$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa File: d0ff1f45-a856-3692-b700-086a0fb2bf07.roa (raw, json) Hash identifier: p7RF/pNsNZjD6bXO3FNAZVpRhDFoD5DUkGZeLCR8fk8= Subject key identifier: A4:2A:E5:E9:E2:70:58:DA:40:07:42:BF:13:15:5A:6C:58:BC:9D:83 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DA94E9EDE75704EB5A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.186.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:da:94:e9:ed:e7:57:04:eb:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=fcc039a4-ddbe-4c68-ae2b-849af20822da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:95:a6:ce:07:17:51:a3:84:b5:7f:03:02:c2: 50:d2:91:22:82:f8:32:07:20:84:17:75:bc:32:39: 4b:81:5c:66:92:5b:0f:d2:e4:e8:22:0c:1e:61:3b: 03:73:28:5b:a3:1d:e1:98:00:d0:53:d5:85:ff:b9: 39:a3:3c:48:f8:b7:a1:cf:22:18:c1:5a:55:fa:0f: b9:94:dc:94:dc:b1:1b:a7:44:59:da:fe:a9:fe:8d: d9:53:1b:28:e3:29:11:e6:30:aa:a2:87:9e:0f:16: 4b:25:7b:07:fa:2f:42:b8:62:f3:a0:5f:1c:c8:89: e3:38:aa:ed:9d:af:c4:d2:8d:c7:9d:29:60:91:0a: d2:5d:52:ff:50:0f:a3:d8:31:19:88:15:b8:53:47: fa:31:aa:f7:1a:61:7f:21:a1:c8:a4:50:64:3b:b6: a7:fa:aa:75:79:a2:97:77:3f:a1:2f:80:9f:d3:12: 72:3c:d5:8b:0b:8c:85:4b:de:0e:de:d0:ce:a3:47: 5d:04:8c:ff:ff:97:4b:63:9a:41:a6:c5:2e:21:32: de:24:52:39:04:01:2b:1b:70:d0:9f:4e:fa:7d:95: cb:88:4a:53:1a:a8:fc:99:68:10:f2:aa:7c:ea:15: 8d:89:c4:84:b0:d4:9e:de:4c:fc:57:ed:2b:2a:05: 8a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:2A:E5:E9:E2:70:58:DA:40:07:42:BF:13:15:5A:6C:58:BC:9D:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d0ff1f45-a856-3692-b700-086a0fb2bf07.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.186.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:8e:f0:45:7b:02:d7:7c:d7:10:e0:46:e7:fa:8d:56:ba:2a: 9a:f8:56:e6:a6:f9:5d:10:d7:97:7e:25:1d:71:41:19:57:1f: a6:2b:7e:36:fd:19:98:b5:4b:41:c4:71:af:68:d0:a2:8d:ae: 38:b7:d3:37:e3:0d:f6:98:c7:fb:11:de:35:06:bf:56:60:a2: 31:bb:f5:5d:f6:58:c4:19:ee:cf:a1:45:80:2c:52:27:1d:28: 7f:5d:e7:a9:63:af:b0:95:3f:69:49:a2:eb:4c:b0:8d:d3:e5: 4b:1f:98:a6:7a:63:11:5e:4d:f4:52:d8:9a:a0:e0:fe:18:60: 85:2d:16:d3:9e:a7:9b:29:42:ad:79:74:cf:0a:30:50:65:0e: ac:86:8e:ac:69:ca:d2:f1:77:b2:92:95:53:e9:c5:34:c1:a9: b8:61:9b:27:3e:f2:fb:2d:99:8a:3f:fe:c8:aa:ab:7e:6a:29: ba:79:a8:23:0d:fd:1a:e3:2e:9b:03:04:79:65:73:8b:fc:0e: 8f:22:96:49:aa:d7:eb:56:02:a8:ae:e2:2f:db:71:49:10:2c: 57:0b:01:2d:00:a3:6e:06:b7:1b:3c:c9:a3:80:20:dd:dc:f6: 27:99:25:92:d1:86:a6:32:77:c9:35:d5:3e:41:bc:cc:53:d0: 15:60:58:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdqU6e3nVwTrWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZmNjMDM5YTQtZGRiZS00YzY4LWFlMmItODQ5YWYyMDgyMmRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZWmzgcXUaOEtX8DAsJQ0pEigvgyByCEF3W8 MjlLgVxmklsP0uToIgweYTsDcyhbox3hmADQU9WF/7k5ozxI+LehzyIYwVpV+g+5 lNyU3LEbp0RZ2v6p/o3ZUxso4ykR5jCqooeeDxZLJXsH+i9CuGLzoF8cyInjOKrt na/E0o3HnSlgkQrSXVL/UA+j2DEZiBW4U0f6Mar3GmF/IaHIpFBkO7an+qp1eaKX dz+hL4Cf0xJyPNWLC4yFS94O3tDOo0ddBIz//5dLY5pBpsUuITLeJFI5BAErG3DQ n076fZXLiEpTGqj8mWgQ8qp86hWNicSEsNSe3kz8V+0rKgWKIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQq5enicFjaQAdCvxMVWmxYvJ2DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDBmZjFmNDUtYTg1Ni0z NjkyLWI3MDAtMDg2YTBmYjJiZjA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiO8EV7Atd81xDgRuf6jVa6Kpr4Vuam+V0Q15d+JR1xQRlXH6Yrfjb9 GZi1S0HEca9o0KKNrji30zfjDfaYx/sR3jUGv1ZgojG79V32WMQZ7s+hRYAsUicd KH9d56ljr7CVP2lJoutMsI3T5UsfmKZ6YxFeTfRS2Jqg4P4YYIUtFtOep5spQq15 dM8KMFBlDqyGjqxpytLxd7KSlVPpxTTBqbhhmyc+8vstmYo//siqq35qKbp5qCMN /RrjLpsDBHllc4v8Do8ilkmq1+tWAqiu4i/bcUkQLFcLAS0Ao24Gtxs8yaOAIN3c 9ieZJZLRhqYyd8k11T5BvMxT0BVgWO8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:09 2025 by rpki-client