$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9a71017-bed5-33b0-967f-73189681c3ce.roa File: c9a71017-bed5-33b0-967f-73189681c3ce.roa (raw, json) Hash identifier: 44ZcO/7Twb2qAYGtTcSb/B9kHpRW4Dlqzo00PXmErRw= Subject key identifier: D8:BE:69:28:FF:B4:E0:D7:91:FA:46:03:C5:DB:86:61:11:6E:2D:AE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D77F1029584F0A3E1280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9a71017-bed5-33b0-967f-73189681c3ce.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.83.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d7:7f:10:29:58:4f:0a:3e:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=7c49f8ac-0ca9-46b7-b810-f1df416f45fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:99:5b:93:17:61:c5:b3:6b:4c:3b:d4:e8:27: 98:e3:35:bd:c9:0a:dd:2a:4c:5b:18:58:f2:cd:4e: ab:90:bb:c1:ee:55:77:76:5b:bc:5d:1b:e4:d8:f9: 61:8b:b7:40:74:8c:f1:2e:de:eb:15:2d:5d:c6:3d: fe:19:f6:49:fa:58:db:de:83:7d:bc:64:ee:e8:56: 5f:e0:6e:49:b0:d4:f8:87:d6:82:ef:86:ac:b5:b4: 38:95:21:13:c6:76:52:a8:37:18:09:a1:8b:75:29: 77:83:ca:b8:e7:d7:98:8b:9a:12:8a:9d:f2:b8:c5: 20:4c:90:b4:09:84:3e:28:58:14:3b:ed:98:ad:df: ea:79:4e:58:dd:9f:ca:39:68:ba:e4:3f:74:5f:8e: 14:da:09:fa:e4:ae:e5:4f:c4:2c:9b:2c:53:99:1b: 19:90:99:7a:e7:98:e6:a8:23:49:63:b4:dd:d2:cd: 73:8f:a1:a5:4f:70:76:34:19:b6:13:2f:9f:fc:7e: 9d:7c:d6:b0:08:36:7e:5e:29:6a:b4:e1:9c:54:c9: 2f:be:8c:9b:c6:99:68:76:1e:96:a8:37:05:d9:08: 24:9b:15:19:ea:89:e0:0c:37:8e:50:cd:f6:82:e1: 7d:0e:28:a3:52:3f:60:e7:4d:a3:1d:26:b3:fa:71: 12:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:BE:69:28:FF:B4:E0:D7:91:FA:46:03:C5:DB:86:61:11:6E:2D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9a71017-bed5-33b0-967f-73189681c3ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.83.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:3f:20:06:a6:a5:32:bf:15:89:85:01:8b:16:b0:2a:61:de: 23:f0:a9:54:f5:6a:df:06:2b:35:7e:76:5f:e1:51:37:11:9b: 54:ee:62:81:5d:e3:5a:61:96:7e:21:47:ce:da:1f:14:19:9f: d2:9c:c1:a5:f0:3f:ed:24:c1:26:af:b6:76:2d:ee:41:1b:cd: 23:c6:99:84:4a:8b:ed:0f:ae:48:d2:39:9f:27:30:d7:12:f3: 12:f4:b6:d7:14:f4:5a:8e:64:dd:de:12:77:d8:e5:72:04:ac: ff:07:ac:ef:c0:50:7b:3b:2d:85:7a:07:9c:ab:5f:d1:15:ec: fc:a1:6d:1e:b7:5c:ef:10:8d:a6:38:5b:7a:1b:a2:23:17:35: 16:9d:11:9c:fd:34:67:5f:ec:36:bf:5f:32:57:a0:ec:9a:37: 7b:b8:d1:e2:84:c4:ca:a9:ae:a8:d1:92:7d:da:e9:d5:8e:4e: c8:fd:63:dd:1f:4a:38:93:ba:c7:cd:4c:8f:1c:16:b8:61:8d: e3:d1:3b:df:92:03:58:cd:95:a2:6b:0a:58:75:96:98:5e:98: d4:60:ab:83:9e:5c:39:77:7a:4c:57:c5:9c:07:48:ff:87:04: 6a:53:a0:29:2c:d3:e3:41:8f:82:1c:20:07:e6:80:16:1c:43: 7a:a9:85:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdd/EClYTwo+EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk N2M0OWY4YWMtMGNhOS00NmI3LWI4MTAtZjFkZjQxNmY0NWZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZlbkxdhxbNrTDvU6CeY4zW9yQrdKkxbGFjy zU6rkLvB7lV3dlu8XRvk2Plhi7dAdIzxLt7rFS1dxj3+GfZJ+ljb3oN9vGTu6FZf 4G5JsNT4h9aC74astbQ4lSETxnZSqDcYCaGLdSl3g8q459eYi5oSip3yuMUgTJC0 CYQ+KFgUO+2Yrd/qeU5Y3Z/KOWi65D90X44U2gn65K7lT8QsmyxTmRsZkJl655jm qCNJY7Td0s1zj6GlT3B2NBm2Ey+f/H6dfNawCDZ+XilqtOGcVMkvvoybxplodh6W qDcF2QgkmxUZ6ongDDeOUM32guF9DiijUj9g502jHSaz+nESJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNi+aSj/tODXkfpGA8XbhmERbi2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhNzEwMTctYmVkNS0z M2IwLTk2N2YtNzMxODk2ODFjM2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGU/IAampTK/FYmFAYsWsCph3iPwqVT1at8GKzV+dl/hUTcRm1TuYoFd 41phln4hR87aHxQZn9KcwaXwP+0kwSavtnYt7kEbzSPGmYRKi+0PrkjSOZ8nMNcS 8xL0ttcU9FqOZN3eEnfY5XIErP8HrO/AUHs7LYV6B5yrX9EV7PyhbR63XO8QjaY4 W3oboiMXNRadEZz9NGdf7Da/XzJXoOyaN3u40eKExMqprqjRkn3a6dWOTsj9Y90f SjiTusfNTI8cFrhhjePRO9+SA1jNlaJrClh1lphemNRgq4OeXDl3ekxXxZwHSP+H BGpToCks0+NBj4IcIAfmgBYcQ3qphbY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:13:53 2025 by rpki-client