$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa File: a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa (raw, json) Hash identifier: AhEqWnlUfWb0WoFYfkh81TbDniE1d2pyuJ2/WJnEAAg= Subject key identifier: 4B:00:98:A5:2E:6B:D4:55:FA:EF:77:BF:1F:94:A5:B5:14:19:B6:45 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DEDA4C95D634E4038440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:de:da:4c:95:d6:34:e4:03:84:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=eb5af9bb-8c09-41f2-9898-0ba0b78d2481 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ef:fb:5b:c3:ff:a7:e8:bf:b4:12:09:5f:ff: dd:3f:4f:4b:22:52:0d:59:88:69:58:f7:95:8b:54: 59:a0:a1:b0:b1:10:b3:7f:37:4f:5c:07:ec:31:a0: b6:d1:1f:15:13:8a:6e:68:0d:72:53:e9:c1:f0:56: a5:03:d0:70:8c:2e:71:66:9f:25:3f:d1:89:29:0f: 08:e0:9d:e2:8f:f5:48:0b:96:55:c2:bf:f3:6f:18: ec:56:b9:0a:45:07:63:74:6f:c1:5a:6d:70:e2:74: f2:c4:e6:63:19:4b:e1:8d:a8:dd:4f:74:53:6e:f8: 6b:1e:99:7c:ea:ec:af:cf:de:b5:cf:5f:f6:4a:d1: 2a:dd:ef:6a:9e:02:0c:6a:14:bd:2b:5a:fe:be:d2: 33:4d:37:55:88:25:e3:05:8a:fe:ec:4b:4a:63:9f: 28:74:f5:cd:8c:70:75:ea:a7:fd:a4:dc:44:0e:cc: 12:72:79:7f:6a:71:ab:8b:0b:a6:08:3d:0b:86:d6: 58:39:c1:33:33:91:5e:71:53:4a:1f:fd:5c:0b:d8: 8c:84:c4:86:67:c0:70:9e:c9:fe:fd:5d:30:4a:03: 4e:86:c9:87:01:31:e4:e7:ee:c9:6b:6c:99:e3:7f: af:6d:24:5c:14:f8:8d:62:4d:d2:15:ad:5c:ba:e3: e7:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:00:98:A5:2E:6B:D4:55:FA:EF:77:BF:1F:94:A5:B5:14:19:B6:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a1793bfa-8b7f-31f3-b395-342f69bdfb10.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:a2:98:56:72:59:67:68:74:80:e1:9f:3b:5e:03:b4:4b:1e: 86:08:28:b2:87:70:9a:79:8f:17:02:ca:1e:8d:28:34:ca:e3: a7:cb:5c:9f:d4:d7:1a:f3:61:23:fe:59:56:4c:f7:63:6e:61: f4:43:75:77:22:bd:66:29:17:e2:59:a7:0c:de:00:fb:0d:e5: 08:dc:e1:c8:df:98:03:3f:18:ba:81:92:cf:98:20:08:64:e9: 37:7d:77:a1:d3:f1:65:c0:49:44:54:4f:e5:c4:6d:bd:b3:24: d9:ca:42:9d:3c:6f:7e:ad:d0:76:b0:7d:8c:f6:d7:29:91:c7: ef:c9:19:08:1f:b2:6a:59:b5:fc:52:20:1a:84:e4:02:3e:af: 1a:8f:bf:12:77:76:bc:02:2d:aa:83:f5:98:7d:3c:52:3b:9f: 4a:31:c6:d6:6c:c5:78:48:e4:b8:23:8c:f3:c6:ec:fb:ea:df: fc:47:a7:d6:71:a7:21:3d:e4:7c:f3:8c:72:4f:09:2a:27:97: 71:02:80:bb:87:d7:02:a7:bf:74:43:53:b9:42:d4:83:94:e9: 3e:f9:65:5d:bd:fe:f9:45:a0:32:a4:37:e2:f0:c2:6b:f7:eb: c9:24:b5:77:38:76:91:3f:df:9b:aa:b5:a9:20:4b:ee:4d:8a: d2:10:8a:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd7aTJXWNOQDhEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZWI1YWY5YmItOGMwOS00MWYyLTk4OTgtMGJhMGI3OGQyNDgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle/7W8P/p+i/tBIJX//dP09LIlINWYhpWPeV i1RZoKGwsRCzfzdPXAfsMaC20R8VE4puaA1yU+nB8FalA9BwjC5xZp8lP9GJKQ8I 4J3ij/VIC5ZVwr/zbxjsVrkKRQdjdG/BWm1w4nTyxOZjGUvhjajdT3RTbvhrHpl8 6uyvz961z1/2StEq3e9qngIMahS9K1r+vtIzTTdViCXjBYr+7EtKY58odPXNjHB1 6qf9pNxEDswScnl/anGriwumCD0LhtZYOcEzM5FecVNKH/1cC9iMhMSGZ8Bwnsn+ /V0wSgNOhsmHATHk5+7Ja2yZ43+vbSRcFPiNYk3SFa1cuuPnmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEsAmKUua9RV+u93vx+UpbUUGbZFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTE3OTNiZmEtOGI3Zi0z MWYzLWIzOTUtMzQyZjY5YmRmYjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiimFZyWWdodIDhnzteA7RLHoYIKLKHcJp5jxcCyh6NKDTK46fLXJ/U 1xrzYSP+WVZM92NuYfRDdXcivWYpF+JZpwzeAPsN5Qjc4cjfmAM/GLqBks+YIAhk 6Td9d6HT8WXASURUT+XEbb2zJNnKQp08b36t0HawfYz21ymRx+/JGQgfsmpZtfxS IBqE5AI+rxqPvxJ3drwCLaqD9Zh9PFI7n0oxxtZsxXhI5LgjjPPG7Pvq3/xHp9Zx pyE95HzzjHJPCSonl3ECgLuH1wKnv3RDU7lC1IOU6T75ZV29/vlFoDKkN+Lwwmv3 68kktXc4dpE/35uqtakgS+5NitIQivk= -----END CERTIFICATE-----Generated at Fri Apr 11 23:58:50 2025 by rpki-client