$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa File: c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa (raw, json) Hash identifier: wjhn0MtN/R0B44DWRs0JUwtXhE5hXlIwd1dtH8iHs1Q= Subject key identifier: 24:93:D6:6A:FF:87:5E:B1:96:F9:02:81:FF:D2:95:C4:54:D3:28:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58146C0D6ADDDC866005200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:46:c0:d6:ad:dd:c8:66:00:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3ffe7790-0978-4447-93b0-839b5671874c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:cc:ce:9d:ce:5a:c4:06:3d:a9:54:3f:a5:63: 25:5a:ee:51:5a:78:8a:54:81:f0:83:3f:bd:03:b8: 7d:59:fc:fc:4d:f2:c4:89:a9:35:ae:2f:3e:3a:07: dc:20:d3:d9:85:c5:f8:7b:3c:7f:a3:4b:be:c9:67: 74:97:34:c8:eb:67:42:10:4e:c2:d2:04:e4:ce:a6: be:25:f7:9b:4c:cc:61:29:77:43:7c:89:c4:51:7c: c6:ff:f8:73:e5:ff:0a:93:f3:e2:10:85:8b:01:d5: 12:34:d4:56:94:d5:18:4a:1a:d9:ac:d5:9b:ba:3d: 79:e8:42:12:13:60:bd:8c:19:49:ba:97:67:39:66: b0:11:d4:9e:af:17:c9:b9:9f:34:82:3a:d1:00:5e: 5b:a0:dd:34:a7:e5:21:f8:2e:b5:5e:fd:66:60:44: f2:e6:a5:51:4a:6f:75:a3:3a:48:97:36:02:1b:ca: 65:69:0f:ef:0d:e1:66:4b:c2:15:3c:22:5d:99:88: 00:a4:94:a9:e9:01:9e:a0:cf:5b:3b:b5:e5:8c:d4: 9f:d0:c8:dc:17:06:9f:f1:64:3f:ed:a9:0f:7b:7a: 66:ed:b8:38:25:33:cb:cf:d0:b2:44:16:df:df:ef: 88:6b:87:e7:51:15:e2:5a:fc:f0:d8:35:51:99:8d: 67:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:93:D6:6A:FF:87:5E:B1:96:F9:02:81:FF:D2:95:C4:54:D3:28:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9f98c55-1da8-38c8-a9a1-b424ddeff17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:67:8f:9c:80:a1:81:01:ad:62:c3:0e:e2:68:6c:af:bf:05: 31:8c:5c:31:9b:8d:38:87:45:64:7f:3c:35:79:3a:0a:3d:4c: 26:2c:ea:26:e7:ce:c3:c4:71:b8:7f:5b:49:e2:1b:f2:59:ec: 3b:92:b5:cd:5b:20:73:78:22:52:5e:0c:0e:f6:66:64:76:5a: dc:c1:6f:18:28:cf:4e:98:e0:49:6b:a8:a5:9a:96:28:ea:00: 19:34:af:49:bc:04:84:b6:8b:6b:8f:56:f2:04:ea:fe:42:38: d6:72:60:80:db:0c:3f:a8:35:db:e9:c9:fa:07:82:0c:95:9c: 1f:fa:80:8d:c0:c1:c9:ab:f9:68:97:06:37:61:27:d2:99:d7: c2:ca:d7:c8:e5:7d:c3:e1:5a:cf:1a:96:68:6c:2f:83:1a:2c: 4d:7e:dc:e0:45:72:11:20:e6:d2:23:96:80:f7:9c:e0:a5:0d: 82:d7:6d:7e:c4:80:b9:34:42:00:3e:68:94:47:e2:60:9a:25: 27:4a:a7:ab:ba:58:3b:f8:18:6f:b5:df:1e:e3:16:f8:b9:e5: e6:86:3e:9a:ed:d5:b1:be:c7:bd:87:8e:65:f2:cd:ab:0f:e5: a8:93:a6:89:b7:82:f7:35:d9:40:dc:38:87:0e:ed:8c:6f:d9: e4:c4:60:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUbA1q3dyGYAUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2ZmZTc3OTAtMDk3OC00NDQ3LTkzYjAtODM5YjU2NzE4NzRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiszOnc5axAY9qVQ/pWMlWu5RWniKVIHwgz+9 A7h9Wfz8TfLEiak1ri8+OgfcINPZhcX4ezx/o0u+yWd0lzTI62dCEE7C0gTkzqa+ JfebTMxhKXdDfInEUXzG//hz5f8Kk/PiEIWLAdUSNNRWlNUYShrZrNWbuj156EIS E2C9jBlJupdnOWawEdSerxfJuZ80gjrRAF5boN00p+Uh+C61Xv1mYETy5qVRSm91 ozpIlzYCG8plaQ/vDeFmS8IVPCJdmYgApJSp6QGeoM9bO7XljNSf0MjcFwaf8WQ/ 7akPe3pm7bg4JTPLz9CyRBbf3++Ia4fnURXiWvzw2DVRmY1nZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCST1mr/h16xlvkCgf/SlcRU0yhKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlmOThjNTUtMWRhOC0z OGM4LWE5YTEtYjQyNGRkZWZmMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJnj5yAoYEBrWLDDuJobK+/BTGMXDGbjTiHRWR/PDV5Ogo9TCYs6ibn zsPEcbh/W0niG/JZ7DuStc1bIHN4IlJeDA72ZmR2WtzBbxgoz06Y4ElrqKWalijq ABk0r0m8BIS2i2uPVvIE6v5CONZyYIDbDD+oNdvpyfoHggyVnB/6gI3Awcmr+WiX BjdhJ9KZ18LK18jlfcPhWs8almhsL4MaLE1+3OBFchEg5tIjloD3nOClDYLXbX7E gLk0QgA+aJRH4mCaJSdKp6u6WDv4GG+13x7jFvi55eaGPprt1bG+x72HjmXyzasP 5aiTpom3gvc12UDcOIcO7Yxv2eTEYC8= -----END CERTIFICATE-----Generated at Fri Mar 14 08:32:04 2025 by rpki-client