$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa File: a50b09dc-5ebd-3b52-be77-89151fb75984.roa (raw, json) Hash identifier: 6+c0ZhWyItrMFF/WtYyDTs1i1ozTOthmZvs+0sYdMA4= Subject key identifier: 66:3C:78:8E:28:C3:8B:33:AB:CB:34:46:30:2F:33:E3:32:9F:0A:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DA1AEE7617299BEF5400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:da:1a:ee:76:17:29:9b:ef:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f7fc36ef-b244-4057-9f94-909f880b1eb8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a8:90:94:7a:85:50:10:9c:a9:b2:38:cc:d3: 66:da:01:5e:9b:11:af:47:31:2a:07:1d:5d:58:37: 48:cf:0f:9d:e7:a8:18:86:ae:ae:ea:89:84:f1:4e: 52:96:98:21:3d:1b:cf:0e:8f:cb:12:de:6e:5e:f1: cc:15:7d:39:4b:6f:cf:b4:35:cf:5b:72:de:de:41: 7a:c8:f7:2f:b4:0c:b6:3d:12:fe:a3:79:99:aa:51: 89:4d:17:5d:50:df:78:3b:3f:c7:28:7a:81:76:47: c7:1c:69:f0:af:59:8b:1f:4d:db:73:52:03:78:a1: 4b:c0:a1:34:4d:18:a4:ce:0f:ba:bc:26:7d:d6:3a: f4:b1:92:c8:8d:9c:70:1c:9d:eb:07:1d:b2:ff:50: e3:64:26:e5:cc:7f:b1:d4:58:08:00:46:d7:20:0d: 68:48:b3:56:17:ed:94:9f:f2:59:0d:03:1e:9a:da: 96:a2:a2:87:b0:d9:0a:e4:b0:4d:ba:46:a8:57:cd: 8d:cf:6e:54:f4:dd:77:a3:9b:de:02:cc:6a:ab:90: ce:14:e4:f9:8e:1b:0d:e9:5b:95:e6:fe:60:ac:43: c3:41:e1:77:ac:49:19:09:9c:cf:e2:be:77:63:32: c9:41:79:ee:33:10:01:90:1c:99:5f:80:71:20:37: 1f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3C:78:8E:28:C3:8B:33:AB:CB:34:46:30:2F:33:E3:32:9F:0A:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:61:f2:ca:3b:6c:3a:0f:84:2f:7e:e7:4a:fd:56:ed:79:74: 6b:41:b5:d3:70:dd:ce:d4:3c:68:7f:2e:3f:81:85:ea:04:5d: eb:d2:1d:47:b3:64:66:a7:8f:c1:8b:98:cd:13:dc:20:39:3f: 56:91:53:5e:f4:da:2e:79:10:99:1f:60:44:7a:04:f4:a3:46: 84:fb:ca:47:2a:71:b5:f7:ec:5f:d4:16:c9:51:b5:4a:f1:37: c1:98:48:1a:0b:14:fb:fa:24:02:31:40:43:93:05:00:51:e1: 85:99:5f:97:d1:f5:d7:1a:46:8f:be:5f:df:c5:e1:54:f4:1e: 72:f6:1d:d5:ef:bb:26:87:14:28:e9:b4:7b:27:b3:6f:d6:ef: 67:8d:82:2a:ee:a7:72:d9:a6:61:7c:fa:a1:b5:e0:23:01:f0: c3:72:42:cc:b4:a8:e9:0a:84:fe:49:8e:0b:6f:bc:33:47:a6: ba:46:44:88:a3:0a:21:11:97:4b:f8:d5:4e:86:a4:4b:07:bd: c2:8b:4f:54:2e:fe:00:d4:31:d5:a7:a7:56:85:c7:57:98:d8: 96:f5:e3:4a:8c:a3:ff:bb:58:58:15:cc:d5:a7:0c:c3:a2:1a: 04:01:14:03:2a:a0:7d:c9:dc:e3:c9:57:78:5d:53:ab:55:a2: 8c:09:d8:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdoa7nYXKZvvVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjdmYzM2ZWYtYjI0NC00MDU3LTlmOTQtOTA5Zjg4MGIxZWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaiQlHqFUBCcqbI4zNNm2gFemxGvRzEqBx1d WDdIzw+d56gYhq6u6omE8U5SlpghPRvPDo/LEt5uXvHMFX05S2/PtDXPW3Le3kF6 yPcvtAy2PRL+o3mZqlGJTRddUN94Oz/HKHqBdkfHHGnwr1mLH03bc1IDeKFLwKE0 TRikzg+6vCZ91jr0sZLIjZxwHJ3rBx2y/1DjZCblzH+x1FgIAEbXIA1oSLNWF+2U n/JZDQMemtqWoqKHsNkK5LBNukaoV82Nz25U9N13o5veAsxqq5DOFOT5jhsN6VuV 5v5grEPDQeF3rEkZCZzP4r53YzLJQXnuMxABkByZX4BxIDcf1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY8eI4ow4szq8s0RjAvM+Mynwq2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTUwYjA5ZGMtNWViZC0z YjUyLWJlNzctODkxNTFmYjc1OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5h8so7bDoPhC9+50r9Vu15dGtBtdNw3c7UPGh/Lj+BheoEXevSHUez ZGanj8GLmM0T3CA5P1aRU1702i55EJkfYER6BPSjRoT7ykcqcbX37F/UFslRtUrx N8GYSBoLFPv6JAIxQEOTBQBR4YWZX5fR9dcaRo++X9/F4VT0HnL2HdXvuyaHFCjp tHsns2/W72eNgirup3LZpmF8+qG14CMB8MNyQsy0qOkKhP5JjgtvvDNHprpGRIij CiERl0v41U6GpEsHvcKLT1Qu/gDUMdWnp1aFx1eY2Jb140qMo/+7WFgVzNWnDMOi GgQBFAMqoH3J3OPJV3hdU6tVoowJ2D4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:22:40 2025 by rpki-client