$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa File: 6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa (raw, json) Hash identifier: intHHA5yjW/p3T/QGmCP8M5UpIPzS0IQThRp9dcJtp4= Subject key identifier: 3B:A2:51:17:08:A9:A7:B2:93:F8:31:B8:4E:22:20:A0:5F:51:5F:90 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814C5A258F6F62D6E57780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4c:5a:25:8f:6f:62:d6:e5:77:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=536e066e-c5bb-4a09-a663-68ca05ee0cbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:77:58:71:02:a6:55:52:12:d9:e6:1d:ff: b4:05:42:07:35:a6:19:01:b3:14:63:dc:67:a2:a5: d6:82:6c:f8:57:1c:87:a2:21:9f:0d:b2:52:49:59: e9:59:23:86:fd:14:09:fa:1d:db:2c:9b:ad:24:67: e8:9f:1e:c0:e2:a8:82:c2:78:21:59:fc:e8:b7:6d: fc:d2:89:d4:c9:9c:eb:07:67:a7:d2:5c:c8:7b:8d: 8f:46:4a:e9:4c:3f:2d:de:d7:09:d5:4a:ec:cf:53: a6:80:5b:20:56:53:fb:8e:ca:28:a7:56:d9:ee:ac: f1:41:74:fb:89:d1:b5:ec:1f:e1:df:11:9e:e1:f1: 6f:92:83:c5:5b:40:44:01:43:0d:b1:90:de:a8:80: 56:40:6c:11:a9:71:70:49:bb:5b:f4:7a:cd:e8:92: e3:5c:e3:a5:4a:a5:83:36:fd:35:12:c9:db:92:93: f0:14:0b:d9:e1:fc:64:dd:33:72:f7:8b:7c:1c:3d: 8c:3f:12:ef:0f:50:26:7d:13:a3:88:f4:6e:f9:0d: 3d:52:9a:a4:a1:53:a5:44:d1:3e:a9:55:4e:35:af: 97:38:0a:78:f2:8e:85:d8:c1:f4:13:ae:cb:ca:90: 90:70:a9:d5:bf:c8:f2:31:71:33:96:1a:48:26:9e: a3:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A2:51:17:08:A9:A7:B2:93:F8:31:B8:4E:22:20:A0:5F:51:5F:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6c95262a-7b32-3ba4-a9f0-0f9ac7d75030.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:4f:1a:39:e5:f4:cb:5c:31:be:55:a0:20:26:ef:0b:5b:87: d1:23:78:73:f8:58:1d:b4:7e:43:52:4f:b0:f6:0c:45:07:80: 7a:e9:ff:d6:50:2a:71:9a:d3:42:73:1f:33:66:91:38:aa:8d: 67:b6:6d:6f:d1:ea:b7:69:4c:df:a7:e9:59:46:67:9c:79:5e: a4:ae:f6:b1:48:af:a2:86:18:98:c0:70:ba:6c:72:75:6b:d9: b0:7c:1c:36:26:b2:a5:39:72:6e:72:84:70:73:88:e0:67:2d: 71:74:5b:80:26:35:20:01:87:f6:27:bf:0a:f8:78:eb:38:d5: f4:9b:14:2a:97:f1:f9:12:00:1f:13:8f:4e:7f:b1:43:88:b5: 07:04:5f:a4:85:59:ee:87:f1:cd:e4:d1:98:34:05:12:ee:e5: 19:6f:e8:de:b5:5f:c5:5a:4c:88:29:8b:4c:e0:07:5b:d0:d8: be:a3:21:e4:02:6f:7e:32:17:8c:7e:54:a3:b6:66:de:aa:00: 91:ff:ca:30:1b:01:bf:55:53:db:81:b9:10:e4:60:03:2e:1f: 98:d2:e6:5c:b9:b5:f5:39:3d:62:b6:1f:37:87:8e:bb:1e:46: 5c:1c:00:5e:2f:e4:00:ed:a4:67:2a:85:31:47:ff:fe:29:f5: 87:4f:41:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUxaJY9vYtbld4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTM2ZTA2NmUtYzViYi00YTA5LWE2NjMtNjhjYTA1ZWUwY2JkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1F3WHECplVSEtnmHf+0BUIHNaYZAbMUY9xn oqXWgmz4VxyHoiGfDbJSSVnpWSOG/RQJ+h3bLJutJGfonx7A4qiCwnghWfzot238 0onUyZzrB2en0lzIe42PRkrpTD8t3tcJ1Ursz1OmgFsgVlP7jsoop1bZ7qzxQXT7 idG17B/h3xGe4fFvkoPFW0BEAUMNsZDeqIBWQGwRqXFwSbtb9HrN6JLjXOOlSqWD Nv01EsnbkpPwFAvZ4fxk3TNy94t8HD2MPxLvD1AmfROjiPRu+Q09UpqkoVOlRNE+ qVVONa+XOAp48o6F2MH0E67LypCQcKnVv8jyMXEzlhpIJp6jXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDuiURcIqaeyk/gxuE4iIKBfUV+QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmM5NTI2MmEtN2IzMi0z YmE0LWE5ZjAtMGY5YWM3ZDc1MDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABdPGjnl9MtcMb5VoCAm7wtbh9EjeHP4WB20fkNST7D2DEUHgHrp/9ZQ KnGa00JzHzNmkTiqjWe2bW/R6rdpTN+n6VlGZ5x5XqSu9rFIr6KGGJjAcLpscnVr 2bB8HDYmsqU5cm5yhHBziOBnLXF0W4AmNSABh/Ynvwr4eOs41fSbFCqX8fkSAB8T j05/sUOItQcEX6SFWe6H8c3k0Zg0BRLu5Rlv6N61X8VaTIgpi0zgB1vQ2L6jIeQC b34yF4x+VKO2Zt6qAJH/yjAbAb9VU9uBuRDkYAMuH5jS5ly5tfU5PWK2HzeHjrse RlwcAF4v5ADtpGcqhTFH//4p9YdPQT4= -----END CERTIFICATE-----Generated at Fri Mar 14 10:55:53 2025 by rpki-client