$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70debb22-7dff-3fa1-9c3b-0bf2e9c05b25.roa File: 70debb22-7dff-3fa1-9c3b-0bf2e9c05b25.roa (raw, json) Hash identifier: ulx/OmF5EqAHtS+JjPs/7MzZJ8LT1LrzNy6sOPTvkT4= Subject key identifier: 44:D0:E5:43:56:B3:C3:65:F7:8E:98:AF:4C:89:26:7A:E3:91:9E:E2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58146FACD23F054FEB467E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70debb22-7dff-3fa1-9c3b-0bf2e9c05b25.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.180.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:46:fa:cd:23:f0:54:fe:b4:67:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=cf6fd42f-d420-4955-8f88-10f108ef15cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:10:ea:28:7e:bc:10:dc:4e:43:79:7e:b3:62: ae:15:df:e8:f4:6e:13:59:df:ec:b8:0f:96:e1:bd: 09:ce:d4:7c:83:2e:fa:bd:50:df:7f:0c:9d:e4:89: bb:95:22:7e:3b:20:67:9b:3d:4e:01:7a:c5:84:56: eb:df:0c:83:f4:7f:96:2c:5a:04:e6:ec:c3:de:71: 1f:5a:34:94:55:4e:36:f2:d9:dc:7e:8c:85:9a:01: 88:0a:ce:e4:62:16:1a:f9:6e:e4:db:4a:ed:65:ac: df:80:a3:0b:13:77:40:2c:92:2d:a4:1c:81:69:d7: 35:45:a1:02:8e:ec:56:0d:4f:e7:01:cd:32:c7:97: 90:b0:1b:ac:c3:55:6e:f0:6f:28:1d:ad:c4:62:f3: a0:df:e9:a0:5a:d3:d6:47:a9:c2:94:bb:ae:7e:a2: 39:40:f3:6b:af:07:d6:77:74:19:d6:9d:b9:b1:16: d3:31:ea:d0:51:42:74:96:4a:28:b0:2e:36:9f:bd: 59:5b:7d:d3:d3:ee:9a:a9:5c:03:a6:7d:5c:37:b9: 9b:c2:c0:05:23:33:c1:d6:1c:a6:96:cc:68:3b:f9: 4e:25:02:dc:d5:fd:58:69:83:36:77:8a:98:c6:ac: 85:73:21:75:59:47:12:7d:ca:7c:bc:bc:bf:24:49: 70:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:D0:E5:43:56:B3:C3:65:F7:8E:98:AF:4C:89:26:7A:E3:91:9E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/70debb22-7dff-3fa1-9c3b-0bf2e9c05b25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.180.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:ed:64:39:6f:f3:49:f7:26:25:c5:cc:76:b9:26:c5:53:7c: f4:05:a8:16:79:73:0b:62:c6:41:56:26:44:d8:f1:b3:e8:79: 8b:58:51:0a:9f:2c:42:10:96:35:1d:a3:32:bd:22:bb:4c:58: 0e:9c:cc:e8:02:86:82:8c:81:3c:3b:d2:28:d0:d3:ea:b3:19: fb:8f:36:51:72:ee:4e:89:e2:86:3b:99:8d:90:0b:df:d1:31: 1d:95:6f:70:e0:39:f7:64:ab:e0:0e:35:77:18:0a:68:b8:cf: 3a:40:94:da:00:14:b4:39:c1:bd:51:b0:de:89:7e:ff:57:26: 04:ab:4f:ba:fd:80:e9:a6:a4:85:bf:ec:47:1c:c4:e0:53:42: a6:4b:3d:38:00:80:6d:93:d5:9d:a2:68:bf:43:f9:fb:8b:c3: 23:12:d3:fb:50:87:9a:24:bd:4c:90:a9:4e:a0:05:70:fa:82: cf:47:0e:be:a2:b4:6d:59:84:68:df:6c:20:ad:12:70:d8:b9: f7:a0:63:0d:85:f7:9a:bc:e9:c8:6d:e0:33:c3:40:e3:70:c7: 18:93:5a:0b:8e:71:28:8a:2c:27:1e:e4:32:2d:3f:84:c0:11: 95:59:8a:43:7d:6b:fe:0d:7e:d1:41:1c:46:b3:af:3b:6e:ac: e1:72:e2:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUb6zSPwVP60Z+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2Y2ZmQ0MmYtZDQyMC00OTU1LThmODgtMTBmMTA4ZWYxNWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRDqKH68ENxOQ3l+s2KuFd/o9G4TWd/suA+W 4b0JztR8gy76vVDffwyd5Im7lSJ+OyBnmz1OAXrFhFbr3wyD9H+WLFoE5uzD3nEf WjSUVU428tncfoyFmgGICs7kYhYa+W7k20rtZazfgKMLE3dALJItpByBadc1RaEC juxWDU/nAc0yx5eQsBusw1Vu8G8oHa3EYvOg3+mgWtPWR6nClLuufqI5QPNrrwfW d3QZ1p25sRbTMerQUUJ0lkoosC42n71ZW33T0+6aqVwDpn1cN7mbwsAFIzPB1hym lsxoO/lOJQLc1f1YaYM2d4qYxqyFcyF1WUcSfcp8vLy/JElwHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFETQ5UNWs8Nl946Yr0yJJnrjkZ7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzBkZWJiMjItN2RmZi0z ZmExLTljM2ItMGJmMmU5YzA1YjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL7tZDlv80n3JiXFzHa5JsVTfPQFqBZ5cwtixkFWJkTY8bPoeYtYUQqf LEIQljUdozK9IrtMWA6czOgChoKMgTw70ijQ0+qzGfuPNlFy7k6J4oY7mY2QC9/R MR2Vb3DgOfdkq+AONXcYCmi4zzpAlNoAFLQ5wb1RsN6Jfv9XJgSrT7r9gOmmpIW/ 7EccxOBTQqZLPTgAgG2T1Z2iaL9D+fuLwyMS0/tQh5okvUyQqU6gBXD6gs9HDr6i tG1ZhGjfbCCtEnDYufegYw2F95q86cht4DPDQONwxxiTWguOcSiKLCce5DItP4TA EZVZikN9a/4NftFBHEazrzturOFy4lw= -----END CERTIFICATE-----Generated at Sat Apr 12 00:10:39 2025 by rpki-client