$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa File: 6d02bb79-bd14-3045-b676-fd4335e3f038.roa (raw, json) Hash identifier: wUg1xePMFeA5dA5NT9O/Z0pWmR0/XkoanpPpLvPuq3w= Subject key identifier: 58:1B:40:34:0C:DE:07:7B:93:D7:D9:40:2D:FB:CA:29:16:A6:F0:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581474B91E9EDDCD00AA332 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:47:4b:91:e9:ed:dc:d0:0a:a3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3c4d6cb8-2993-4af9-b822-123934e7bc09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:08:11:b8:b2:48:d4:e8:ef:90:cb:13:e6:03: 46:0a:55:38:e5:68:31:17:6e:ea:d6:06:e1:75:36: dc:2e:90:56:94:37:3a:1d:ac:d0:61:4e:a2:43:cf: 68:f5:12:13:d0:28:a3:4c:33:32:14:26:8a:0a:f7: af:a3:56:9c:f2:67:7a:65:7d:8d:a4:82:d9:6d:ba: eb:df:84:71:31:ab:e2:03:ce:7f:db:1c:bc:2b:41: 69:15:21:61:55:07:3b:bd:54:fe:36:f6:81:88:9b: 06:0a:3b:fd:a1:52:bf:36:d5:6d:4c:e2:2a:1a:77: 78:24:fd:06:37:07:19:e1:71:c8:bd:6d:ae:90:8b: fe:87:a1:3a:a4:5c:2f:09:38:39:29:a4:09:e9:c9: ae:91:f4:58:6a:fd:a0:88:c7:fd:b8:4a:d6:30:e1: fc:49:fb:c8:64:c1:6b:3d:69:11:3e:98:43:04:11: 0c:5a:6c:f2:83:45:df:77:1e:33:c7:83:0f:94:5a: c2:25:14:59:50:a6:53:14:04:68:0c:7f:90:27:9d: aa:1b:21:88:e3:40:12:7a:6c:c4:a1:b4:8a:a7:10: 6d:bb:66:6e:1b:86:16:34:f5:44:8f:9b:f0:4c:7f: da:d2:d9:44:62:bc:8f:44:74:5b:b3:3f:cd:a3:19: 2e:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:1B:40:34:0C:DE:07:7B:93:D7:D9:40:2D:FB:CA:29:16:A6:F0:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:08:d2:bf:93:f0:26:87:60:60:c3:72:9f:83:24:55:23:92: 90:11:25:c7:20:f9:60:8d:e9:5d:d7:d9:fd:5d:a4:81:86:53: b9:00:6a:b5:3e:36:e8:c3:4d:98:78:57:d2:2f:5e:25:5f:c7: ad:11:ba:f1:b9:5a:4e:ec:ab:e7:0d:e4:d6:5e:6f:27:42:f0: 19:fa:8d:54:da:2c:1b:be:27:85:f6:cd:42:db:e8:f2:8e:cc: c6:9f:69:b6:c7:93:9a:8f:73:1a:c8:bf:a1:54:76:36:53:1b: a2:9f:8e:b4:f7:ff:9e:70:57:3e:ab:70:7b:20:b2:51:93:1b: 99:0a:af:01:e8:78:b1:56:53:80:f1:8d:8e:72:63:c9:39:15: 22:0a:fd:7a:1e:d4:57:73:7e:1c:c1:d1:83:6f:14:7b:ee:c8: 22:18:06:d9:56:8c:ab:db:eb:d1:0b:0f:f4:fc:24:df:bd:32: 46:f4:14:f4:16:73:2a:31:89:74:e1:99:8e:5f:87:ee:cd:34: 21:f5:b5:fc:c7:35:4e:e8:5d:99:03:fc:ba:4c:e2:4c:c8:7f: 8a:f6:53:47:83:a7:24:7d:01:20:ee:6c:4a:6a:e2:c1:47:4e: a2:1e:c9:81:5f:18:3a:85:bb:59:fa:99:0f:4a:c4:bd:fa:ee: 95:08:70:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUdLkent3NAKozIwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2M0ZDZjYjgtMjk5My00YWY5LWI4MjItMTIzOTM0ZTdiYzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQgRuLJI1OjvkMsT5gNGClU45WgxF27q1gbh dTbcLpBWlDc6HazQYU6iQ89o9RIT0CijTDMyFCaKCvevo1ac8md6ZX2NpILZbbrr 34RxMaviA85/2xy8K0FpFSFhVQc7vVT+NvaBiJsGCjv9oVK/NtVtTOIqGnd4JP0G NwcZ4XHIvW2ukIv+h6E6pFwvCTg5KaQJ6cmukfRYav2giMf9uErWMOH8SfvIZMFr PWkRPphDBBEMWmzyg0Xfdx4zx4MPlFrCJRRZUKZTFARoDH+QJ52qGyGI40ASemzE obSKpxBtu2ZuG4YWNPVEj5vwTH/a0tlEYryPRHRbsz/NoxkuswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgbQDQM3gd7k9fZQC37yikWpvCnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmQwMmJiNzktYmQxNC0z MDQ1LWI2NzYtZmQ0MzM1ZTNmMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMI0r+T8CaHYGDDcp+DJFUjkpARJccg+WCN6V3X2f1dpIGGU7kAarU+ NujDTZh4V9IvXiVfx60RuvG5Wk7sq+cN5NZebydC8Bn6jVTaLBu+J4X2zULb6PKO zMafabbHk5qPcxrIv6FUdjZTG6KfjrT3/55wVz6rcHsgslGTG5kKrwHoeLFWU4Dx jY5yY8k5FSIK/Xoe1FdzfhzB0YNvFHvuyCIYBtlWjKvb69ELD/T8JN+9Mkb0FPQW cyoxiXThmY5fh+7NNCH1tfzHNU7oXZkD/LpM4kzIf4r2U0eDpyR9ASDubEpq4sFH TqIeyYFfGDqFu1n6mQ9KxL367pUIcHc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:01 2025 by rpki-client