$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa File: 9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa (raw, json) Hash identifier: KK1P/q41itT5iSXPfQBWfl8CkYw0ZKVnnuCFs5y10h4= Subject key identifier: 84:62:6A:D3:00:1E:48:EB:45:B0:76:DD:88:8B:B0:88:46:C7:B3:89 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814808C3C3CCED3503DD9C Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.222.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:48:08:c3:c3:cc:ed:35:03:dd:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0d6d5e0a-a252-437b-b3ef-5b075551d83c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:c7:3b:e7:60:0f:09:74:67:bf:d1:78:cc:a7: 2e:68:e9:10:65:ac:c5:90:f6:08:01:b0:38:ca:d7: f4:33:2a:5b:f0:8a:c5:0d:2e:27:71:04:5f:4c:39: e2:62:6b:23:a2:71:98:45:2b:dc:77:a0:f5:8a:b1: f0:d5:55:ab:c5:ab:69:e3:a0:68:4b:98:1a:3c:1a: 65:63:3f:5f:5f:c6:e3:1c:28:9a:ec:b5:82:dc:ef: ce:ed:80:b9:9a:b7:33:f1:9c:1f:dc:5a:72:b3:4a: b4:67:a2:c9:38:34:f5:84:40:02:79:12:40:37:6f: 03:ca:62:10:3a:df:24:04:25:45:a6:41:6d:51:df: 7e:b3:c3:13:80:05:d7:b7:02:8e:af:97:84:5f:a7: ff:84:15:cb:7a:c6:6b:a8:68:3f:df:fa:03:5d:15: ce:21:68:b2:93:b2:b9:31:90:69:5c:2f:4a:e9:95: 79:34:e1:e5:bd:68:eb:4a:3e:2e:3a:2a:94:a6:95: 1b:86:35:e9:bb:43:cc:68:e9:5b:87:38:0a:d0:60: 19:29:5e:f2:94:0b:ec:6c:88:e6:f6:fa:01:a8:36: 55:19:e3:44:21:88:d5:f8:6e:cb:4f:b2:4c:27:a9: 92:e3:8b:51:94:0c:90:1b:3a:9f:55:87:15:cd:81: c9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:62:6A:D3:00:1E:48:EB:45:B0:76:DD:88:8B:B0:88:46:C7:B3:89 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9ea4b9ce-5069-37ec-84e6-11ef52c683d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.222.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e3:b8:52:70:13:88:00:e7:d8:ef:f4:f5:26:62:b5:eb:52: 34:ad:60:32:5c:68:38:76:31:f9:09:47:b3:c3:6f:fa:b9:dc: 86:f2:c5:31:94:21:ef:12:03:0f:5b:6c:c3:60:67:83:68:b0: 54:4f:d2:11:79:db:f4:b1:18:1c:a2:dc:f3:db:db:97:02:2a: d1:39:e2:8e:2a:aa:41:2c:70:9c:62:16:39:0b:e3:8f:f5:85: 1d:4d:af:41:b1:b3:19:00:0b:32:7d:f7:32:66:15:66:30:8e: 70:fc:a9:8c:64:0b:45:6b:e2:c0:5e:40:00:a2:ec:d0:2a:df: 2f:f0:69:4d:f0:0a:59:eb:0c:96:3c:8c:09:86:89:9a:57:a2: 00:3d:c4:e0:de:74:d5:8f:34:32:2d:b3:5a:28:46:9e:4f:e0: 28:2d:64:15:9c:5b:7e:ad:a8:4d:21:10:e6:28:6a:66:30:e1: 7a:8a:30:88:5f:61:2b:c4:4a:e2:61:b3:9e:42:1e:c5:ef:fc: fb:22:21:a5:f3:9d:0d:71:26:b4:76:31:44:64:8f:10:35:36: db:10:78:07:ca:65:ac:0e:dc:0a:86:26:f9:d0:ad:0a:cd:d8: 31:4a:b4:f5:73:23:d4:0e:1c:53:07:f3:1f:df:5f:40:1c:9f: bb:2a:1b:9b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUgIw8PM7TUD3ZwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGQ2ZDVlMGEtYTI1Mi00MzdiLWIzZWYtNWIwNzU1NTFkODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMc752APCXRnv9F4zKcuaOkQZazFkPYIAbA4 ytf0Mypb8IrFDS4ncQRfTDniYmsjonGYRSvcd6D1irHw1VWrxatp46BoS5gaPBpl Yz9fX8bjHCia7LWC3O/O7YC5mrcz8Zwf3Fpys0q0Z6LJODT1hEACeRJAN28DymIQ Ot8kBCVFpkFtUd9+s8MTgAXXtwKOr5eEX6f/hBXLesZrqGg/3/oDXRXOIWiyk7K5 MZBpXC9K6ZV5NOHlvWjrSj4uOiqUppUbhjXpu0PMaOlbhzgK0GAZKV7ylAvsbIjm 9voBqDZVGeNEIYjV+G7LT7JMJ6mS44tRlAyQGzqfVYcVzYHJTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIRiatMAHkjrRbB23YiLsIhGx7OJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWVhNGI5Y2UtNTA2OS0z N2VjLTg0ZTYtMTFlZjUyYzY4M2Q4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDjuFJwE4gA59jv9PUmYrXrUjStYDJcaDh2MfkJR7PDb/q53IbyxTGU Ie8SAw9bbMNgZ4NosFRP0hF52/SxGByi3PPb25cCKtE54o4qqkEscJxiFjkL44/1 hR1Nr0GxsxkACzJ99zJmFWYwjnD8qYxkC0Vr4sBeQACi7NAq3y/waU3wClnrDJY8 jAmGiZpXogA9xODedNWPNDIts1ooRp5P4CgtZBWcW36tqE0hEOYoamYw4XqKMIhf YSvESuJhs55CHsXv/PsiIaXznQ1xJrR2MURkjxA1NtsQeAfKZawO3AqGJvnQrQrN 2DFKtPVzI9QOHFMH8x/fX0Acn7sqG5s= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:35 2025 by rpki-client