$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa File: aa41224c-db93-3beb-92a8-b50f57229a2f.roa (raw, json) Hash identifier: rl3gNkObCvmmoJ/idZpqCGbWfVFYeyZ5UKFcKSKXwVg= Subject key identifier: D5:9B:1D:D5:8C:DD:25:E7:4F:7F:21:43:A8:2F:9F:C6:FF:37:D7:4D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D78C9B337D89F698B480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d7:8c:9b:33:7d:89:f6:98:b4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=56eea75c-4d79-468d-ad54-bf24ce496a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:d4:ec:4a:6a:2a:1a:64:a2:39:70:55:b1:fd: 0f:b6:54:32:cd:49:d2:33:29:c7:15:ce:44:48:1d: 8c:e5:8b:34:bd:8f:97:10:5c:c5:e1:a0:2d:aa:f8: d9:26:c4:4d:04:80:00:8f:65:31:91:6c:6b:02:9e: 9d:b4:2c:e0:65:1b:35:44:4a:1d:70:08:2b:f7:42: 8b:b7:da:e7:6a:da:05:e9:aa:a1:67:73:d5:24:de: 20:8e:a8:6d:c8:2e:f0:3d:e9:33:ce:ea:bb:9d:a6: aa:e7:61:0a:bc:f3:06:e4:ce:9b:f9:52:70:19:80: e0:99:36:65:9b:38:5e:80:0d:e5:5d:d0:dc:7e:4a: 35:0a:fa:9f:f8:48:4b:aa:1c:4c:ff:68:1e:31:ac: 62:81:1f:1d:af:71:2e:c7:dd:64:7a:57:69:59:1c: 12:ed:9d:50:7f:f8:88:cb:2d:50:b2:96:8c:ea:40: c7:a0:c3:c4:96:48:29:47:12:83:d7:d7:95:dc:f1: bf:cc:8c:11:b7:64:10:23:55:94:f3:53:52:2f:a2: c7:c2:fa:48:23:bf:fb:10:4f:d1:e1:65:40:54:5e: ec:d3:d5:95:3f:2b:10:fa:52:78:05:ec:50:1a:55: d0:e2:af:91:5a:00:56:60:76:c4:13:a5:7c:f0:08: 38:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:9B:1D:D5:8C:DD:25:E7:4F:7F:21:43:A8:2F:9F:C6:FF:37:D7:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa41224c-db93-3beb-92a8-b50f57229a2f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:92:64:77:ec:8c:51:ae:d6:cf:4a:9a:a8:09:09:46:86:b8: 07:34:3f:b1:cf:fe:86:5b:81:0a:1c:1b:5f:69:23:1d:0a:99: 4b:ec:6f:06:ea:6c:0a:ac:99:46:9d:b6:0e:1d:5c:21:34:39: 0f:7b:d7:55:f4:9a:60:92:18:d8:2b:2c:2b:b2:96:39:bc:ce: 34:53:d0:e7:4a:ab:fc:e6:d6:b4:61:20:35:2c:2d:3a:57:c6: 85:d7:f9:82:1d:fc:3c:4d:8a:bd:73:d3:a2:93:eb:83:92:ba: ee:e5:61:b3:ef:a5:e4:f7:44:f1:52:aa:3e:ba:5b:f2:6c:5b: e9:3b:22:cf:62:d5:1f:4f:5c:6f:bc:e4:db:aa:e6:1b:d5:e7: 23:fb:f6:13:ce:1b:92:18:61:b4:6f:7c:73:79:49:a9:b2:fa: a7:43:9a:b8:47:c6:8d:09:7c:4a:b8:8e:69:68:03:55:0f:52: 61:15:28:91:3c:fa:4a:3b:58:e4:f3:a7:0d:a7:49:bc:46:fe: 09:1e:f9:bf:83:e2:6f:1d:7c:b8:81:20:65:63:26:3f:bd:c5: 1c:5d:14:95:73:fa:94:05:7f:b9:e8:d8:fc:b0:17:fd:ef:d4: a1:51:3b:9a:42:1b:3e:36:07:5e:e3:26:40:05:e9:15:b7:93: e8:b8:f0:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdeMmzN9ifaYtIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTZlZWE3NWMtNGQ3OS00NjhkLWFkNTQtYmYyNGNlNDk2YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqdTsSmoqGmSiOXBVsf0PtlQyzUnSMynHFc5E SB2M5Ys0vY+XEFzF4aAtqvjZJsRNBIAAj2UxkWxrAp6dtCzgZRs1REodcAgr90KL t9rnatoF6aqhZ3PVJN4gjqhtyC7wPekzzuq7naaq52EKvPMG5M6b+VJwGYDgmTZl mzhegA3lXdDcfko1Cvqf+EhLqhxM/2geMaxigR8dr3Eux91keldpWRwS7Z1Qf/iI yy1QspaM6kDHoMPElkgpRxKD19eV3PG/zIwRt2QQI1WU81NSL6LHwvpII7/7EE/R 4WVAVF7s09WVPysQ+lJ4BexQGlXQ4q+RWgBWYHbEE6V88Ag4NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWbHdWM3SXnT38hQ6gvn8b/N9dNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE0MTIyNGMtZGI5My0z YmViLTkyYTgtYjUwZjU3MjI5YTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqSZHfsjFGu1s9KmqgJCUaGuAc0P7HP/oZbgQocG19pIx0KmUvsbwbq bAqsmUadtg4dXCE0OQ9711X0mmCSGNgrLCuyljm8zjRT0OdKq/zm1rRhIDUsLTpX xoXX+YId/DxNir1z06KT64OSuu7lYbPvpeT3RPFSqj66W/JsW+k7Is9i1R9PXG+8 5Nuq5hvV5yP79hPOG5IYYbRvfHN5Samy+qdDmrhHxo0JfEq4jmloA1UPUmEVKJE8 +ko7WOTzpw2nSbxG/gke+b+D4m8dfLiBIGVjJj+9xRxdFJVz+pQFf7no2PywF/3v 1KFRO5pCGz42B17jJkAF6RW3k+i48Is= -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:41 2025 by rpki-client