$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa File: 89bb151f-5c2a-3e02-8e58-24e220a54b24.roa (raw, json) Hash identifier: 4bkki26+MDuSIl+6rTH83LmyXKz2nE7fE4+DB2HgajE= Subject key identifier: 80:F2:8C:04:98:3B:64:B0:0E:0B:44:A0:03:49:79:9F:F1:4D:03:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58148587746120E0550B500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:48:58:77:46:12:0e:05:50:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=319048c3-78d0-4e39-ac0a-2f726ca460e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:16:13:6c:7c:2d:fe:40:2b:72:ac:47:4f:84: 17:a1:99:2e:01:a7:ad:76:6b:ae:01:47:f2:48:d4: bb:6b:8a:f9:fb:24:9a:7b:ac:8a:d4:40:2a:ad:b3: fa:9d:1f:67:30:11:9a:dd:0d:81:df:56:0d:ba:15: 1d:a1:86:88:33:82:dd:74:b0:96:c3:33:d1:b8:58: 8d:07:36:09:dc:ab:34:27:f5:36:b7:7e:de:5a:ca: 1a:4c:ca:69:3b:b1:d6:06:a5:cd:d2:d5:33:2a:a0: a3:23:9b:1d:a8:3d:63:97:7a:d4:bc:74:ca:2c:1b: ad:f8:e7:ce:cf:37:38:ad:26:11:6a:05:4c:34:31: 33:2e:48:57:16:cf:60:29:cc:f9:09:8e:bc:19:25: 8c:f9:b3:28:25:01:4a:7d:85:6c:e2:53:33:c8:fa: 9e:be:34:ce:ec:0c:6c:b8:f5:90:5e:ac:6d:83:ab: 93:14:47:65:7e:65:df:0d:89:2d:39:3f:22:1b:5f: 5c:5a:95:18:8b:0b:4b:e4:1d:3c:46:0b:18:43:16: bb:b2:47:87:10:be:32:04:4c:5b:07:a2:26:4a:0d: 4e:d9:44:55:83:32:50:6f:e5:12:5f:28:3f:2f:94: 52:2b:51:98:f6:4e:b3:bd:ed:e5:83:aa:d7:c9:d5: e0:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F2:8C:04:98:3B:64:B0:0E:0B:44:A0:03:49:79:9F:F1:4D:03:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/89bb151f-5c2a-3e02-8e58-24e220a54b24.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:0c:f3:9d:79:a0:b2:18:e7:d8:78:1a:5d:8c:3d:47:50:04: c7:4c:8d:e1:22:89:b8:1c:6a:13:08:92:45:a0:7b:4b:3d:d0: 76:07:51:c0:c5:2c:6e:2e:67:42:a5:ee:f2:88:bd:de:5a:20: 1c:b4:70:5b:66:e1:b5:6c:88:d3:54:73:57:14:21:f0:87:d3: 07:9d:67:11:33:7c:8a:aa:57:f0:d1:74:e6:aa:21:5f:2a:41: 0b:48:52:fd:96:06:16:b6:41:06:6e:f8:0b:7e:64:2d:54:43: 2d:01:c1:39:56:a6:bb:01:58:32:cc:92:8e:25:f5:79:b8:a2: 8e:f5:05:67:26:fe:94:66:4a:a0:d0:b8:64:e3:13:f9:94:a5: e7:76:7d:f1:ef:e7:48:7b:fa:ea:42:60:9a:47:b2:ad:3f:53: 33:b3:34:19:3a:5d:5c:8b:3c:b8:01:20:19:d5:6c:54:a6:df: ed:d5:08:84:95:53:82:c3:4a:ed:8a:28:1d:cf:68:e1:a6:dc: 2b:7f:6f:c6:95:0d:e8:36:09:ae:4d:1d:d3:5e:06:04:56:d3: fd:7d:ce:6a:54:2c:c4:07:04:21:d3:8d:24:8a:0a:0c:09:18: a0:19:70:a2:25:6c:5e:b1:6f:cc:ec:4f:89:a9:f2:aa:a7:92: 4c:98:cc:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUhYd0YSDgVQtQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzE5MDQ4YzMtNzhkMC00ZTM5LWFjMGEtMmY3MjZjYTQ2MGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRYTbHwt/kArcqxHT4QXoZkuAaetdmuuAUfy SNS7a4r5+ySae6yK1EAqrbP6nR9nMBGa3Q2B31YNuhUdoYaIM4LddLCWwzPRuFiN BzYJ3Ks0J/U2t37eWsoaTMppO7HWBqXN0tUzKqCjI5sdqD1jl3rUvHTKLBut+OfO zzc4rSYRagVMNDEzLkhXFs9gKcz5CY68GSWM+bMoJQFKfYVs4lMzyPqevjTO7Axs uPWQXqxtg6uTFEdlfmXfDYktOT8iG19cWpUYiwtL5B08RgsYQxa7skeHEL4yBExb B6ImSg1O2URVgzJQb+USXyg/L5RSK1GY9k6zve3lg6rXydXgmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDyjASYO2SwDgtEoANJeZ/xTQOZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODliYjE1MWYtNWMyYS0z ZTAyLThlNTgtMjRlMjIwYTU0YjI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcM8515oLIY59h4Gl2MPUdQBMdMjeEiibgcahMIkkWge0s90HYHUcDF LG4uZ0Kl7vKIvd5aIBy0cFtm4bVsiNNUc1cUIfCH0wedZxEzfIqqV/DRdOaqIV8q QQtIUv2WBha2QQZu+At+ZC1UQy0BwTlWprsBWDLMko4l9Xm4oo71BWcm/pRmSqDQ uGTjE/mUped2ffHv50h7+upCYJpHsq0/UzOzNBk6XVyLPLgBIBnVbFSm3+3VCISV U4LDSu2KKB3PaOGm3Ct/b8aVDeg2Ca5NHdNeBgRW0/19zmpULMQHBCHTjSSKCgwJ GKAZcKIlbF6xb8zsT4mp8qqnkkyYzDg= -----END CERTIFICATE-----Generated at Sat Apr 12 00:09:54 2025 by rpki-client