$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa File: b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa (raw, json) Hash identifier: sJSe5usDs2xSxG2gjhRPu2fGl+tfXpBvQDv4PnW6GPw= Subject key identifier: 54:1C:37:3D:B4:57:A4:C9:0A:96:E3:4D:07:33:2B:60:EB:58:A8:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58147E58AB5DA3578AC1880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:47:e5:8a:b5:da:35:78:ac:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d5827774-3e6b-4e36-8ac5-1e30fed8bcdb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a1:01:21:74:77:b0:42:26:be:34:6e:de:7c: 92:fa:5a:ad:01:7d:74:0f:cc:95:95:6c:7f:ab:b5: 46:29:bd:b4:d5:2c:ba:8d:31:db:9f:a1:9d:3d:2d: 14:20:0b:44:27:48:4a:70:38:0d:0e:4f:15:44:67: 71:c5:a5:4f:70:c6:6a:4b:15:49:7f:28:7c:94:3d: 41:8c:73:7c:49:a7:99:23:a0:ca:29:d0:ea:d0:d8: 5a:6e:5e:26:5d:be:30:9d:f2:45:18:9c:75:67:51: 0a:88:5e:50:30:95:2e:d1:2e:ff:7a:0a:ee:3c:4c: 1f:21:f7:a2:b5:74:4e:35:89:fe:3e:40:d7:e5:7a: 61:3d:2d:a1:b2:43:29:82:f6:fc:d5:d5:38:78:2a: c2:0a:49:df:d5:41:6d:4c:60:d4:0a:1f:6d:35:29: 29:a8:cc:28:8e:9d:75:af:82:e7:c4:08:60:72:f8: 3b:91:41:be:ca:4c:75:43:79:d2:92:80:49:8c:33: 4a:95:e5:3d:8c:cd:9e:e0:83:c8:5e:c5:54:14:23: dd:15:07:cb:e9:d3:ab:6a:de:4b:73:cb:3e:ce:45: 29:ee:48:bb:e7:fe:39:ff:a4:0b:41:a0:e1:cd:49: 8e:75:b1:5f:3a:7b:b7:27:72:55:ec:4c:1c:56:56: c3:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1C:37:3D:B4:57:A4:C9:0A:96:E3:4D:07:33:2B:60:EB:58:A8:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b01e0694-bde7-3d9d-b8f4-48d1d5aa9945.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:48:08:f1:d1:ab:b5:0f:e1:da:b1:d1:10:4f:cc:51:cb:86: 7b:7a:7a:56:5c:b1:10:95:a4:36:33:2b:51:a2:2e:f1:b8:3f: f4:79:5a:58:c2:b5:d7:cf:8a:08:79:84:2e:24:b9:47:4b:10: c4:f5:6d:e8:e9:05:0b:20:fa:61:fc:e3:3c:41:0a:5e:18:ba: 86:28:bb:81:5a:55:0b:ce:9e:9e:69:0e:21:53:6c:17:6e:40: c2:2d:41:a6:93:87:47:a7:5e:31:12:c9:bd:21:1c:ab:8a:f0: c7:7d:11:6b:03:24:c8:b1:f5:bf:e8:8a:7e:d7:b3:6a:36:fd: 56:77:44:51:9c:13:2b:b7:27:c4:f4:51:76:3a:79:39:8c:09: de:ca:30:f9:96:0c:bb:21:e9:5d:f1:88:04:c2:9e:3f:2f:ac: 32:12:05:90:ef:86:be:03:5c:4a:b0:26:99:37:0b:a5:b6:e8: 80:16:e6:f8:1e:93:71:ef:4c:b3:b6:e4:76:cb:0a:2d:cb:ee: ab:d5:72:43:81:e5:a7:87:73:de:04:c2:e4:f6:cf:56:f7:03: e7:05:2b:0f:a8:c1:09:20:9e:45:e9:ee:b2:17:e8:b1:80:45: 6a:34:59:7a:9d:37:13:58:1f:76:45:ad:c3:51:63:12:0e:83: de:d0:b8:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUflirXaNXisGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDU4Mjc3NzQtM2U2Yi00ZTM2LThhYzUtMWUzMGZlZDhiY2RiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aEBIXR3sEImvjRu3nyS+lqtAX10D8yVlWx/ q7VGKb201Sy6jTHbn6GdPS0UIAtEJ0hKcDgNDk8VRGdxxaVPcMZqSxVJfyh8lD1B jHN8SaeZI6DKKdDq0Nhabl4mXb4wnfJFGJx1Z1EKiF5QMJUu0S7/egruPEwfIfei tXRONYn+PkDX5XphPS2hskMpgvb81dU4eCrCCknf1UFtTGDUCh9tNSkpqMwojp11 r4LnxAhgcvg7kUG+ykx1Q3nSkoBJjDNKleU9jM2e4IPIXsVUFCPdFQfL6dOrat5L c8s+zkUp7ki75/45/6QLQaDhzUmOdbFfOnu3J3JV7EwcVlbDcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQcNz20V6TJCpbjTQczK2DrWKi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjAxZTA2OTQtYmRlNy0z ZDlkLWI4ZjQtNDhkMWQ1YWE5OTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD9ICPHRq7UP4dqx0RBPzFHLhnt6elZcsRCVpDYzK1GiLvG4P/R5WljC tdfPigh5hC4kuUdLEMT1bejpBQsg+mH84zxBCl4YuoYou4FaVQvOnp5pDiFTbBdu QMItQaaTh0enXjESyb0hHKuK8Md9EWsDJMix9b/oin7Xs2o2/VZ3RFGcEyu3J8T0 UXY6eTmMCd7KMPmWDLsh6V3xiATCnj8vrDISBZDvhr4DXEqwJpk3C6W26IAW5vge k3HvTLO25HbLCi3L7qvVckOB5aeHc94EwuT2z1b3A+cFKw+owQkgnkXp7rIX6LGA RWo0WXqdNxNYH3ZFrcNRYxIOg97QuAU= -----END CERTIFICATE-----Generated at Fri Apr 11 23:59:56 2025 by rpki-client