3Kt9ltoPC0Pbn2OwFfbbY0gb6dpHBLPEJcF PX+X/NFxIBjs9r8ESh9rjdCiAq2jaEiN3SeXeoIrrCAppSGESoHadEWDGXoX5JNl Ge+CjvJxVXClmk1OOr+vC5xVoJM8f80t2fxTRUmlfWs0mB/DSM4YU549uRuXcGf7 tTS6CvagfadZJSFUDqUedfWBgIEMIck= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:02 2025 by rpki-client