$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa File: 8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa (raw, json) Hash identifier: C+XXF2KaYmV9GI1TlJtfd/ekwueKKDBb8zJxHVC47Eg= Subject key identifier: 33:81:C5:43:E7:44:FC:EB:D8:DF:F2:58:0C:88:C2:8E:DD:BB:28:EA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E08A63CB6CAC44920B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.206.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e0:8a:63:cb:6c:ac:44:92:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3ad500ab-5cb2-40d1-99b4-52bc50e8ddea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:47:41:c5:3e:b9:0d:17:9e:3b:2e:aa:d3:4d: 68:c0:74:47:4e:a1:33:e7:80:97:69:ac:0c:db:bc: e1:84:53:16:79:33:a5:84:66:6c:b3:49:20:b1:9e: 7b:02:79:bc:70:5c:22:bd:2d:c0:08:4c:00:28:43: be:5b:34:3c:f5:27:af:65:e0:ae:ec:09:69:22:47: 38:97:8f:ac:2b:a8:b1:af:af:a9:11:35:1f:14:8f: a5:a7:13:46:04:82:57:90:82:d5:69:2f:6f:9b:52: 84:cc:4b:74:96:f7:2c:e9:fe:c6:2a:6a:5e:e9:98: 7f:fd:5d:99:84:8f:78:99:f6:35:43:9a:22:42:5c: e6:05:ab:6f:08:92:d6:a5:f3:67:86:eb:48:0d:ac: 8d:c3:01:ad:da:89:23:ef:48:35:93:05:ad:f5:ba: 32:5f:a6:9d:f0:2e:05:34:93:74:39:5e:85:63:55: 0e:b2:fe:3a:de:b4:ed:b4:54:7e:e2:fb:d7:65:f8: c0:85:82:d7:2d:83:0b:1b:7d:6b:d8:2d:68:09:a1: 28:eb:c4:70:6f:5c:bd:12:23:6e:2d:2b:e0:66:e0: 57:13:f2:c9:18:67:70:38:12:9c:52:33:5f:13:e5: 80:53:00:6c:cf:0e:55:ae:b2:eb:e8:4d:38:bf:1e: 8d:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:81:C5:43:E7:44:FC:EB:D8:DF:F2:58:0C:88:C2:8E:DD:BB:28:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ffa5b67-3d6d-39cb-87c2-027e998dbf03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.206.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:41:06:0a:6d:be:18:17:5a:35:65:2e:9a:36:fd:66:e2:a7: bd:95:05:e9:88:72:6c:57:93:72:1d:01:b6:c9:9e:7b:14:da: 35:74:62:6e:b6:97:30:d0:75:1b:86:4c:e3:fd:68:07:a4:ff: 4d:97:43:af:6d:56:2c:7c:a8:90:71:1d:91:08:93:e8:48:df: f5:98:1f:21:26:a1:9a:75:44:0f:f5:f0:7b:d9:2e:99:ce:e5: ca:23:df:ba:eb:00:42:13:fc:37:39:cb:23:b1:1d:bd:67:99: d7:b8:be:d1:76:93:e1:27:91:2e:2b:38:be:c2:91:ba:83:c2: 49:33:0f:d9:65:c6:78:25:01:fe:43:84:74:3f:15:84:7c:98: 96:d9:f8:02:5a:98:5b:11:06:16:2e:af:fb:1d:62:2e:6d:eb: dc:17:7f:4f:e2:fe:9d:d9:d0:a7:e5:ef:6b:bc:70:c4:20:fa: 87:e5:ad:08:2e:b1:24:8a:49:f5:89:1e:1f:d9:58:46:13:d9: 08:c1:fa:c7:32:04:d6:71:e8:4e:fb:1f:8b:cf:47:da:09:2d: 16:8c:3c:e9:7f:40:f2:67:0d:6e:c9:b7:ed:a7:50:83:f0:8a: 70:e9:1c:d3:11:67:9d:5d:f3:fb:09:5e:e6:5c:24:05:45:2c: be:0a:3f:cd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeCKY8tsrESSC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2FkNTAwYWItNWNiMi00MGQxLTk5YjQtNTJiYzUwZThkZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUdBxT65DReeOy6q001owHRHTqEz54CXaawM 27zhhFMWeTOlhGZss0kgsZ57Anm8cFwivS3ACEwAKEO+WzQ89SevZeCu7AlpIkc4 l4+sK6ixr6+pETUfFI+lpxNGBIJXkILVaS9vm1KEzEt0lvcs6f7GKmpe6Zh//V2Z hI94mfY1Q5oiQlzmBatvCJLWpfNnhutIDayNwwGt2okj70g1kwWt9boyX6ad8C4F NJN0OV6FY1UOsv463rTttFR+4vvXZfjAhYLXLYMLG31r2C1oCaEo68Rwb1y9EiNu LSvgZuBXE/LJGGdwOBKcUjNfE+WAUwBszw5VrrLr6E04vx6N3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOBxUPnRPzr2N/yWAyIwo7duyjqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGZmYTViNjctM2Q2ZC0z OWNiLTg3YzItMDI3ZTk5OGRiZjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANdBBgptvhgXWjVlLpo2/Wbip72VBemIcmxXk3IdAbbJnnsU2jV0Ym62 lzDQdRuGTOP9aAek/02XQ69tVix8qJBxHZEIk+hI3/WYHyEmoZp1RA/18HvZLpnO 5coj37rrAEIT/Dc5yyOxHb1nmde4vtF2k+EnkS4rOL7CkbqDwkkzD9llxnglAf5D hHQ/FYR8mJbZ+AJamFsRBhYur/sdYi5t69wXf0/i/p3Z0Kfl72u8cMQg+oflrQgu sSSKSfWJHh/ZWEYT2QjB+scyBNZx6E77H4vPR9oJLRaMPOl/QPJnDW7Jt+2nUIPw inDpHNMRZ51d8/sJXuZcJAVFLL4KP80= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:18 2025 by rpki-client