$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa File: cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa (raw, json) Hash identifier: Pqggnv00G+RhmHb2rLu83aiWPpo9+BaIAOv1qARgl38= Subject key identifier: CF:C3:B4:B5:B7:1D:3A:4A:AA:0B:EE:BB:7C:20:88:94:37:3C:BE:FE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581444F37C573C63396E600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:44:4f:37:c5:73:c6:33:96:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=6cb4dabc-9073-4100-a527-6fb29df6a590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:71:bd:fc:3f:ff:9c:3d:01:9b:96:8b:54:e2: 74:6a:29:46:72:08:30:a3:c3:ed:3e:26:ec:35:88: d3:1f:a3:58:d0:8e:c0:82:ab:8a:fc:06:d0:83:52: 50:7d:37:b5:4f:5c:98:4c:73:f4:b1:6e:70:86:c5: 9f:e0:c1:a6:88:bd:be:34:20:2e:27:fa:5d:32:b8: 01:7b:e4:bd:19:ab:27:4e:ce:c0:6b:b3:80:ea:f0: e2:ab:e4:93:32:ad:7f:4c:18:06:cb:7b:c1:7d:fa: 7d:7d:a1:e2:de:92:c4:6f:4c:97:86:94:e9:d8:a9: ee:b7:40:10:ce:00:ca:dd:2e:63:6f:57:bb:42:bd: 11:7b:2b:e8:51:c4:ce:cc:b9:6d:74:34:17:74:a8: 64:f2:c3:ea:66:30:85:48:a8:aa:29:64:5b:ae:02: c0:51:f9:ac:1c:44:a9:72:79:44:b0:38:00:d0:c3: db:d8:6c:00:ff:6e:fd:29:e9:de:6c:8c:64:b3:8e: f1:0c:d6:96:42:4c:ad:9a:c5:55:0d:8c:4a:eb:42: ef:aa:c4:22:8b:67:d4:7f:99:d6:60:b5:6f:ba:d7: 78:0d:fc:86:94:b8:85:4a:2b:be:1e:2b:b9:4e:8e: d2:d7:6a:08:92:b3:c0:4c:ef:84:62:7a:5d:0f:d7: 22:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:C3:B4:B5:B7:1D:3A:4A:AA:0B:EE:BB:7C:20:88:94:37:3C:BE:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:2b:aa:51:bf:bf:be:87:6d:5d:9c:bb:25:06:f6:a8:f8:07: 8a:fe:6e:7e:50:bb:46:0c:79:d7:6e:78:38:f1:76:e3:9b:b9: 84:6f:23:c7:56:b6:9b:e4:fd:71:57:20:d5:cc:0f:2c:90:cc: 26:ff:93:18:0a:20:50:8d:50:7d:dd:a8:16:ed:0b:97:7c:10: a3:05:48:35:e9:af:7f:19:83:90:67:9a:08:12:e6:27:a5:21: 25:85:b4:14:c2:70:d6:7c:66:44:b0:40:f2:56:99:74:b8:9a: 54:e9:f4:3f:94:2c:fc:fc:18:15:48:70:4c:3b:e2:5e:59:2f: 2e:35:5a:9a:ee:9c:6f:13:dc:19:31:c0:a4:4c:5d:da:d1:d5: cd:e7:68:5f:cc:6b:92:87:c3:a7:0d:ec:76:c9:b5:aa:4d:bb: 21:7e:69:63:cb:e5:59:b0:ce:04:eb:25:95:45:29:c3:5f:01: 37:f9:23:69:23:d2:01:20:3b:59:7e:af:59:e8:d2:28:89:60: 0f:8a:25:b0:45:53:f3:4f:0e:a9:df:ec:14:e4:6f:65:d8:bb: c1:df:8c:7a:00:e6:b9:79:8c:aa:2c:47:e1:7f:39:b9:fe:db: 17:12:86:d8:b9:00:97:a7:e2:a8:fc:ed:41:ff:83:69:a2:9b: e2:a7:e6:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgURPN8VzxjOW5gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NmNiNGRhYmMtOTA3My00MTAwLWE1MjctNmZiMjlkZjZhNTkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnG9/D//nD0Bm5aLVOJ0ailGcggwo8PtPibs NYjTH6NY0I7AgquK/AbQg1JQfTe1T1yYTHP0sW5whsWf4MGmiL2+NCAuJ/pdMrgB e+S9GasnTs7Aa7OA6vDiq+STMq1/TBgGy3vBffp9faHi3pLEb0yXhpTp2Knut0AQ zgDK3S5jb1e7Qr0ReyvoUcTOzLltdDQXdKhk8sPqZjCFSKiqKWRbrgLAUfmsHESp cnlEsDgA0MPb2GwA/279KenebIxks47xDNaWQkytmsVVDYxK60LvqsQii2fUf5nW YLVvutd4DfyGlLiFSiu+Hiu5To7S12oIkrPATO+EYnpdD9cixQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/DtLW3HTpKqgvuu3wgiJQ3PL7+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2MzNmM5YzktYTdhNy0z NjQ1LWI3NzktYmIyZGZhYTBiMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcrqlG/v76HbV2cuyUG9qj4B4r+bn5Qu0YMeddueDjxduObuYRvI8dW tpvk/XFXINXMDyyQzCb/kxgKIFCNUH3dqBbtC5d8EKMFSDXpr38Zg5BnmggS5iel ISWFtBTCcNZ8ZkSwQPJWmXS4mlTp9D+ULPz8GBVIcEw74l5ZLy41WprunG8T3Bkx wKRMXdrR1c3naF/Ma5KHw6cN7HbJtapNuyF+aWPL5VmwzgTrJZVFKcNfATf5I2kj 0gEgO1l+r1no0iiJYA+KJbBFU/NPDqnf7BTkb2XYu8HfjHoA5rl5jKosR+F/Obn+ 2xcShti5AJen4qj87UH/g2mim+Kn5uU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:35 2025 by rpki-client