$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa File: a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa (raw, json) Hash identifier: KqWY9nRMPzQcXh4r+EG8epLKrb5ZfCUWwcVhya36Bdg= Subject key identifier: B9:0E:52:95:29:19:AB:11:CA:4D:A1:B5:DD:2A:77:66:75:63:63:24 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DD5967F5CE8098A6FE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:dd:59:67:f5:ce:80:98:a6:fe:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3fd495ce-26d0-45e0-a867-f9beab25082d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c8:15:00:da:52:51:de:eb:51:eb:4e:1e:64: a0:78:43:93:a5:05:c1:6e:71:39:a1:c0:cd:a3:2d: 81:9e:7f:f2:a6:54:d6:13:03:3b:6c:cd:45:59:57: 8c:fa:10:81:b0:f1:83:3c:db:d9:e3:3c:a5:be:db: f5:03:d2:6c:6a:28:4c:46:2d:bb:3a:e4:4c:72:a9: f0:19:ea:1f:e4:83:0e:92:fb:c7:60:09:29:bb:c7: 55:d7:82:79:e3:79:26:61:ff:6c:7c:47:a1:32:b8: 7d:fa:6c:31:b4:d8:6a:1e:58:4b:02:9f:f7:21:31: 9d:e4:da:f5:0e:e9:5d:80:40:5a:52:f1:f2:b9:ca: 31:32:73:06:b9:ca:64:9e:d2:09:0b:6f:a7:5e:32: 1b:2d:a7:d2:c9:13:42:5a:2f:4a:27:dc:69:a1:4a: ab:87:29:21:91:68:7b:f6:69:23:34:41:cc:d9:26: ac:d1:78:a0:56:9f:ad:af:27:22:73:41:dd:fe:9a: 34:ab:4a:e0:61:32:57:b8:a8:b3:f1:81:8b:d3:e2: 3b:fb:ca:79:72:20:4e:08:c3:b9:cc:fa:5b:79:66: b5:96:6b:41:04:11:f7:48:23:5d:a1:03:0e:7c:78: 16:ef:4b:e0:30:96:98:85:38:3d:7e:8d:e9:81:a1: d1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:0E:52:95:29:19:AB:11:CA:4D:A1:B5:DD:2A:77:66:75:63:63:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6137ac5-ba0a-3ae7-9b4d-1c1ec3ef3267.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cb:f1:79:10:33:86:21:f8:94:bb:37:b0:c3:90:4d:27:91: ca:e5:05:db:98:db:b4:f3:48:2b:83:d7:aa:0b:a4:5e:33:79: 45:a0:17:7c:41:ce:14:fe:95:6b:bc:6c:63:1d:70:db:91:ae: 2b:91:e6:66:92:be:8b:55:ca:fe:03:0e:af:59:19:c8:f3:2d: a5:ee:20:d1:2f:bb:be:86:bc:7d:33:bf:43:cd:03:6f:6b:7f: ad:f5:a5:a8:a2:b2:7a:7f:24:69:66:53:a2:5c:a6:9c:fe:be: b5:af:f0:d1:d5:63:23:cc:d2:c1:bf:70:17:25:8f:12:ab:1a: dc:39:97:a8:bd:35:fa:5e:de:34:f9:74:81:f8:86:9d:f2:51: 8b:bf:65:0a:df:a0:90:f9:82:4c:02:67:93:58:1c:3a:88:4f: 48:fe:49:cd:6b:8b:dc:0d:4f:92:78:01:60:d8:2f:bd:97:94: cd:8f:df:43:68:18:c8:84:88:55:b7:6c:1a:2e:5d:c0:ea:a5: ec:cc:3a:44:00:8d:3a:63:d7:25:cd:62:63:a4:94:cd:d5:40: 33:40:96:9f:f0:2c:8b:7a:54:0e:e9:a3:c3:9d:72:b5:ca:27: ff:a7:12:a2:ae:14:24:c9:2e:3c:5f:a5:c5:7a:43:ab:6f:c9: 7e:67:2d:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd1ZZ/XOgJim/kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZkNDk1Y2UtMjZkMC00NWUwLWE4NjctZjliZWFiMjUwODJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcgVANpSUd7rUetOHmSgeEOTpQXBbnE5ocDN oy2Bnn/yplTWEwM7bM1FWVeM+hCBsPGDPNvZ4zylvtv1A9JsaihMRi27OuRMcqnw Geof5IMOkvvHYAkpu8dV14J543kmYf9sfEehMrh9+mwxtNhqHlhLAp/3ITGd5Nr1 DuldgEBaUvHyucoxMnMGucpkntIJC2+nXjIbLafSyRNCWi9KJ9xpoUqrhykhkWh7 9mkjNEHM2Sas0XigVp+trycic0Hd/po0q0rgYTJXuKiz8YGL0+I7+8p5ciBOCMO5 zPpbeWa1lmtBBBH3SCNdoQMOfHgW70vgMJaYhTg9fo3pgaHRpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLkOUpUpGasRyk2htd0qd2Z1Y2MkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTYxMzdhYzUtYmEwYS0z YWU3LTliNGQtMWMxZWMzZWYzMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHL8XkQM4Yh+JS7N7DDkE0nkcrlBduY27TzSCuD16oLpF4zeUWgF3xB zhT+lWu8bGMdcNuRriuR5maSvotVyv4DDq9ZGcjzLaXuINEvu76GvH0zv0PNA29r f631paiisnp/JGlmU6Jcppz+vrWv8NHVYyPM0sG/cBcljxKrGtw5l6i9Nfpe3jT5 dIH4hp3yUYu/ZQrfoJD5gkwCZ5NYHDqIT0j+Sc1ri9wNT5J4AWDYL72XlM2P30No GMiEiFW3bBouXcDqpezMOkQAjTpj1yXNYmOklM3VQDNAlp/wLIt6VA7po8OdcrXK J/+nEqKuFCTJLjxfpcV6Q6tvyX5nLVQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:05 2025 by rpki-client