$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e41329-c79a-3bd5-ab5e-510248e812ee.roa File: 98e41329-c79a-3bd5-ab5e-510248e812ee.roa (raw, json) Hash identifier: UyBfYuWTbYVzoFfxZKSkWkIiRHddIz/samL0FZiTgm8= Subject key identifier: 85:38:81:DD:24:71:74:1E:D6:B4:77:9D:1F:64:3B:C9:80:18:86:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814CC34946B4A7729E7D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e41329-c79a-3bd5-ab5e-510248e812ee.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4c:c3:49:46:b4:a7:72:9e:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=68706f19-9e60-4671-8377-95564aee3eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:31:38:02:e4:6e:60:31:8e:38:fc:a9:89: 7b:c4:2b:f9:ef:80:cc:10:e6:07:e5:75:56:48:52: 13:a8:60:11:54:9b:b2:55:83:df:ab:c1:dd:e5:e9: 38:05:29:0c:89:50:b4:ea:74:ec:c8:1f:59:02:2c: ae:a5:79:4e:03:aa:8c:88:c6:9f:c6:00:00:a0:47: f0:33:7b:ed:ec:cc:a8:fc:8c:c8:d8:45:22:1f:c2: 8e:5e:2b:c5:83:9f:ff:2f:6f:e8:e1:56:72:86:f0: 0b:a0:ec:00:84:0d:e4:2d:b3:ba:77:e6:95:25:8b: 83:13:45:de:c8:25:c5:5d:30:00:11:a3:1e:25:46: 70:91:10:9a:d3:c8:d7:a5:9d:7d:6c:34:87:d3:b7: 31:d8:8a:21:af:2c:56:7f:69:3e:a2:ae:f9:e3:b5: d5:34:ff:c9:4e:da:5b:bc:53:4e:00:85:67:ea:7a: 31:03:8b:2c:b4:e1:36:90:fe:ff:26:ee:05:b0:06: 86:5a:2b:d1:29:7c:62:3b:9d:7f:50:be:cf:23:d7: e6:40:5d:08:43:46:01:e6:ca:16:87:0c:7d:18:2d: c3:54:18:bf:1d:6d:9f:38:dc:df:76:7d:69:94:62: a9:ea:50:63:d6:39:b6:23:75:c2:d8:97:73:aa:8a: 0d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:38:81:DD:24:71:74:1E:D6:B4:77:9D:1F:64:3B:C9:80:18:86:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e41329-c79a-3bd5-ab5e-510248e812ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:e6:ab:80:8f:7e:01:c2:2f:f6:77:20:6d:3f:f9:58:ae:05: 23:8f:5d:05:31:bf:ec:e9:16:3a:78:49:13:56:05:e1:3f:c2: 37:33:54:bf:d1:da:5e:25:51:e4:cb:a0:09:11:c6:06:0a:22: 41:42:cd:89:9b:fa:18:e3:c4:2b:14:7b:61:da:8d:09:c5:00: 0a:e7:28:28:cf:78:10:86:f8:22:e3:68:63:ef:7b:b5:0c:4b: fa:2e:4e:d7:f4:32:16:2b:d3:b2:ee:04:f0:2a:a4:40:35:d6: d1:ff:b0:66:0c:f2:1a:df:47:bf:00:49:52:ec:59:eb:c0:aa: fd:fd:5a:af:27:2d:62:c7:ed:65:d3:1a:67:e2:98:17:99:bd: 9b:ef:f0:93:ae:37:f4:39:bb:3a:2c:1b:0b:34:a5:9b:a2:23: b1:b0:82:fc:2c:4d:f2:a1:ed:d3:ef:a7:8d:21:46:89:16:d5: 38:90:92:8d:87:4c:60:13:dc:65:40:cb:55:c7:7a:cf:c5:0b: ae:8a:e9:11:2d:77:d4:50:8a:a9:ab:d3:c2:b2:2f:50:91:58: 20:d6:8d:c1:ac:2c:36:d2:eb:84:d9:97:c4:d5:74:60:50:e3: 9f:c7:4f:bb:59:ca:88:6e:b5:24:32:8e:6e:5d:7c:4d:3d:ce: 67:a9:1b:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUzDSUa0p3KefYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Njg3MDZmMTktOWU2MC00NjcxLTgzNzctOTU1NjRhZWUzZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKMxOALkbmAxjjj8qYl7xCv574DMEOYH5XVW SFITqGARVJuyVYPfq8Hd5ek4BSkMiVC06nTsyB9ZAiyupXlOA6qMiMafxgAAoEfw M3vt7Myo/IzI2EUiH8KOXivFg5//L2/o4VZyhvALoOwAhA3kLbO6d+aVJYuDE0Xe yCXFXTAAEaMeJUZwkRCa08jXpZ19bDSH07cx2IohryxWf2k+oq7547XVNP/JTtpb vFNOAIVn6noxA4sstOE2kP7/Ju4FsAaGWivRKXxiO51/UL7PI9fmQF0IQ0YB5soW hwx9GC3DVBi/HW2fONzfdn1plGKp6lBj1jm2I3XC2JdzqooNWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIU4gd0kcXQe1rR3nR9kO8mAGIbEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOThlNDEzMjktYzc5YS0z YmQ1LWFiNWUtNTEwMjQ4ZTgxMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLmq4CPfgHCL/Z3IG0/+ViuBSOPXQUxv+zpFjp4SRNWBeE/wjczVL/R 2l4lUeTLoAkRxgYKIkFCzYmb+hjjxCsUe2HajQnFAArnKCjPeBCG+CLjaGPve7UM S/ouTtf0MhYr07LuBPAqpEA11tH/sGYM8hrfR78ASVLsWevAqv39Wq8nLWLH7WXT GmfimBeZvZvv8JOuN/Q5uzosGws0pZuiI7GwgvwsTfKh7dPvp40hRokW1TiQko2H TGAT3GVAy1XHes/FC66K6REtd9RQiqmr08KyL1CRWCDWjcGsLDbS64TZl8TVdGBQ 45/HT7tZyohutSQyjm5dfE09zmepG1w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:43 2025 by rpki-client