$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa File: a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa (raw, json) Hash identifier: kvtVRMbi4jbvhN1LBSEvR4JKs2grVdH9fH2IHxu9xBE= Subject key identifier: F6:B6:8C:1A:3A:C9:FD:8F:25:29:D5:42:45:66:7D:5B:C2:A1:46:C3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58146757C8A207AB21C5180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:46:75:7c:8a:20:7a:b2:1c:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2fc41add-5fe4-491c-a12a-b77fdf999a5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ce:fb:5c:28:0d:25:a1:4c:d8:cb:be:71:7b: d2:06:d2:b1:bc:13:e5:a6:85:4c:6c:78:46:8a:fa: 1c:96:cd:48:6a:80:33:93:84:15:ad:f9:91:72:dc: 80:8a:e3:7c:03:05:86:7d:a6:61:a7:25:29:01:6d: fe:ca:27:88:f7:28:78:63:7b:5b:6f:82:37:ae:20: 0e:b3:ac:2f:91:bd:8b:f2:01:6f:5f:0d:5f:6c:59: 3a:11:fc:2e:99:07:06:03:c2:ea:b0:73:8d:a4:e4: 2a:ad:b1:f6:74:a3:ca:64:a9:24:84:ae:dc:96:c1: 2f:13:05:fe:29:21:6d:74:81:8a:af:47:c1:b0:3d: 35:77:38:ad:2a:5f:0d:c4:07:ca:03:db:94:02:3f: ef:de:06:07:c0:96:ea:0f:2f:6f:ee:e9:a4:e7:aa: 6e:fa:e0:cc:8c:c0:bd:90:24:2d:53:01:c6:04:61: 6a:b1:ac:4d:50:57:b1:3e:8c:66:aa:fc:68:eb:14: a1:8c:d8:0e:62:56:7a:5d:e0:80:0e:38:c6:6a:fe: f2:08:8a:44:7b:2b:00:67:d6:6b:e7:8e:33:6b:97: 37:33:c7:32:8c:f2:65:64:5c:c7:e8:b6:6e:c7:d8: c1:ed:2e:7a:b0:33:66:05:c7:88:a1:96:e8:b7:f3: ff:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:B6:8C:1A:3A:C9:FD:8F:25:29:D5:42:45:66:7D:5B:C2:A1:46:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f5b4af-25fa-3e48-b8b3-4da6ec8f41e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:27:8e:83:a8:97:02:d9:f1:27:17:69:91:1c:0b:71:79:5c: 55:da:00:22:5e:35:fd:68:56:9c:28:2b:a5:e1:b9:d8:67:95: 6e:6b:0e:7c:30:aa:31:20:0b:83:b4:45:05:bd:5a:d1:0a:3a: 32:8f:cf:3d:fe:56:f5:da:d4:81:82:97:4b:aa:4e:5e:35:ab: 60:30:f0:43:59:23:da:b8:3c:b3:43:2d:f2:3e:c2:30:2a:a8: 35:0b:80:a3:d3:70:b9:51:a8:b6:22:78:05:7e:1b:9c:ba:89: 71:c4:2c:57:dd:3f:75:fd:05:1a:90:2b:29:16:2a:97:60:16: 44:92:5e:e9:12:79:f5:e1:26:6b:32:ca:33:41:99:2e:df:d1: 83:18:74:74:6e:c1:18:80:6a:76:be:b9:40:1a:a5:5b:3d:65: df:81:29:f8:9e:31:d2:f5:53:a8:d4:4c:98:a8:ef:f4:2a:64: c5:ce:ea:44:75:90:4c:d6:63:1b:2d:3b:4d:8c:1b:59:6a:c6: d9:80:69:2c:14:08:0c:7a:3b:82:ce:0e:50:0b:ab:16:6c:c2: 89:a0:c3:0f:5f:6e:84:ca:71:fa:ac:57:f9:7f:d2:91:6f:26: 0b:f3:70:10:81:8a:77:11:f2:7f:68:88:94:e6:fd:73:09:d8: 09:fb:e3:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUZ1fIogerIcUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmZjNDFhZGQtNWZlNC00OTFjLWExMmEtYjc3ZmRmOTk5YTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAss77XCgNJaFM2Mu+cXvSBtKxvBPlpoVMbHhG ivocls1IaoAzk4QVrfmRctyAiuN8AwWGfaZhpyUpAW3+yieI9yh4Y3tbb4I3riAO s6wvkb2L8gFvXw1fbFk6EfwumQcGA8LqsHONpOQqrbH2dKPKZKkkhK7clsEvEwX+ KSFtdIGKr0fBsD01dzitKl8NxAfKA9uUAj/v3gYHwJbqDy9v7umk56pu+uDMjMC9 kCQtUwHGBGFqsaxNUFexPoxmqvxo6xShjNgOYlZ6XeCADjjGav7yCIpEeysAZ9Zr 544za5c3M8cyjPJlZFzH6LZux9jB7S56sDNmBceIoZbot/P/KwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPa2jBo6yf2PJSnVQkVmfVvCoUbDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmNWI0YWYtMjVmYS0z ZTQ4LWI4YjMtNGRhNmVjOGY0MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKInjoOolwLZ8ScXaZEcC3F5XFXaACJeNf1oVpwoK6XhudhnlW5rDnww qjEgC4O0RQW9WtEKOjKPzz3+VvXa1IGCl0uqTl41q2Aw8ENZI9q4PLNDLfI+wjAq qDULgKPTcLlRqLYieAV+G5y6iXHELFfdP3X9BRqQKykWKpdgFkSSXukSefXhJmsy yjNBmS7f0YMYdHRuwRiAana+uUAapVs9Zd+BKfieMdL1U6jUTJio7/QqZMXO6kR1 kEzWYxstO02MG1lqxtmAaSwUCAx6O4LODlALqxZswomgww9fboTKcfqsV/l/0pFv JgvzcBCBincR8n9oiJTm/XMJ2An7490= -----END CERTIFICATE-----Generated at Fri Mar 14 13:24:27 2025 by rpki-client