$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa File: be55dd29-53b4-3391-846b-2b9a27ba2450.roa (raw, json) Hash identifier: ac0wKWFuKqnlf7RU/3SrD5oVOXPpXXvldoAIMglQ65Y= Subject key identifier: 84:19:93:25:72:D1:83:A5:00:64:E9:1D:62:12:45:D1:15:AC:F0:5F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E02588D0CF7A3B5DCAC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e0:25:88:d0:cf:7a:3b:5d:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=845549b0-a111-41ec-bbeb-92654f8a0a3c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:a4:68:17:57:35:10:54:18:9c:75:8e:4f: 80:2d:c5:a4:a1:af:95:49:c1:e8:ab:12:00:44:64: bb:55:4c:40:c1:6b:d1:34:d5:7d:e2:bf:9a:91:1b: 96:6b:16:3f:be:ef:5b:fe:af:3e:13:a1:a5:c0:7d: b8:ab:1b:ed:6e:20:a7:83:fb:13:27:75:de:8d:ab: 77:a4:de:3d:1f:18:85:1c:fe:d1:d4:67:31:55:ac: 36:17:59:fe:43:05:92:00:2c:64:f4:bc:13:e9:c4: 6a:4b:a1:7f:d5:11:dd:a5:fd:67:f5:74:9f:bb:9a: 61:93:dd:0a:b6:d8:cc:47:a4:e5:90:32:2a:81:26: 71:9f:dc:fc:a4:fd:da:88:00:f6:da:93:26:35:3c: 2e:14:8c:a2:02:f0:d3:74:51:c4:c7:da:37:9b:1d: d6:24:f6:da:02:2f:c8:2b:a6:c7:e1:54:f6:6e:a6: 43:96:a0:e9:28:18:37:0f:ac:27:42:51:eb:a6:49: 16:60:e9:4d:16:43:65:54:83:27:5a:33:2a:d9:6b: 86:2e:7e:7e:73:ce:27:6a:d6:b2:bd:f9:bb:a9:14: 8d:78:75:05:25:0e:d4:90:cc:4e:9c:32:6f:d2:1a: 7c:a0:2f:c8:44:6b:e3:b1:45:f0:2d:aa:57:43:d3: 0f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:19:93:25:72:D1:83:A5:00:64:E9:1D:62:12:45:D1:15:AC:F0:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/be55dd29-53b4-3391-846b-2b9a27ba2450.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:9a:e2:d8:02:70:6f:36:05:fb:65:52:ad:bd:b7:b2:97:24: 7e:4c:8b:58:4a:be:a7:e6:a4:72:90:43:3e:fb:a0:57:56:74: f4:a3:4d:a1:ba:df:ff:ae:0b:26:05:4e:39:5a:7f:e8:82:f8: b4:7c:da:25:78:2b:35:bd:2d:bb:7e:b3:6a:97:22:bf:46:f7: c1:a2:ab:09:09:54:9e:f2:fa:85:b7:cd:48:4c:20:f6:a7:52: 9b:39:1f:8b:43:06:a3:5b:0d:cd:e5:eb:37:a8:b0:bd:7d:b1: dc:cc:c4:9e:bd:5c:64:e1:6d:13:15:28:d7:f1:46:19:d1:88: 56:ad:db:d0:09:02:d0:69:57:0a:44:76:4e:80:ab:fa:75:99: bf:4a:ef:6e:20:ee:62:47:c4:e6:a7:7f:f0:ad:d9:9c:2a:b0: 40:c7:34:b2:dc:ef:66:95:c7:63:cc:67:73:a2:07:85:c9:0f: a1:0b:57:c1:7c:90:3e:11:de:e5:f7:5b:55:33:23:0c:3e:9e: 95:62:3c:9b:61:9b:76:3f:7a:ab:cd:30:01:60:4b:49:48:c5: 66:bc:be:7c:8e:e9:a4:d5:e5:a7:e3:6a:dc:a7:e3:c2:16:62: 24:07:1b:ae:e4:b4:6e:ba:f0:29:11:f9:58:0b:d5:17:7c:71: 2d:3d:6d:86 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeAliNDPejtdysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODQ1NTQ5YjAtYTExMS00MWVjLWJiZWItOTI2NTRmOGEwYTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrykaBdXNRBUGJx1jk+ALcWkoa+VScHoqxIA RGS7VUxAwWvRNNV94r+akRuWaxY/vu9b/q8+E6GlwH24qxvtbiCng/sTJ3Xejat3 pN49HxiFHP7R1GcxVaw2F1n+QwWSACxk9LwT6cRqS6F/1RHdpf1n9XSfu5phk90K ttjMR6TlkDIqgSZxn9z8pP3aiAD22pMmNTwuFIyiAvDTdFHEx9o3mx3WJPbaAi/I K6bH4VT2bqZDlqDpKBg3D6wnQlHrpkkWYOlNFkNlVIMnWjMq2WuGLn5+c84natay vfm7qRSNeHUFJQ7UkMxOnDJv0hp8oC/IRGvjsUXwLapXQ9MPWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQZkyVy0YOlAGTpHWISRdEVrPBfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmU1NWRkMjktNTNiNC0z MzkxLTg0NmItMmI5YTI3YmEyNDUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGa4tgCcG82BftlUq29t7KXJH5Mi1hKvqfmpHKQQz77oFdWdPSjTaG6 3/+uCyYFTjlaf+iC+LR82iV4KzW9Lbt+s2qXIr9G98GiqwkJVJ7y+oW3zUhMIPan Ups5H4tDBqNbDc3l6zeosL19sdzMxJ69XGThbRMVKNfxRhnRiFat29AJAtBpVwpE dk6Aq/p1mb9K724g7mJHxOanf/Ct2ZwqsEDHNLLc72aVx2PMZ3OiB4XJD6ELV8F8 kD4R3uX3W1UzIww+npViPJthm3Y/eqvNMAFgS0lIxWa8vnyO6aTV5afjatyn48IW YiQHG67ktG668CkR+VgL1Rd8cS09bYY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:43:36 2025 by rpki-client