$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce442315-e170-30ff-b2de-fc731ca349d2.roa File: ce442315-e170-30ff-b2de-fc731ca349d2.roa (raw, json) Hash identifier: icx5ftNCW/CX47pZ1XErMHB+8+HMb8GDB3OwZKbjnDc= Subject key identifier: AD:DD:1C:41:BC:BB:2A:22:47:D5:34:38:7F:7F:89:F3:83:BC:2A:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581D82D9C838AFD10313900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce442315-e170-30ff-b2de-fc731ca349d2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.105.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:d8:2d:9c:83:8a:fd:10:31:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=155051c2-358e-4ac6-aa66-1a82fd2e1147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:d5:86:4f:99:41:3b:58:1f:70:02:16:f2:a3: df:8a:ea:c9:10:eb:c8:e4:e0:63:45:79:b5:7e:3a: bd:42:25:d5:38:42:10:0d:63:90:b8:44:02:ab:05: e0:74:f5:34:19:af:d4:ba:15:df:69:e4:dc:6d:0c: 57:08:aa:53:58:9e:64:77:a6:e8:56:a2:3b:b0:09: 86:2f:c1:7e:d7:7b:72:ea:c9:9d:bc:a1:9c:1a:e9: 16:d5:22:b4:44:da:22:4f:19:ee:a9:c5:64:72:e6: 97:62:9f:c2:88:f5:e7:c1:84:74:f4:04:a4:26:0f: c3:87:ac:f2:53:c3:78:47:d8:9d:e0:4e:be:f0:20: df:01:30:ef:45:29:bc:9b:21:ee:ac:a8:67:0a:3c: fa:10:c1:72:9c:24:da:9f:54:75:43:eb:91:be:92: f6:ed:a5:50:48:e7:8b:09:77:21:aa:1d:30:97:4f: 7e:c0:b5:73:34:27:b4:ff:41:39:c1:3c:fa:b2:f3: 57:4f:6f:4a:66:e2:5a:36:e5:43:e8:94:4c:66:d9: 3c:4c:82:79:1f:b0:57:a8:4e:39:a8:a4:9d:0f:cf: a0:4c:14:5d:c5:b2:98:10:85:fc:ca:54:56:e3:82: 6c:83:dd:a9:18:d3:76:c0:a3:bf:d6:96:ee:ab:aa: 54:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:DD:1C:41:BC:BB:2A:22:47:D5:34:38:7F:7F:89:F3:83:BC:2A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce442315-e170-30ff-b2de-fc731ca349d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.105.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:48:0d:51:37:18:7c:4a:54:a9:e8:24:fe:1a:52:d6:fa:a9: a9:2d:1b:ee:7e:49:80:af:43:16:a2:43:ad:27:ce:61:c9:ef: c7:f4:ce:22:04:55:06:0a:39:d9:ff:b1:0c:34:da:9c:27:30: 0e:25:25:9a:c4:01:c5:72:e2:93:d3:6f:c9:6e:72:3d:c1:7e: b4:6e:5f:87:6c:0e:fa:47:68:9a:53:a4:10:65:3f:6c:73:10: e0:56:58:6f:4b:24:08:d9:43:c5:3b:4e:66:d5:a4:dc:16:b9: 14:47:ce:ff:40:e6:59:86:03:b2:23:3d:f4:07:f7:88:2d:de: f9:fb:cb:d7:5c:18:51:9e:37:7e:92:a9:46:9d:79:7c:72:2b: 16:e2:6f:1b:a0:08:b6:dc:55:2e:8a:fb:05:a3:04:b9:6a:68: a1:f2:a0:c2:9e:32:8d:14:54:97:b9:bc:74:37:a4:95:41:8e: 86:ad:f1:ff:44:3c:2f:81:1b:ac:93:2a:53:d3:29:7c:3c:e4: 36:c8:51:d4:33:0f:64:b1:50:ff:33:85:83:03:9e:23:56:2c: 36:cc:42:b5:03:67:69:84:7a:ea:79:aa:f7:da:cb:ec:ec:e5: 21:f7:37:bf:71:5b:5d:bf:d9:e2:d0:87:3e:fa:d7:c3:83:a5: 72:19:b1:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdgtnIOK/RAxOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTU1MDUxYzItMzU4ZS00YWM2LWFhNjYtMWE4MmZkMmUxMTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg9WGT5lBO1gfcAIW8qPfiurJEOvI5OBjRXm1 fjq9QiXVOEIQDWOQuEQCqwXgdPU0Ga/UuhXfaeTcbQxXCKpTWJ5kd6boVqI7sAmG L8F+13ty6smdvKGcGukW1SK0RNoiTxnuqcVkcuaXYp/CiPXnwYR09ASkJg/Dh6zy U8N4R9id4E6+8CDfATDvRSm8myHurKhnCjz6EMFynCTan1R1Q+uRvpL27aVQSOeL CXchqh0wl09+wLVzNCe0/0E5wTz6svNXT29KZuJaNuVD6JRMZtk8TIJ5H7BXqE45 qKSdD8+gTBRdxbKYEIX8ylRW44Jsg92pGNN2wKO/1pbuq6pUJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3dHEG8uyoiR9U0OH9/ifODvCrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2U0NDIzMTUtZTE3MC0z MGZmLWIyZGUtZmM3MzFjYTM0OWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9IDVE3GHxKVKnoJP4aUtb6qaktG+5+SYCvQxaiQ60nzmHJ78f0ziIE VQYKOdn/sQw02pwnMA4lJZrEAcVy4pPTb8lucj3BfrRuX4dsDvpHaJpTpBBlP2xz EOBWWG9LJAjZQ8U7TmbVpNwWuRRHzv9A5lmGA7IjPfQH94gt3vn7y9dcGFGeN36S qUadeXxyKxbibxugCLbcVS6K+wWjBLlqaKHyoMKeMo0UVJe5vHQ3pJVBjoat8f9E PC+BG6yTKlPTKXw85DbIUdQzD2SxUP8zhYMDniNWLDbMQrUDZ2mEeup5qvfay+zs 5SH3N79xW12/2eLQhz7618ODpXIZsWc= -----END CERTIFICATE-----Generated at Fri Apr 11 22:41:57 2025 by rpki-client