$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa File: aa91c442-72a9-312f-ad60-6db30d5d9223.roa (raw, json) Hash identifier: Rgru0KtrsW+H7RVIzHjtaEnaeBDLvBnswY7BtMlq25o= Subject key identifier: 42:79:F3:EE:A3:CE:3E:F5:D8:C4:FD:5D:DA:F5:A2:BD:8B:9F:E2:2D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58146360C2FB8DC0C8C2500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:46:36:0c:2f:b8:dc:0c:8c:25:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=80eedc76-09c6-41f2-b2b4-e756c1d1cf05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f8:cf:7e:84:94:74:e5:21:3a:92:8c:91:18: 1d:23:78:7a:8e:b8:59:eb:ca:22:eb:97:1f:a2:43: c1:37:6d:01:0b:b5:60:7a:20:9f:26:fd:74:f7:6f: 0b:45:e1:74:ec:08:dd:88:c5:41:64:2d:f5:07:a1: b0:84:cf:13:a6:61:28:53:84:42:d0:20:cb:cb:98: 28:ef:0b:a8:80:99:f0:8e:61:18:87:99:60:b0:ad: 21:77:89:9d:f0:a6:20:61:0b:65:f9:f4:b2:14:3d: b8:db:dd:a2:43:ea:4f:2f:9a:9c:5a:5b:fe:e0:0a: 1a:d6:86:96:3e:5a:64:f6:5d:2d:b8:6e:20:12:81: 33:05:68:80:45:b8:67:cf:aa:12:7c:f9:a2:fe:f5: 34:7b:b2:f6:6e:49:bc:12:03:6e:90:c6:80:6e:0f: bf:8e:25:9b:f7:15:f0:2d:6b:f5:74:ab:99:5b:9e: 26:00:19:51:13:1f:ea:02:13:59:8f:1b:64:02:6a: 63:40:0f:1a:7f:c8:b5:f4:9f:1c:05:01:53:54:29: 2d:93:45:73:bd:e9:5f:e3:4e:92:a0:b9:b7:69:11: f1:d7:de:a2:22:cb:ef:62:20:91:38:f9:42:71:cb: 61:5a:03:80:31:81:4b:18:d2:60:4d:15:39:72:c5: 51:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:79:F3:EE:A3:CE:3E:F5:D8:C4:FD:5D:DA:F5:A2:BD:8B:9F:E2:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:69:98:92:7f:58:4c:5a:85:3e:ee:ec:9e:33:2d:40:e8:cb: 46:25:e8:82:ff:8f:99:8f:74:f9:fd:50:d3:c2:9a:c8:87:37: 10:ee:c3:04:5f:dd:5e:4f:ea:b8:9c:a4:38:f5:3e:c6:da:fb: 12:05:25:3a:34:8b:03:46:0a:a3:f9:5d:e0:b1:90:36:65:20: d7:60:50:db:65:7f:3a:46:10:5c:e1:48:67:f1:14:e1:5a:50: 8e:51:18:bd:b2:4e:63:64:3c:d2:00:30:dd:8d:59:43:5d:a4: 9a:b4:23:c8:72:ef:00:f2:a4:5d:24:63:1e:70:71:21:61:b9: 0b:a9:1d:6f:7d:bf:7b:73:02:68:38:2c:8e:39:16:db:96:1b: 97:21:f6:5e:35:22:fe:de:a9:af:2b:bd:a7:cc:35:46:ce:07: fb:e6:a4:cf:9e:27:4e:f2:48:c3:8b:6c:12:08:ef:cc:7e:5f: 10:96:11:77:a3:01:33:aa:36:c7:12:16:c2:24:3e:5c:cd:63: e6:90:eb:61:ee:03:b1:2d:e2:2a:49:68:97:48:7b:0f:62:57: 21:11:dc:e0:7a:9f:83:f8:06:b8:ee:99:43:d2:5c:99:86:84: a1:92:d7:a5:c7:49:05:62:d4:0c:8f:01:aa:8f:c7:2f:04:21: 63:55:96:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUY2DC+43AyMJQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODBlZWRjNzYtMDljNi00MWYyLWIyYjQtZTc1NmMxZDFjZjA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvjPfoSUdOUhOpKMkRgdI3h6jrhZ68oi65cf okPBN20BC7VgeiCfJv10928LReF07AjdiMVBZC31B6GwhM8TpmEoU4RC0CDLy5go 7wuogJnwjmEYh5lgsK0hd4md8KYgYQtl+fSyFD24292iQ+pPL5qcWlv+4Aoa1oaW Plpk9l0tuG4gEoEzBWiARbhnz6oSfPmi/vU0e7L2bkm8EgNukMaAbg+/jiWb9xXw LWv1dKuZW54mABlREx/qAhNZjxtkAmpjQA8af8i19J8cBQFTVCktk0Vzvelf406S oLm3aRHx196iIsvvYiCROPlCccthWgOAMYFLGNJgTRU5csVRswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJ58+6jzj712MT9Xdr1or2Ln+ItMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE5MWM0NDItNzJhOS0z MTJmLWFkNjAtNmRiMzBkNWQ5MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB9pmJJ/WExahT7u7J4zLUDoy0Yl6IL/j5mPdPn9UNPCmsiHNxDuwwRf 3V5P6ricpDj1Psba+xIFJTo0iwNGCqP5XeCxkDZlINdgUNtlfzpGEFzhSGfxFOFa UI5RGL2yTmNkPNIAMN2NWUNdpJq0I8hy7wDypF0kYx5wcSFhuQupHW99v3tzAmg4 LI45FtuWG5ch9l41Iv7eqa8rvafMNUbOB/vmpM+eJ07ySMOLbBII78x+XxCWEXej ATOqNscSFsIkPlzNY+aQ62HuA7Et4ipJaJdIew9iVyER3OB6n4P4BrjumUPSXJmG hKGS16XHSQVi1AyPAaqPxy8EIWNVln0= -----END CERTIFICATE-----Generated at Fri Mar 14 08:05:17 2025 by rpki-client