$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6e41f6a6-6d83-3d0c-a223-eb73f8e506b2.roa File: 6e41f6a6-6d83-3d0c-a223-eb73f8e506b2.roa (raw, json) Hash identifier: jIOkNUQ489H6nEykOjlnIYu58B1xiTqU3WfqQGxDNC8= Subject key identifier: D8:1F:D3:5A:A1:10:69:D0:BE:21:E3:AC:94:77:33:24:2F:63:9D:B9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814E5E375A484F51AE1DC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6e41f6a6-6d83-3d0c-a223-eb73f8e506b2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4e:5e:37:5a:48:4f:51:ae:1d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=138ff17b-c41c-4991-8718-b22311787de4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:eb:db:d2:e3:f7:d2:8d:63:d7:db:c3:74:80: ef:a1:e1:f1:a1:bf:38:ee:da:4d:51:4c:f8:7b:19: 3a:60:aa:09:d9:6f:92:9c:4a:23:ab:6e:ae:75:26: 88:85:d1:98:e6:5a:0a:90:58:55:60:54:f3:45:b1: cd:1a:ec:e2:71:17:fa:3e:5a:50:cf:1f:85:34:90: d8:cb:48:1f:93:8c:4d:0a:2f:56:68:16:1f:74:8c: 80:90:d6:21:40:84:95:10:ed:2c:10:a9:91:15:1d: 5d:d1:c1:12:d5:dc:b6:47:74:b7:8f:3c:5e:70:52: 81:d5:20:29:ad:9e:13:9c:10:ff:b3:37:2c:03:69: 4f:33:6d:70:9b:f5:bf:c8:a1:84:3c:ed:06:88:2c: 1c:da:09:5a:3e:dc:86:0b:9a:cb:f6:72:3f:e5:0e: 0a:0a:10:9f:a8:f5:a3:7b:b5:e4:ab:1b:b5:67:8b: db:6a:9d:8d:f8:3d:6e:79:2e:f7:d1:fa:22:b2:cc: e2:ec:b9:1e:f0:af:02:fc:5a:82:19:70:52:d0:18: 76:fe:fd:b8:d1:e3:43:e4:c8:69:02:e3:a6:53:03: 4f:26:6a:f0:94:fb:32:ef:2c:c4:2d:b0:c1:d3:de: e0:d0:18:0c:d3:5e:fd:7c:e4:a8:3e:af:70:ca:a7: f5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:1F:D3:5A:A1:10:69:D0:BE:21:E3:AC:94:77:33:24:2F:63:9D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6e41f6a6-6d83-3d0c-a223-eb73f8e506b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:4e:c9:17:47:98:50:bc:e3:b7:e5:4a:9b:97:75:df:44:12: c2:7a:8c:df:32:d1:d1:30:a3:54:20:74:a0:4d:fd:54:76:17: 72:3b:e8:7f:22:49:8d:5a:ba:4f:e9:ad:ff:bd:2a:f4:99:42: 36:35:a7:7a:0a:95:ed:29:da:a1:27:d5:58:6a:4e:d9:b1:34: a7:23:e5:7c:ea:9c:a1:2f:8e:1e:06:34:6f:00:10:85:c3:38: 4f:4e:e8:38:a7:9f:4d:9c:bf:1d:9e:ec:28:22:0b:22:24:11: e9:ae:e7:b7:31:f8:90:18:3f:26:05:7d:02:e6:73:23:84:fd: ab:08:75:0f:a7:b5:64:b5:7b:36:8b:9d:b8:30:98:fe:93:4f: f0:25:72:4a:fe:02:ce:62:a1:73:2c:89:57:d4:c8:9e:0a:5e: 03:04:3d:33:3c:12:71:d6:ae:d4:1b:d6:09:9d:49:9b:19:54: b2:1b:4a:b9:f6:3c:ad:2c:b6:14:ce:e7:5b:4f:9e:b8:d9:56: db:74:dd:80:5f:b2:c1:4c:f6:ed:29:f8:6a:b0:cf:2b:cd:b1: 08:83:7b:d3:5a:4e:ec:a6:e6:17:92:c7:a2:5e:82:4a:24:9a: 76:f3:7b:2a:80:07:bb:31:1b:de:b7:70:b0:49:3a:0b:07:b1: 00:fe:05:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgU5eN1pIT1GuHcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTM4ZmYxN2ItYzQxYy00OTkxLTg3MTgtYjIyMzExNzg3ZGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouvb0uP30o1j19vDdIDvoeHxob847tpNUUz4 exk6YKoJ2W+SnEojq26udSaIhdGY5loKkFhVYFTzRbHNGuzicRf6PlpQzx+FNJDY y0gfk4xNCi9WaBYfdIyAkNYhQISVEO0sEKmRFR1d0cES1dy2R3S3jzxecFKB1SAp rZ4TnBD/szcsA2lPM21wm/W/yKGEPO0GiCwc2glaPtyGC5rL9nI/5Q4KChCfqPWj e7Xkqxu1Z4vbap2N+D1ueS730foisszi7Lke8K8C/FqCGXBS0Bh2/v240eND5Mhp AuOmUwNPJmrwlPsy7yzELbDB097g0BgM0179fOSoPq9wyqf1fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgf01qhEGnQviHjrJR3MyQvY525MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmU0MWY2YTYtNmQ4My0z ZDBjLWEyMjMtZWI3M2Y4ZTUwNmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlOyRdHmFC847flSpuXdd9EEsJ6jN8y0dEwo1QgdKBN/VR2F3I76H8i SY1auk/prf+9KvSZQjY1p3oKle0p2qEn1VhqTtmxNKcj5XzqnKEvjh4GNG8AEIXD OE9O6Dinn02cvx2e7CgiCyIkEemu57cx+JAYPyYFfQLmcyOE/asIdQ+ntWS1ezaL nbgwmP6TT/Alckr+As5ioXMsiVfUyJ4KXgMEPTM8EnHWrtQb1gmdSZsZVLIbSrn2 PK0sthTO51tPnrjZVtt03YBfssFM9u0p+GqwzyvNsQiDe9NaTuym5heSx6Jegkok mnbzeyqAB7sxG963cLBJOgsHsQD+BcE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:55 2025 by rpki-client