$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba5fd13-c9b9-3702-ae62-6c198c446922.roa File: aba5fd13-c9b9-3702-ae62-6c198c446922.roa (raw, json) Hash identifier: XSuKSBCRenRA88jUzZ6rwe8Ue3W/lmf8O5ydtoGOSfw= Subject key identifier: BA:62:42:13:29:40:69:74:34:F7:9F:70:49:E9:AA:8C:D4:35:37:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DEFBE5CA6F56442A6B82 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba5fd13-c9b9-3702-ae62-6c198c446922.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:de:fb:e5:ca:6f:56:44:2a:6b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7adc3ca7-586c-421a-8e98-b5375dc7e77b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:40:25:d7:61:41:a4:5a:81:8e:53:3c:0f:7b: 5b:90:41:fe:87:c1:dd:8d:0e:6e:bd:1d:08:13:34: 56:99:dc:56:bb:7a:dc:61:e7:39:7a:14:34:12:0b: 97:b8:4d:90:64:35:7d:25:01:15:ca:e6:a2:c5:01: a0:22:6c:95:f6:f8:18:fb:24:1c:52:79:4d:8d:a8: 97:a7:a8:63:06:05:73:93:66:93:d7:5b:61:05:c9: af:3f:24:58:0e:31:29:70:db:f8:d7:f2:b4:30:1a: ae:69:72:28:fd:6f:44:41:a4:1f:ad:e7:92:b4:d7: 1b:30:2e:79:2b:c5:e7:8e:64:c9:95:b3:fc:5d:ac: 15:94:3e:f9:e0:a8:5c:08:f8:54:5f:5d:de:3e:93: 93:e9:77:b2:20:be:fb:fa:42:55:6c:89:00:0c:c2: 47:b6:03:19:97:92:34:a3:63:ed:70:0a:c6:ed:86: 5b:0b:1c:c9:0b:10:b9:c5:c3:0b:a2:a7:c4:83:f6: 6b:3a:7a:a1:db:18:b2:dd:2a:44:be:eb:57:2c:87: 26:10:98:eb:6e:7b:90:a7:ab:77:bc:35:4e:fb:62: 49:1b:7d:b4:1f:01:c0:3a:30:f8:13:57:f3:74:d0: 8d:2c:8d:ed:86:72:44:1d:16:fc:eb:4a:d4:1b:63: b6:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:62:42:13:29:40:69:74:34:F7:9F:70:49:E9:AA:8C:D4:35:37:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aba5fd13-c9b9-3702-ae62-6c198c446922.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:df:bc:1f:6c:3c:48:f8:50:b2:ec:65:fc:0b:41:5a:95:03: 98:19:4c:d4:c4:33:d2:ed:24:c6:6c:d6:a4:36:47:9d:ca:23: e0:5c:fa:da:d2:83:35:67:46:08:26:69:f9:00:db:31:f8:d9: 74:4b:5c:53:0d:0b:2a:99:cf:32:ae:eb:6e:a8:01:bd:94:d4: 8c:fd:f6:1f:3e:16:00:9a:21:44:fa:91:a8:63:2d:33:f7:ca: 52:0d:b9:71:48:1a:1b:b0:82:35:aa:d8:55:af:24:30:b2:c0: 67:9d:b8:8f:9e:2e:26:e7:e9:35:10:55:16:2f:50:95:f2:e4: bb:37:0d:dc:d0:b7:5d:e5:35:86:70:6b:24:b7:c3:59:24:fd: 5a:02:7e:62:af:4e:98:20:44:8e:ef:53:89:3f:d0:da:f9:85: 0d:5e:91:c8:37:ed:57:d4:83:d8:e9:94:b5:33:cb:c4:31:e5: f8:df:0b:ab:66:6e:76:b9:ba:bf:ce:51:5b:6c:98:39:88:7b: e8:ce:46:65:8e:49:0c:7b:17:32:20:20:e5:55:e4:b6:c1:77: 52:d1:f7:c2:da:ae:a2:e3:f5:43:d4:44:bb:a1:82:89:f1:18: 69:e1:7d:8d:45:b9:75:dd:40:11:51:7e:38:3b:2c:bc:3d:eb: 79:1a:40:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd775cpvVkQqa4IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2FkYzNjYTctNTg2Yy00MjFhLThlOTgtYjUzNzVkYzdlNzdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkAl12FBpFqBjlM8D3tbkEH+h8HdjQ5uvR0I EzRWmdxWu3rcYec5ehQ0EguXuE2QZDV9JQEVyuaixQGgImyV9vgY+yQcUnlNjaiX p6hjBgVzk2aT11thBcmvPyRYDjEpcNv41/K0MBquaXIo/W9EQaQfreeStNcbMC55 K8XnjmTJlbP8XawVlD754KhcCPhUX13ePpOT6XeyIL77+kJVbIkADMJHtgMZl5I0 o2PtcArG7YZbCxzJCxC5xcMLoqfEg/ZrOnqh2xiy3SpEvutXLIcmEJjrbnuQp6t3 vDVO+2JJG320HwHAOjD4E1fzdNCNLI3thnJEHRb860rUG2O2oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpiQhMpQGl0NPefcEnpqozUNTfIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWJhNWZkMTMtYzliOS0z NzAyLWFlNjItNmMxOThjNDQ2OTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHDfvB9sPEj4ULLsZfwLQVqVA5gZTNTEM9LtJMZs1qQ2R53KI+Bc+trS gzVnRggmafkA2zH42XRLXFMNCyqZzzKu626oAb2U1Iz99h8+FgCaIUT6kahjLTP3 ylINuXFIGhuwgjWq2FWvJDCywGeduI+eLibn6TUQVRYvUJXy5Ls3DdzQt13lNYZw ayS3w1kk/VoCfmKvTpggRI7vU4k/0Nr5hQ1ekcg37VfUg9jplLUzy8Qx5fjfC6tm bna5ur/OUVtsmDmIe+jORmWOSQx7FzIgIOVV5LbBd1LR98LarqLj9UPURLuhgonx GGnhfY1FuXXdQBFRfjg7LLw963kaQIo= -----END CERTIFICATE-----Generated at Fri Apr 11 22:58:22 2025 by rpki-client