$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa File: c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa (raw, json) Hash identifier: umx81JdiJOquBfRn2BvVbxnZRVR/7D72QXoeXKflGaI= Subject key identifier: 5E:88:4B:74:A2:39:D2:09:1B:39:2B:17:25:68:7E:74:C8:64:F0:29 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D76365902101CE80DA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d7:63:65:90:21:01:ce:80:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a81ed35d-aff4-4845-bf4d-575b88f12388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:84:ed:11:55:b2:3b:f3:9b:8b:56:c6:67:bc: e2:90:d2:f4:dc:2d:c9:1d:2f:f2:dc:b4:dc:59:32: 3d:eb:b0:cb:e8:fd:e7:c5:32:a4:8c:b8:24:77:27: 01:bf:95:30:ef:52:2d:09:79:75:61:86:c7:39:22: b8:8c:19:b9:eb:a7:c2:e3:c6:60:5e:f0:8c:c3:7e: be:a1:6a:21:d8:30:44:e4:d2:85:c5:91:54:85:59: 7c:6a:ce:ac:5a:78:47:f0:28:41:55:5e:b5:15:80: 66:59:b5:c3:3b:5b:04:2c:40:df:88:b9:e7:db:c2: 94:c8:e1:41:ff:e2:77:54:a0:36:f6:88:c3:2b:e3: 7e:1f:7f:37:06:fe:f8:13:84:39:72:f9:56:17:2a: db:fd:1a:d8:3c:9b:00:d6:93:d9:a0:c7:69:9f:92: 6d:41:33:ef:0c:23:4b:35:47:83:96:0d:f7:d4:cc: 2f:38:68:ad:2d:c9:dd:63:a7:48:2a:ef:07:a6:39: 8c:35:a9:fc:af:59:cf:cb:42:52:38:00:d2:c8:22: e6:6e:01:d0:06:a5:ee:f3:af:3c:76:c3:a1:42:12: e7:7c:f8:59:e5:bb:ed:b9:34:42:d5:eb:65:0e:8e: bb:ab:12:97:5b:d5:ef:49:68:3f:9c:35:25:74:19: a2:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:88:4B:74:A2:39:D2:09:1B:39:2B:17:25:68:7E:74:C8:64:F0:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c51057e6-6497-3766-a9ed-b0c9d83df7c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:1c:9e:2d:6a:7f:7c:f1:74:dc:14:ed:0c:0b:f6:d1:19:28: 95:d1:5d:de:b0:a9:ca:2e:38:99:54:57:36:0a:dd:14:ad:11: bf:fd:5c:fe:b7:6b:60:3c:b5:4e:37:68:3f:76:7a:26:77:2c: ed:e6:5e:dc:8c:15:11:7a:da:76:bd:ce:b7:95:ae:2a:01:bb: bf:ae:38:8b:15:9b:b3:33:ec:1a:74:b4:b0:17:52:78:2f:77: fc:32:a4:d9:0f:c4:e4:5d:11:4c:4b:1d:dd:45:20:95:4b:04: 64:e4:3f:50:dc:32:64:78:86:c6:bf:fd:13:33:c7:d1:b3:d9: d8:f7:df:30:37:70:f6:02:15:6f:a0:ce:e9:62:cd:c7:30:3a: 40:8a:d3:f9:c9:29:e6:6d:a2:d7:9b:24:4e:3c:da:c2:80:df: cb:11:2d:db:d8:cd:68:ac:76:3a:3f:be:4d:94:33:7e:c2:68: 15:28:2e:9a:d8:08:01:cf:b8:9c:a8:53:90:2e:30:5a:40:b3: 3e:cc:b4:56:0b:a9:3a:58:21:61:0b:bf:2c:88:00:35:b6:e4: 90:c8:a2:bd:9a:89:35:2f:eb:c2:1f:38:6f:c0:5e:68:03:9c: 3e:be:34:ed:00:5e:6f:67:9e:1a:f1:c3:30:8a:a9:e7:37:61: 30:f6:36:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgddjZZAhAc6A2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTgxZWQzNWQtYWZmNC00ODQ1LWJmNGQtNTc1Yjg4ZjEyMzg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqITtEVWyO/Obi1bGZ7zikNL03C3JHS/y3LTc WTI967DL6P3nxTKkjLgkdycBv5Uw71ItCXl1YYbHOSK4jBm566fC48ZgXvCMw36+ oWoh2DBE5NKFxZFUhVl8as6sWnhH8ChBVV61FYBmWbXDO1sELEDfiLnn28KUyOFB /+J3VKA29ojDK+N+H383Bv74E4Q5cvlWFyrb/RrYPJsA1pPZoMdpn5JtQTPvDCNL NUeDlg331MwvOGitLcndY6dIKu8HpjmMNan8r1nPy0JSOADSyCLmbgHQBqXu8688 dsOhQhLnfPhZ5bvtuTRC1etlDo67qxKXW9XvSWg/nDUldBmi2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF6IS3SiOdIJGzkrFyVofnTIZPApMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzUxMDU3ZTYtNjQ5Ny0z NzY2LWE5ZWQtYjBjOWQ4M2RmN2MwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIIcni1qf3zxdNwU7QwL9tEZKJXRXd6wqcouOJlUVzYK3RStEb/9XP63 a2A8tU43aD92eiZ3LO3mXtyMFRF62na9zreVrioBu7+uOIsVm7Mz7Bp0tLAXUngv d/wypNkPxORdEUxLHd1FIJVLBGTkP1DcMmR4hsa//RMzx9Gz2dj33zA3cPYCFW+g zulizccwOkCK0/nJKeZtotebJE482sKA38sRLdvYzWisdjo/vk2UM37CaBUoLprY CAHPuJyoU5AuMFpAsz7MtFYLqTpYIWELvyyIADW25JDIor2aiTUv68IfOG/AXmgD nD6+NO0AXm9nnhrxwzCKqec3YTD2Nnk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:46 2025 by rpki-client