$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6feb8b70-3c08-34b0-ac7a-ab9ee5c23764.roa File: 6feb8b70-3c08-34b0-ac7a-ab9ee5c23764.roa (raw, json) Hash identifier: 2Sgtpzq68kcic5eZQPw3dI3E6yB0KPuHdt0T42f7f/k= Subject key identifier: 7E:8D:89:2E:6F:E3:4C:79:4A:E5:01:95:13:C5:BC:5A:89:99:8F:2C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814DF0310B53AA2EA82780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6feb8b70-3c08-34b0-ac7a-ab9ee5c23764.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4d:f0:31:0b:53:aa:2e:a8:27:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=ccab3f70-d61d-4002-94dd-5b5f74a84a38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ac:8f:ce:b9:74:f9:5b:94:11:46:b7:3f:7f: 79:9d:97:5a:bd:92:a3:42:52:64:da:56:05:22:f1: b4:4c:53:29:85:85:83:87:d3:30:0d:e3:c3:4e:a6: 77:f3:f4:0f:b2:81:0c:f6:52:9b:4b:58:49:4c:b5: d3:e2:f0:1b:c9:16:a3:c3:1c:87:7d:74:ee:a1:78: e6:ab:cb:28:57:0b:6d:97:05:5a:54:13:c8:78:25: d9:dc:2e:5c:84:28:a2:c4:0c:58:03:5c:fb:80:ae: fa:8e:64:68:af:ca:04:2e:39:e4:fe:59:0b:a1:89: ee:34:8d:a7:28:21:63:21:b7:d5:7a:1c:6a:ad:86: 0c:8f:d1:2b:26:25:fc:01:ab:f7:50:f0:01:dd:e8: 59:13:59:49:ae:ca:c4:5b:b9:59:69:20:8d:2d:a5: 31:d7:62:72:01:d7:55:fd:68:d8:65:e0:a4:22:f6: 31:7b:08:9a:cc:bc:bc:3d:66:b3:39:02:9b:3f:bf: e6:59:7b:c0:e2:3d:ba:5f:dc:68:30:b4:05:32:06: 30:95:1b:d6:40:ee:19:06:06:48:0b:a0:d6:29:84: 75:93:d3:e7:06:e8:88:da:7d:d1:61:86:e7:b0:98: 48:13:34:73:ff:ac:9e:22:91:67:ff:fa:84:6a:3c: c7:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:8D:89:2E:6F:E3:4C:79:4A:E5:01:95:13:C5:BC:5A:89:99:8F:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6feb8b70-3c08-34b0-ac7a-ab9ee5c23764.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:2f:08:54:2f:23:6e:73:6c:f7:99:31:4c:ca:74:e2:b3:8e: 66:82:81:a8:fb:96:7a:a1:d4:3e:d4:1c:46:ca:b6:1d:00:76: 1b:e7:d8:6b:92:7d:e1:c4:94:ff:2d:4c:4c:f1:ca:2b:4e:7f: ec:c2:30:d2:8a:39:39:a9:94:18:1e:c9:04:75:68:eb:b9:87: cb:3e:71:fa:52:cc:88:f4:10:18:9a:e9:e4:b6:f3:ba:fc:cd: c8:b9:00:58:f3:49:12:62:d3:5f:f0:ab:c8:1b:92:d6:64:37: 7b:de:c2:3f:bb:c8:f9:5b:31:33:16:46:6b:b3:2d:d3:60:8f: 2b:93:39:d0:5f:08:fb:b6:8a:d1:4c:80:f9:f0:cc:f8:54:95: b8:9d:94:e7:9e:88:5f:01:7d:38:87:5e:97:44:c2:1d:6d:d3: c5:94:3a:6f:79:99:fb:a8:07:bb:64:ce:e8:06:64:1e:5b:76: cb:1a:c1:b9:67:96:d4:25:92:02:b6:b5:70:d4:c3:dc:1e:7d: 32:70:dc:a4:30:b9:2c:b4:3e:b7:37:56:af:28:42:1b:f8:54: b4:6f:7b:4c:a0:b3:66:b8:35:23:72:df:40:04:16:1b:a7:d9: 06:52:9c:40:bf:4a:4a:ac:d2:75:8b:c8:93:c9:7a:2f:67:d9: 95:7a:75:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgU3wMQtTqi6oJ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2NhYjNmNzAtZDYxZC00MDAyLTk0ZGQtNWI1Zjc0YTg0YTM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKyPzrl0+VuUEUa3P395nZdavZKjQlJk2lYF IvG0TFMphYWDh9MwDePDTqZ38/QPsoEM9lKbS1hJTLXT4vAbyRajwxyHfXTuoXjm q8soVwttlwVaVBPIeCXZ3C5chCiixAxYA1z7gK76jmRor8oELjnk/lkLoYnuNI2n KCFjIbfVehxqrYYMj9ErJiX8Aav3UPAB3ehZE1lJrsrEW7lZaSCNLaUx12JyAddV /WjYZeCkIvYxewiazLy8PWazOQKbP7/mWXvA4j26X9xoMLQFMgYwlRvWQO4ZBgZI C6DWKYR1k9PnBuiI2n3RYYbnsJhIEzRz/6yeIpFn//qEajzHaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6NiS5v40x5SuUBlRPFvFqJmY8sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmZlYjhiNzAtM2MwOC0z NGIwLWFjN2EtYWI5ZWU1YzIzNzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUvCFQvI25zbPeZMUzKdOKzjmaCgaj7lnqh1D7UHEbKth0Adhvn2GuS feHElP8tTEzxyitOf+zCMNKKOTmplBgeyQR1aOu5h8s+cfpSzIj0EBia6eS287r8 zci5AFjzSRJi01/wq8gbktZkN3vewj+7yPlbMTMWRmuzLdNgjyuTOdBfCPu2itFM gPnwzPhUlbidlOeeiF8BfTiHXpdEwh1t08WUOm95mfuoB7tkzugGZB5bdssawbln ltQlkgK2tXDUw9wefTJw3KQwuSy0Prc3Vq8oQhv4VLRve0ygs2a4NSNy30AEFhun 2QZSnEC/Skqs0nWLyJPJei9n2ZV6ddM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:24:49 2025 by rpki-client