$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa File: 8df81b61-4595-327a-837b-ad4983cb8977.roa (raw, json) Hash identifier: hl7NcdvFh6h4or6w+KzAVm3ENGF+c4iX3rqKzgimTpY= Subject key identifier: 3B:9A:D2:03:6B:F9:75:4A:2D:20:98:F4:BB:ED:DB:0F:86:54:71:C0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581457C18BFA4876E635380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:45:7c:18:bf:a4:87:6e:63:53:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a5d62be9-9a50-4ef4-891f-13cd63019a9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:6e:4c:27:1d:51:5a:55:ed:9a:34:cf:56: dd:c9:75:db:e4:4a:f4:5e:61:ad:3f:72:25:43:9b: 5e:d0:4c:79:59:12:bd:a4:43:97:3b:4f:7e:32:30: 1d:86:dc:c9:3d:65:60:93:d6:a8:05:62:0e:e4:3c: d6:93:ec:39:c4:5a:39:f0:ee:d4:d9:4c:79:53:cb: 2a:4e:4c:80:aa:ac:ed:d5:b1:a8:53:b3:1b:ce:c6: 16:ff:0a:e2:63:13:27:b8:93:b8:81:f7:d8:3e:3c: d5:71:db:e8:a9:06:f3:43:81:61:66:8c:cf:2a:5c: 70:6f:f6:cb:c4:97:1e:8c:b5:81:59:23:7c:e1:c2: 2a:c3:f8:f1:f3:0c:90:89:8e:8d:0f:d6:9f:11:e9: 15:be:1b:29:8b:00:07:44:7f:21:5b:37:c6:d6:39: 63:7a:c0:da:ce:5b:ac:4b:d0:0c:76:6f:c5:37:a1: cb:91:ca:7c:a1:a0:8d:e7:49:04:18:57:43:48:cd: bc:eb:c0:38:71:97:ff:fd:b5:61:07:d9:c1:c8:46: 39:01:11:83:58:cf:e2:77:34:74:a7:ec:d7:b4:54: d2:93:2d:b6:50:c5:23:4e:52:63:dc:55:e1:a4:03: 08:a6:81:da:1f:1a:e9:c4:32:84:8a:a0:71:72:57: d3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:9A:D2:03:6B:F9:75:4A:2D:20:98:F4:BB:ED:DB:0F:86:54:71:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:94:c6:48:d3:ff:93:62:fe:18:f0:26:a1:b7:14:13:df:e4: c0:b3:42:c6:e3:5f:e7:6c:82:cb:a7:11:22:d0:52:2d:1b:ae: b8:cd:eb:8e:2b:de:ce:5e:79:95:0e:fd:22:cd:76:a4:38:8b: 74:ee:6a:74:ff:50:c9:ac:74:41:96:37:22:b8:e8:e8:76:b4: 5c:df:33:66:19:bf:e0:7b:ed:bb:99:b9:d0:09:f8:b6:12:50: 32:01:3b:cf:5f:25:36:70:3e:22:dd:8c:28:d2:5d:c9:4a:70: 45:7e:f2:bd:96:ad:13:ba:df:a6:7c:bb:4e:6e:5d:e4:42:7f: 47:cb:bd:7f:00:4a:2e:86:6e:ce:23:cc:b8:bd:bb:34:93:6a: f7:e2:85:b9:f4:a7:b5:1a:a7:c2:75:ba:c5:32:ff:6a:d6:85: 2a:90:66:27:21:42:87:57:80:73:42:63:56:4e:ef:31:29:ac: b1:2b:bd:7c:db:e9:32:f0:db:4d:96:89:b0:bb:a2:4a:1b:08: 5c:01:0e:a2:c1:79:db:1b:cf:5d:d4:f5:80:21:db:cc:ca:0c: 17:03:45:de:e8:25:8c:63:13:b8:b2:7c:06:1c:e2:12:8b:c1: 39:8c:31:b9:8f:e3:98:33:91:fb:f7:bb:ed:a5:31:71:5d:f2: ad:25:2b:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUV8GL+kh25jU4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTVkNjJiZTktOWE1MC00ZWY0LTg5MWYtMTNjZDYzMDE5YTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzs5uTCcdUVpV7Zo0z1bdyXXb5Er0XmGtP3Il Q5te0Ex5WRK9pEOXO09+MjAdhtzJPWVgk9aoBWIO5DzWk+w5xFo58O7U2Ux5U8sq TkyAqqzt1bGoU7MbzsYW/wriYxMnuJO4gffYPjzVcdvoqQbzQ4FhZozPKlxwb/bL xJcejLWBWSN84cIqw/jx8wyQiY6ND9afEekVvhspiwAHRH8hWzfG1jljesDazlus S9AMdm/FN6HLkcp8oaCN50kEGFdDSM2868A4cZf//bVhB9nByEY5ARGDWM/idzR0 p+zXtFTSky22UMUjTlJj3FXhpAMIpoHaHxrpxDKEiqBxclfTxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDua0gNr+XVKLSCY9Lvt2w+GVHHAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGRmODFiNjEtNDU5NS0z MjdhLTgzN2ItYWQ0OTgzY2I4OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHCUxkjT/5Ni/hjwJqG3FBPf5MCzQsbjX+dsgsunESLQUi0brrjN644r 3s5eeZUO/SLNdqQ4i3TuanT/UMmsdEGWNyK46Oh2tFzfM2YZv+B77buZudAJ+LYS UDIBO89fJTZwPiLdjCjSXclKcEV+8r2WrRO636Z8u05uXeRCf0fLvX8ASi6Gbs4j zLi9uzSTavfihbn0p7Uap8J1usUy/2rWhSqQZichQodXgHNCY1ZO7zEprLErvXzb 6TLw202WibC7okobCFwBDqLBedsbz13U9YAh28zKDBcDRd7oJYxjE7iyfAYc4hKL wTmMMbmP45gzkfv3u+2lMXFd8q0lK48= -----END CERTIFICATE-----Generated at Sun Feb 16 15:37:30 2025 by rpki-client