$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2687ad1-73bf-3010-be3c-6e689f9c5ca3.roa File: d2687ad1-73bf-3010-be3c-6e689f9c5ca3.roa (raw, json) Hash identifier: Bwi42SE5doJyd9NhDFPxJa0vlRyv5C6cRB5ki6oOuig= Subject key identifier: 5D:F1:F3:6C:68:6A:5E:94:58:39:D8:03:01:00:61:B8:E5:B5:0B:EB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DC75B7779E1A2F143FC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2687ad1-73bf-3010-be3c-6e689f9c5ca3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:dc:75:b7:77:9e:1a:2f:14:3f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=621b2dba-3c85-401d-803e-f5aac0a3e07a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d0:8b:6d:ea:82:6a:c4:78:f7:e4:0b:13:24: 44:aa:11:ea:b4:e9:80:6a:3e:4d:8b:86:41:7b:43: 4d:8d:35:a3:86:6c:99:33:69:1b:1f:cd:78:76:a4: a0:ab:98:9a:79:e3:43:b8:c4:c1:55:f1:a1:34:41: d1:a7:64:51:99:88:25:71:49:0b:23:f7:7c:1a:73: 97:7d:eb:22:51:b7:28:d5:0a:b7:bb:a4:97:1c:e4: 98:a0:7a:b6:ea:f9:2f:49:f6:f1:4e:ea:09:e1:8a: 58:1b:97:13:0c:ed:a8:91:f9:ee:0e:5c:03:b6:00: 0a:1c:0c:cb:da:99:0d:c0:cf:f0:4a:e6:3d:ec:3a: 21:c5:42:fc:75:23:d5:c9:68:0c:9d:87:64:c4:dc: 61:07:b0:b3:8d:9e:29:fb:43:f2:30:3f:c5:81:51: 0e:5e:32:86:1d:d8:89:8e:cb:10:ac:11:fb:1f:59: e3:83:9a:2f:cc:42:01:16:47:3f:f4:b0:70:c7:6a: a3:09:61:e3:e2:82:75:af:c5:a8:ce:6d:60:72:e9: 61:1f:74:1e:dd:ee:4a:e2:c8:ac:33:f2:a6:f6:41: 14:66:7c:52:90:5b:4c:bc:26:8a:bb:17:92:ab:c8: 2c:30:36:a5:38:36:e8:8e:df:50:ec:ee:a5:04:7a: e3:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F1:F3:6C:68:6A:5E:94:58:39:D8:03:01:00:61:B8:E5:B5:0B:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2687ad1-73bf-3010-be3c-6e689f9c5ca3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:bf:60:ec:c8:44:84:d7:db:79:41:85:08:bd:e0:ff:e6:b3: f8:65:be:9d:d9:1c:15:56:3e:2b:12:68:07:4f:c8:be:6f:15: 1a:1d:aa:d6:1d:80:c5:be:b8:87:56:34:ff:82:1b:5d:a3:3a: fb:8c:16:47:02:fc:80:b8:ef:6b:af:61:52:ce:66:6a:da:64: db:1e:00:48:4b:2a:9c:85:3e:8d:56:fd:d2:29:08:c0:59:06: 4d:83:7b:f8:84:73:25:cd:d3:f3:27:f7:a4:8c:6a:aa:16:bd: 15:f8:04:53:8f:11:d4:29:a6:dd:d7:6b:9f:8e:c8:32:d1:9c: cf:8a:7e:26:c9:06:2d:fa:63:05:d1:3f:e2:a5:d0:28:55:b0: b1:1a:09:3f:cd:ed:ad:bb:ab:0e:0f:3a:cf:34:a1:04:f9:13: 3f:be:3a:19:b2:2d:64:02:f7:5c:a3:64:8c:81:33:30:76:a9: f7:45:2a:08:ea:a5:ae:a6:b4:3c:c1:b3:05:6f:3f:67:ba:b5: d0:1f:1a:b7:f3:47:54:02:7b:9b:a2:07:5d:1a:32:37:8d:06: 2c:4b:40:bb:84:e6:42:2e:e6:cf:fb:54:03:ad:97:74:57:56: d8:fe:13:e1:4b:ce:d9:00:8b:5a:a0:31:71:bd:9a:e9:8d:82: 17:39:7f:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgdx1t3eeGi8UP8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjIxYjJkYmEtM2M4NS00MDFkLTgwM2UtZjVhYWMwYTNlMDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNCLbeqCasR49+QLEyREqhHqtOmAaj5Ni4ZB e0NNjTWjhmyZM2kbH814dqSgq5iaeeNDuMTBVfGhNEHRp2RRmYglcUkLI/d8GnOX fesiUbco1Qq3u6SXHOSYoHq26vkvSfbxTuoJ4YpYG5cTDO2okfnuDlwDtgAKHAzL 2pkNwM/wSuY97DohxUL8dSPVyWgMnYdkxNxhB7CzjZ4p+0PyMD/FgVEOXjKGHdiJ jssQrBH7H1njg5ovzEIBFkc/9LBwx2qjCWHj4oJ1r8Wozm1gculhH3Qe3e5K4sis M/Km9kEUZnxSkFtMvCaKuxeSq8gsMDalODbojt9Q7O6lBHrjeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3x82xoal6UWDnYAwEAYbjltQvrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDI2ODdhZDEtNzNiZi0z MDEwLWJlM2MtNmU2ODlmOWM1Y2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKa/YOzIRITX23lBhQi94P/ms/hlvp3ZHBVWPisSaAdPyL5vFRodqtYd gMW+uIdWNP+CG12jOvuMFkcC/IC472uvYVLOZmraZNseAEhLKpyFPo1W/dIpCMBZ Bk2De/iEcyXN0/Mn96SMaqoWvRX4BFOPEdQppt3Xa5+OyDLRnM+KfibJBi36YwXR P+Kl0ChVsLEaCT/N7a27qw4POs80oQT5Ez++OhmyLWQC91yjZIyBMzB2qfdFKgjq pa6mtDzBswVvP2e6tdAfGrfzR1QCe5uiB10aMjeNBixLQLuE5kIu5s/7VAOtl3RX Vtj+E+FLztkAi1qgMXG9mumNghc5f40= -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:05 2025 by rpki-client