$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa File: 8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa (raw, json) Hash identifier: ThR1zGecpID3JyFifIg4Vep/Ty5WX0UWgxu8BXr+KBc= Subject key identifier: 53:BF:25:98:C4:83:C1:90:5F:80:BC:35:DD:51:4B:63:8D:76:07:23 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D55590D26C104F448C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d5:55:90:d2:6c:10:4f:44:8c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f0118887-4392-4495-bb44-32539e42f133 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c4:cf:ff:0e:2b:76:cb:65:68:e3:6d:4a:97: b5:73:ba:4e:58:89:74:c7:1b:3a:a3:03:e5:c4:1e: d0:4a:81:38:2c:f3:a9:db:ac:8c:29:85:96:30:17: f9:65:13:36:f9:0b:d2:49:75:77:a9:49:ec:9a:61: ce:13:72:e4:42:f4:7c:bd:16:6c:fe:6f:f0:6c:dc: 56:ad:a6:5c:46:0d:f2:6c:b7:53:48:86:2b:f1:27: a8:ca:9c:23:27:1c:19:c5:b2:4a:53:05:d6:e6:6b: 3a:ed:4b:e5:5b:ea:9b:03:d4:df:82:f6:33:83:88: 49:0e:28:9f:9f:64:1b:24:2d:8c:09:1d:7d:89:46: 76:98:17:4b:fb:9a:8d:77:11:fe:1b:c1:3d:31:2d: 5b:78:94:2e:eb:f8:72:05:06:20:12:99:cf:f5:65: 45:8b:bc:a6:ef:46:13:30:6e:a5:95:3d:c8:95:e2: 35:39:c2:3a:21:eb:b7:24:ce:49:c5:bb:a7:ba:30: e8:15:24:70:70:b3:b2:92:3c:37:96:86:41:d9:37: 32:3d:31:d9:28:11:67:e8:1a:7e:5c:68:c5:57:84: e6:f0:09:00:75:f3:9d:3f:8a:b0:6e:d2:f1:c8:7b: da:5e:eb:9b:88:b2:73:c6:97:df:94:cc:ee:1a:aa: 58:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:BF:25:98:C4:83:C1:90:5F:80:BC:35:DD:51:4B:63:8D:76:07:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8615eb89-654a-31a3-8f79-ae5d7f3bd9c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:e3:63:12:7c:69:cf:85:f5:89:7f:40:06:86:04:06:35:cd: ca:2d:66:7f:7f:a2:5e:18:12:01:c3:b8:5a:88:1d:da:e0:82: ef:b7:90:92:8a:a0:f9:26:8a:44:ee:7f:7b:98:ca:2e:a3:23: d6:d3:37:78:41:09:7d:60:9e:fd:d0:3a:d2:15:fc:3b:9c:69: 00:10:2e:da:33:a6:9b:3c:bf:a7:ff:f3:73:45:a8:97:a9:9f: eb:6a:a7:43:ae:8d:28:df:23:55:d8:d3:dd:92:8b:c4:d6:22: 34:8c:d5:7e:fa:87:6e:ef:c3:83:35:26:6f:2d:c4:78:4f:db: ac:5c:83:78:9a:d5:b0:ef:09:7d:22:1b:b6:1b:b6:d7:ff:a0: ca:b7:44:b5:0c:1b:fb:75:97:47:18:ec:e8:29:75:a2:cb:32: 72:68:fd:05:04:62:12:64:0d:95:ad:49:3d:62:a5:14:1b:c9: 1f:5b:79:07:c2:b0:0a:d0:6c:ff:dc:ba:7a:09:34:68:6d:0c: 16:ad:9b:82:1d:af:2f:84:1b:3f:7e:98:ed:a7:b1:c8:7b:a4: 80:46:3a:0a:b8:ba:d4:ff:46:8e:bf:05:04:1f:d7:25:fe:30: 78:c0:a8:3d:e7:1e:e8:97:04:64:2b:84:b7:fa:fb:91:65:64: 98:57:03:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdVVkNJsEE9EjAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjAxMTg4ODctNDM5Mi00NDk1LWJiNDQtMzI1MzllNDJmMTMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMTP/w4rdstlaONtSpe1c7pOWIl0xxs6owPl xB7QSoE4LPOp26yMKYWWMBf5ZRM2+QvSSXV3qUnsmmHOE3LkQvR8vRZs/m/wbNxW raZcRg3ybLdTSIYr8SeoypwjJxwZxbJKUwXW5ms67UvlW+qbA9TfgvYzg4hJDiif n2QbJC2MCR19iUZ2mBdL+5qNdxH+G8E9MS1beJQu6/hyBQYgEpnP9WVFi7ym70YT MG6llT3IleI1OcI6Ieu3JM5JxbunujDoFSRwcLOykjw3loZB2TcyPTHZKBFn6Bp+ XGjFV4Tm8AkAdfOdP4qwbtLxyHvaXuubiLJzxpfflMzuGqpYUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFO/JZjEg8GQX4C8Nd1RS2ONdgcjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODYxNWViODktNjU0YS0z MWEzLThmNzktYWU1ZDdmM2JkOWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACrjYxJ8ac+F9Yl/QAaGBAY1zcotZn9/ol4YEgHDuFqIHdrggu+3kJKK oPkmikTuf3uYyi6jI9bTN3hBCX1gnv3QOtIV/DucaQAQLtozpps8v6f/83NFqJep n+tqp0OujSjfI1XY092Si8TWIjSM1X76h27vw4M1Jm8txHhP26xcg3ia1bDvCX0i G7Ybttf/oMq3RLUMG/t1l0cY7OgpdaLLMnJo/QUEYhJkDZWtST1ipRQbyR9beQfC sArQbP/cunoJNGhtDBatm4Idry+EGz9+mO2nsch7pIBGOgq4utT/Ro6/BQQf1yX+ MHjAqD3nHuiXBGQrhLf6+5FlZJhXAwM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:28:58 2025 by rpki-client