$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa File: d6827c06-437e-3bae-8402-31dd89a05e30.roa (raw, json) Hash identifier: unCGDjnXbuvxmmqRloRJn8JWbWrcikOZXbeiyvaP4EY= Subject key identifier: AD:16:C1:3D:EA:4D:BE:8F:62:BF:09:CA:03:30:BF:7C:60:8E:CE:C0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581466989CB49B3EA3AA440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:46:69:89:cb:49:b3:ea:3a:a4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b9d8a4d0-49ff-4e29-9e24-fc5e9951b4d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:4d:94:08:d6:ff:eb:ed:01:4a:f0:f5:28:15: 05:31:20:70:31:88:22:5a:40:28:b5:85:5b:0a:1c: 1f:9c:14:21:6b:a7:f0:c5:a3:f0:a2:67:81:c6:66: 6c:b4:1a:64:12:94:33:be:f5:33:e0:d2:81:03:90: d2:dd:4f:96:e3:5e:72:38:8f:39:a8:8d:69:a7:7d: 01:e9:16:9f:27:52:da:9b:15:8c:fd:93:62:d5:09: 11:47:56:1a:8a:27:dd:95:f9:a1:63:7c:72:81:e2: 02:91:c7:53:48:78:b5:73:2b:26:7b:c4:80:30:55: bc:a1:25:92:d4:01:7d:b5:4b:10:b9:36:8f:84:b9: 37:5a:6b:27:66:ca:12:7c:73:18:4d:08:12:d9:b2: 3b:7a:93:c4:fc:9a:7b:9f:52:ef:b2:59:37:62:3b: b9:d5:bc:3f:cf:f3:46:08:08:49:e4:52:e6:ea:50: 15:7b:9f:1c:27:c1:43:95:05:8c:54:c7:54:b0:e1: 84:69:94:70:df:09:e2:94:a9:d4:13:87:7a:8a:41: 62:70:db:9d:35:e5:f3:be:ae:06:af:ea:e5:e5:9b: 64:02:1d:0b:79:f0:c4:8c:b1:fd:2a:a5:33:78:80: 74:92:92:e0:76:f6:c0:b7:fa:92:b1:0d:ee:1e:e6: 69:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:16:C1:3D:EA:4D:BE:8F:62:BF:09:CA:03:30:BF:7C:60:8E:CE:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d6827c06-437e-3bae-8402-31dd89a05e30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:a6:1c:00:38:77:f6:5a:48:93:50:47:90:1e:4b:bd:17:68: f1:1c:a4:ab:7e:8f:e4:e9:d0:b1:d5:f0:aa:d8:cd:1e:9a:d6: c2:8b:82:9d:50:58:03:47:1a:70:7e:4e:e5:b5:ae:01:70:83: 7a:77:d3:21:55:4b:74:9b:47:ba:bf:f5:8f:8b:3f:de:9c:2c: 07:19:09:ab:39:59:02:cb:d7:33:12:82:0f:b0:eb:ec:77:91: eb:8b:6b:89:57:40:07:ad:a5:d4:00:f2:93:75:44:23:97:fd: 8e:f0:57:56:dc:3d:5c:aa:c3:8f:66:c1:50:d5:30:9d:e7:60: e2:85:ee:b0:f9:2a:95:50:cd:10:72:67:5f:6e:ec:2c:b2:2f: 5b:4c:08:3d:a7:65:96:31:25:ce:23:0a:39:75:e4:aa:5a:3c: 13:a1:d7:1b:fb:0e:a3:29:30:ec:ce:54:6e:66:78:dc:8d:ea: eb:74:28:f9:3b:bc:41:b0:e4:d7:e3:d8:a1:a0:33:12:36:1d: 9f:8e:0c:1e:3a:3c:e6:68:fd:c8:d0:90:b0:cc:75:ed:fa:87: fb:8c:ab:aa:da:99:65:50:bf:8e:05:17:a7:a0:23:51:bd:9a: de:92:59:45:f9:54:2e:4a:4d:59:e1:83:87:80:a9:6e:99:a4: 12:35:3f:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUZpictJs+o6pEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjlkOGE0ZDAtNDlmZi00ZTI5LTllMjQtZmM1ZTk5NTFiNGQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkk2UCNb/6+0BSvD1KBUFMSBwMYgiWkAotYVb ChwfnBQha6fwxaPwomeBxmZstBpkEpQzvvUz4NKBA5DS3U+W415yOI85qI1pp30B 6RafJ1LamxWM/ZNi1QkRR1YaiifdlfmhY3xygeICkcdTSHi1cysme8SAMFW8oSWS 1AF9tUsQuTaPhLk3WmsnZsoSfHMYTQgS2bI7epPE/Jp7n1Lvslk3Yju51bw/z/NG CAhJ5FLm6lAVe58cJ8FDlQWMVMdUsOGEaZRw3wnilKnUE4d6ikFicNudNeXzvq4G r+rl5ZtkAh0LefDEjLH9KqUzeIB0kpLgdvbAt/qSsQ3uHuZpOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0WwT3qTb6PYr8JygMwv3xgjs7AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY4MjdjMDYtNDM3ZS0z YmFlLTg0MDItMzFkZDg5YTA1ZTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKmmHAA4d/ZaSJNQR5AeS70XaPEcpKt+j+Tp0LHV8KrYzR6a1sKLgp1Q WANHGnB+TuW1rgFwg3p30yFVS3SbR7q/9Y+LP96cLAcZCas5WQLL1zMSgg+w6+x3 keuLa4lXQAetpdQA8pN1RCOX/Y7wV1bcPVyqw49mwVDVMJ3nYOKF7rD5KpVQzRBy Z19u7CyyL1tMCD2nZZYxJc4jCjl15KpaPBOh1xv7DqMpMOzOVG5meNyN6ut0KPk7 vEGw5Nfj2KGgMxI2HZ+ODB46POZo/cjQkLDMde36h/uMq6ramWVQv44FF6egI1G9 mt6SWUX5VC5KTVnhg4eAqW6ZpBI1P2A= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:23 2025 by rpki-client