$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa File: c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa (raw, json) Hash identifier: EmqxV/LQHU7r8QSSIjcdDp0+L55jvkJOajJ2SghOoyE= Subject key identifier: 56:8B:85:44:1B:99:C9:64:BD:4E:C1:D6:30:89:3E:E7:3E:39:7D:C6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DACE5E0FE0DE6945BF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.202.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:da:ce:5e:0f:e0:de:69:45:bf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f8dbccad-6e0d-4846-a9a1-325501315dc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:90:65:b1:40:5a:d3:b7:78:ce:57:ae:da:19: 97:79:5b:72:39:2a:d8:90:9c:fb:86:f9:9d:ef:dd: cf:26:98:e5:59:ae:54:7d:c4:d6:51:9d:6e:02:49: ea:bc:62:d6:eb:8b:3f:6c:1a:5e:6f:a3:37:19:7c: 0f:95:ee:59:3c:19:ff:66:c2:af:98:4c:94:82:1f: 33:79:c1:06:e5:28:7e:0e:72:98:c2:41:2f:22:7e: b3:53:5d:ab:36:23:49:36:cf:2e:e8:e7:66:b6:da: 83:ef:de:1e:f0:9e:f3:59:c6:32:01:e8:b9:2a:ae: db:67:2c:2b:96:91:e9:5f:0d:bc:fa:f4:ec:a4:cd: a5:fb:7c:2c:e3:97:6e:c9:a0:8c:4d:40:1e:5d:5f: a9:38:e3:00:21:c9:33:d1:fe:26:86:d0:01:bf:7c: d8:1d:4c:9b:37:2a:f6:14:db:be:e4:a2:e8:5c:45: 22:1f:86:20:4b:ee:d8:18:bd:36:3a:e9:f0:7f:31: 20:b2:0a:d1:60:d9:53:04:74:6b:9c:df:c3:df:a4: 46:00:8a:4b:0f:d4:fc:a0:62:4b:cb:32:4c:15:81: 0d:14:2d:7c:72:73:2e:85:f7:31:2c:b5:a4:b0:cc: 85:36:de:a8:b1:71:a7:4b:0e:fd:6a:e6:6c:2d:2c: d8:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:8B:85:44:1B:99:C9:64:BD:4E:C1:D6:30:89:3E:E7:3E:39:7D:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2f5f3bb-fa00-3151-8707-1d7d835666f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.202.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:de:92:28:47:92:1a:af:88:0b:2d:cc:9a:6c:af:e4:f5:24: fd:d6:20:9f:13:37:ac:53:32:06:7d:b9:93:cc:ea:8b:d4:58: 06:0e:af:3f:fa:01:6e:9e:c7:3f:11:ca:ab:90:52:cf:52:61: 5a:d7:2e:07:ce:1e:b1:9e:c9:98:e4:85:a5:15:11:4a:e9:23: 99:7e:b3:5e:6a:95:9d:dd:90:85:2d:96:62:87:5c:99:69:29: 8b:b1:8a:e8:6c:2c:67:2c:06:bd:97:c4:d4:7a:07:9a:74:b1: 09:d6:a3:7f:16:1e:6d:d9:f1:b8:54:42:2d:45:e8:2f:2a:0e: d2:7d:13:28:ed:fd:0e:3d:b6:ba:47:19:0c:a6:c9:f3:0f:60: 2b:35:6e:59:64:47:52:60:32:d0:6f:3a:12:83:5f:5b:16:9d: 80:d2:82:d1:c0:dd:c8:05:38:d3:4f:9f:ab:67:9b:36:2b:ee: e9:7f:31:4d:fe:3a:00:71:5b:7c:3e:ef:62:50:b8:7d:90:7e: 88:57:9f:cf:3d:1a:04:42:9d:9e:b1:6a:63:ec:9c:3e:e0:e9: e7:47:66:c0:8b:3f:5a:96:84:c1:12:ad:10:f5:eb:2b:a2:51: 64:10:24:c6:e3:a1:fc:32:f8:83:cb:ef:c9:3f:b5:3e:c1:74: a3:34:1a:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdrOXg/g3mlFv4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjhkYmNjYWQtNmUwZC00ODQ2LWE5YTEtMzI1NTAxMzE1ZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwpBlsUBa07d4zleu2hmXeVtyOSrYkJz7hvmd 793PJpjlWa5UfcTWUZ1uAknqvGLW64s/bBpeb6M3GXwPle5ZPBn/ZsKvmEyUgh8z ecEG5Sh+DnKYwkEvIn6zU12rNiNJNs8u6OdmttqD794e8J7zWcYyAei5Kq7bZywr lpHpXw28+vTspM2l+3ws45duyaCMTUAeXV+pOOMAIckz0f4mhtABv3zYHUybNyr2 FNu+5KLoXEUiH4YgS+7YGL02OunwfzEgsgrRYNlTBHRrnN/D36RGAIpLD9T8oGJL yzJMFYENFC18cnMuhfcxLLWksMyFNt6osXGnSw79auZsLSzYRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFaLhUQbmclkvU7B1jCJPuc+OX3GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzJmNWYzYmItZmEwMC0z MTUxLTg3MDctMWQ3ZDgzNTY2NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDekihHkhqviAstzJpsr+T1JP3WIJ8TN6xTMgZ9uZPM6ovUWAYOrz/6 AW6exz8RyquQUs9SYVrXLgfOHrGeyZjkhaUVEUrpI5l+s15qlZ3dkIUtlmKHXJlp KYuxiuhsLGcsBr2XxNR6B5p0sQnWo38WHm3Z8bhUQi1F6C8qDtJ9Eyjt/Q49trpH GQymyfMPYCs1bllkR1JgMtBvOhKDX1sWnYDSgtHA3cgFONNPn6tnmzYr7ul/MU3+ OgBxW3w+72JQuH2QfohXn889GgRCnZ6xamPsnD7g6edHZsCLP1qWhMESrRD16yui UWQQJMbjofwy+IPL78k/tT7BdKM0GoE= -----END CERTIFICATE-----Generated at Fri Apr 11 22:42:00 2025 by rpki-client