$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9305a306-0099-3216-ac39-e6442019484e.roa File: 9305a306-0099-3216-ac39-e6442019484e.roa (raw, json) Hash identifier: JoD626SIp/BWLlzA/l9H0WhmTfMXO5ZgcROgO614FpY= Subject key identifier: 83:BF:F7:95:DF:EE:12:9F:FF:B9:BA:CF:1B:7E:E3:00:BD:49:9E:96 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814C365511A6711893EAB0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9305a306-0099-3216-ac39-e6442019484e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4c:36:55:11:a6:71:18:93:ea:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=41a0cd50-a960-4c25-b401-573e708642e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d9:e0:8d:4c:8b:4f:fb:10:4c:f1:49:f4:67: a0:95:9e:a1:db:97:f6:e5:0d:88:eb:d1:d1:21:28: 7f:5b:0b:80:6c:75:23:26:0b:a6:64:d0:a0:31:f1: 43:7e:6f:ac:93:45:ea:0a:a5:3e:b2:9e:04:ab:5a: d6:a7:b8:dc:ae:0b:f5:d7:3c:2c:98:0a:8a:00:28: 89:e9:78:71:90:df:16:12:88:2a:08:76:2e:3b:45: 10:b8:87:c7:23:71:a1:e7:b9:f2:27:d4:1c:89:3c: 33:c3:dc:8c:11:34:7d:31:78:76:77:b4:f5:d6:97: 2b:4a:98:e9:ef:2d:42:92:1d:43:a7:ab:f2:36:68: 7e:8f:16:64:9c:0b:80:3c:09:aa:46:b6:83:e4:7f: d1:2f:f8:26:49:44:54:9b:0f:94:68:9d:ec:fb:dd: 23:47:27:6f:9d:9e:d9:bf:5e:89:14:9b:81:49:5c: 39:a9:e7:45:97:89:ea:d8:96:7d:f2:3e:9a:3a:f1: 50:1e:ce:73:75:39:24:fc:8b:ff:03:9e:b9:ce:14: 8e:99:3a:2a:01:83:d0:ff:a4:61:52:aa:e2:ca:77: bb:c1:46:8e:2a:10:b2:7d:9f:db:8b:75:08:a8:69: d5:4f:5a:d0:00:6a:c9:59:0f:18:ec:56:65:cf:e6: d5:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:BF:F7:95:DF:EE:12:9F:FF:B9:BA:CF:1B:7E:E3:00:BD:49:9E:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9305a306-0099-3216-ac39-e6442019484e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:00:35:c0:c3:7d:68:f9:90:b3:63:78:21:82:54:b0:ba:f5: e2:3a:4f:30:4f:94:41:d8:06:f7:12:bf:88:8f:92:18:cb:76: fa:11:64:16:25:ef:5c:e2:94:89:32:39:9a:f4:67:71:dd:78: 0e:fd:2c:b5:3d:a9:1b:0c:cf:37:d1:e6:66:74:44:95:1e:eb: cf:2e:61:30:5e:49:53:ac:9c:59:9c:ec:c8:ae:6e:ca:7a:43: fd:f8:37:8c:17:98:ac:f1:b8:a6:ab:2e:93:21:e5:e8:0d:da: 37:ff:ce:f3:bd:55:40:d4:0a:ae:26:d6:94:1e:60:a9:b4:9a: c0:44:41:d6:39:5e:9a:7c:3d:c8:a8:2a:4b:9c:34:02:b1:de: 6e:7a:9a:d1:90:9c:1d:9a:ae:83:40:9c:73:d8:c8:72:22:39: 09:5e:5b:ac:04:f8:f2:db:a5:a3:9c:cc:42:59:d6:71:9b:3a: a0:ae:94:5a:d5:a0:29:2d:9a:54:75:13:e5:86:7c:fe:d8:b4: 4c:98:c1:06:13:31:9e:92:eb:6d:62:4f:f4:21:4e:90:cd:89: fe:64:f7:c1:f3:7e:c0:85:63:0e:e0:07:ce:30:7a:e5:33:ee: fb:e2:ca:53:bc:7f:66:d2:d6:d7:19:4d:66:2f:12:82:29:f3: 9a:e1:33:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUw2VRGmcRiT6rAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDFhMGNkNTAtYTk2MC00YzI1LWI0MDEtNTczZTcwODY0MmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9ngjUyLT/sQTPFJ9GeglZ6h25f25Q2I69HR ISh/WwuAbHUjJgumZNCgMfFDfm+sk0XqCqU+sp4Eq1rWp7jcrgv11zwsmAqKACiJ 6XhxkN8WEogqCHYuO0UQuIfHI3Gh57nyJ9QciTwzw9yMETR9MXh2d7T11pcrSpjp 7y1Ckh1Dp6vyNmh+jxZknAuAPAmqRraD5H/RL/gmSURUmw+UaJ3s+90jRydvnZ7Z v16JFJuBSVw5qedFl4nq2JZ98j6aOvFQHs5zdTkk/Iv/A565zhSOmToqAYPQ/6Rh Uqriyne7wUaOKhCyfZ/bi3UIqGnVT1rQAGrJWQ8Y7FZlz+bVGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIO/95Xf7hKf/7m6zxt+4wC9SZ6WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTMwNWEzMDYtMDA5OS0z MjE2LWFjMzktZTY0NDIwMTk0ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFUANcDDfWj5kLNjeCGCVLC69eI6TzBPlEHYBvcSv4iPkhjLdvoRZBYl 71zilIkyOZr0Z3HdeA79LLU9qRsMzzfR5mZ0RJUe688uYTBeSVOsnFmc7Miubsp6 Q/34N4wXmKzxuKarLpMh5egN2jf/zvO9VUDUCq4m1pQeYKm0msBEQdY5Xpp8Pcio KkucNAKx3m56mtGQnB2aroNAnHPYyHIiOQleW6wE+PLbpaOczEJZ1nGbOqCulFrV oCktmlR1E+WGfP7YtEyYwQYTMZ6S621iT/QhTpDNif5k98HzfsCFYw7gB84weuUz 7vviylO8f2bS1tcZTWYvEoIp85rhMwM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:44:58 2025 by rpki-client