$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa File: 6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa (raw, json) Hash identifier: 9cJQlErCxGfHOWR/QDvoH030Fzdekc8UojQlJgAvdqQ= Subject key identifier: 48:24:45:E4:92:26:3C:B9:B6:8A:72:91:4B:0D:42:CE:CD:62:1C:BA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581461D1BCF9F89AEAF3080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:46:1d:1b:cf:9f:89:ae:af:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=4967f06c-e72a-4c04-a3d5-5dd2b26b2b89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:4d:61:7f:fd:23:0b:c0:c1:6a:90:04:3b:d5: 48:99:69:bf:ba:1c:fa:85:6f:e7:b6:cc:35:f9:fd: e3:a0:3f:7b:8d:5a:b0:5f:27:23:f6:19:ad:78:db: 05:be:49:28:d3:ae:51:8e:42:06:25:5d:81:01:77: 5c:07:94:dd:18:67:f8:72:81:43:e9:e4:05:a1:df: e9:8a:37:2b:b5:80:ef:cf:68:ca:7f:77:98:54:8c: 29:9d:02:e1:71:df:7e:65:06:08:c5:e2:2c:2a:5e: f5:48:ba:a0:d9:56:11:28:f6:04:29:00:d0:e1:37: e5:85:87:de:0d:71:65:7a:36:9c:c8:3e:c2:35:23: 57:2b:a0:29:9f:80:d8:f1:80:c2:cb:60:28:93:d6: 44:ed:29:82:94:7f:79:ee:49:26:a8:50:ab:50:a7: a8:aa:50:93:f5:99:6f:52:f1:19:1c:1a:be:a8:e5: c8:55:4a:a4:bb:a5:c1:8c:26:77:99:ee:33:5a:dc: aa:3b:8a:f9:1f:53:48:1a:0c:b5:68:80:83:0f:1c: ab:fe:dd:cf:f6:b6:16:1c:a0:59:cd:9d:06:23:3a: 1f:72:37:e5:2c:a0:04:af:9a:01:c1:88:ee:da:a9: be:ac:1d:df:b2:aa:fa:f1:d3:47:28:4d:a6:aa:b5: 00:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:24:45:E4:92:26:3C:B9:B6:8A:72:91:4B:0D:42:CE:CD:62:1C:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d634603-25e0-3c3a-bc77-3f6db1f0c6ae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:de:6d:c2:fd:6a:cd:96:3b:e5:29:90:82:7e:76:7f:7b:08: 07:72:b9:3d:2c:14:1d:75:f7:95:a9:ba:c9:b4:b6:34:8a:46: 2c:76:ef:55:83:1a:11:1f:fb:66:74:2a:1a:1d:1c:e2:11:55: 8a:c3:b2:17:8d:5c:51:84:28:c4:c9:cb:0a:8a:3c:84:20:0e: 90:e5:a7:59:83:7c:13:ac:69:90:bf:87:fd:6c:28:e8:b8:d9: d6:bd:79:f3:8b:fc:9c:60:7d:d6:37:27:f9:66:67:32:ef:8b: ab:bf:f2:6f:d2:bc:61:ca:f0:74:73:c1:f9:17:92:c6:f2:98: 50:8a:8f:bc:87:47:74:fe:c0:5d:c9:9e:fb:dd:75:8e:cb:e7: 8a:81:3b:6d:2c:c9:d2:da:cb:56:14:9c:cd:ef:be:7c:79:d2: 77:21:06:21:aa:b8:e8:e2:a2:a9:ea:98:16:f4:7d:d4:91:34: c5:d4:5b:3d:b4:97:ac:97:ab:0b:57:70:f4:ff:d1:76:61:0f: bd:cc:c7:d8:9a:07:7c:1a:48:b6:44:22:0e:28:c5:f8:ee:72: a2:61:d5:a3:5a:1d:22:34:e0:94:2c:a4:70:a0:f0:7b:27:dd: b6:ee:67:48:01:2e:da:86:29:35:44:7e:a1:04:16:d6:ec:93: 1b:e4:c6:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUYdG8+fia6vMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDk2N2YwNmMtZTcyYS00YzA0LWEzZDUtNWRkMmIyNmIyYjg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn01hf/0jC8DBapAEO9VImWm/uhz6hW/ntsw1 +f3joD97jVqwXycj9hmteNsFvkko065RjkIGJV2BAXdcB5TdGGf4coFD6eQFod/p ijcrtYDvz2jKf3eYVIwpnQLhcd9+ZQYIxeIsKl71SLqg2VYRKPYEKQDQ4TflhYfe DXFlejacyD7CNSNXK6Apn4DY8YDCy2Aok9ZE7SmClH957kkmqFCrUKeoqlCT9Zlv UvEZHBq+qOXIVUqku6XBjCZ3me4zWtyqO4r5H1NIGgy1aICDDxyr/t3P9rYWHKBZ zZ0GIzofcjflLKAEr5oBwYju2qm+rB3fsqr68dNHKE2mqrUA3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEgkReSSJjy5topykUsNQs7NYhy6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmQ2MzQ2MDMtMjVlMC0z YzNhLWJjNzctM2Y2ZGIxZjBjNmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF7ebcL9as2WO+UpkIJ+dn97CAdyuT0sFB1195Wpusm0tjSKRix271WD GhEf+2Z0KhodHOIRVYrDsheNXFGEKMTJywqKPIQgDpDlp1mDfBOsaZC/h/1sKOi4 2da9efOL/JxgfdY3J/lmZzLvi6u/8m/SvGHK8HRzwfkXksbymFCKj7yHR3T+wF3J nvvddY7L54qBO20sydLay1YUnM3vvnx50nchBiGquOjioqnqmBb0fdSRNMXUWz20 l6yXqwtXcPT/0XZhD73Mx9iaB3waSLZEIg4oxfjucqJh1aNaHSI04JQspHCg8Hsn 3bbuZ0gBLtqGKTVEfqEEFtbskxvkxms= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:44 2025 by rpki-client