$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa File: da586d84-433b-3f79-a0e6-17aa74076e21.roa (raw, json) Hash identifier: 9w3NXDlYe29CLoAZrKoPXBphyVMUb+mG0o/tEZJmqe0= Subject key identifier: B7:5E:28:91:32:F4:16:0A:84:12:AB:7E:FB:AB:4B:5E:31:B3:F7:44 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581439B3BCDD3C6C402F290 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:43:9b:3b:cd:d3:c6:c4:02:f2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=76e12081-c105-45bf-812a-fd1c207153d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8a:e9:f6:da:b7:93:dd:72:bc:38:58:82:7b: 0f:61:eb:d7:f7:9b:b2:be:67:bc:6d:fb:4e:97:3e: 7c:38:aa:2a:97:12:62:4b:8f:20:bf:94:94:35:9d: b3:f0:1c:5d:28:5c:f6:2c:c3:2f:f4:eb:67:44:f6: e6:7b:67:5c:98:59:6a:52:88:32:97:c4:39:a8:fc: 7b:b1:7a:55:4c:af:41:ae:c9:2c:bd:78:22:f3:a9: b3:10:d4:04:ba:d8:6a:cf:2e:67:ff:24:69:0b:c5: 7a:ba:dc:b7:c5:f3:b3:a2:83:ee:8a:1d:53:9c:d1: af:f9:2c:2f:05:66:de:32:7c:3c:c7:9b:6a:16:f9: 1c:83:67:bf:91:a4:01:60:33:d4:69:91:db:13:d1: e7:32:55:d3:e4:3c:1a:61:ea:38:72:b7:64:ab:1d: e3:f3:c8:6a:da:96:83:18:3a:80:27:18:80:aa:f7: 7a:48:e7:38:d4:9b:e5:23:4b:9a:9d:38:d8:1e:de: 16:62:9c:fd:56:d1:4e:41:9f:aa:75:56:a5:85:3d: 59:dd:92:cd:01:0f:95:e0:bd:63:63:1b:96:45:0b: 4a:d3:6d:34:13:27:5a:6d:86:00:7f:2b:6a:73:30: 3f:80:fc:02:03:49:9e:fd:9d:9e:83:29:ef:6e:5a: 8e:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:5E:28:91:32:F4:16:0A:84:12:AB:7E:FB:AB:4B:5E:31:B3:F7:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d4:fe:1d:4e:26:87:b2:4f:74:1c:e7:fb:42:02:68:8b:c0: 6d:5b:50:c4:59:7c:19:4b:68:3d:cd:cd:8f:6f:c7:fe:9d:4f: ac:54:4f:90:28:e9:9b:c7:bb:03:8a:37:ae:f7:54:3f:1e:fc: 95:a2:a3:48:bc:cc:73:68:04:a9:8b:d3:2d:77:59:35:3c:fe: 96:97:77:1b:46:00:0b:22:fc:5f:9d:ad:5e:1f:cb:9f:d2:9e: e7:8f:58:22:3c:1f:05:82:ba:76:e7:7e:61:d9:86:92:a9:94: c8:ca:ad:5d:3e:ae:2f:f0:31:2f:47:1f:78:ca:ee:05:03:75: 12:8d:b1:c9:94:8f:0d:4e:59:18:ef:2f:2f:20:51:72:1d:6f: fc:84:f8:92:8f:ad:cb:17:a4:90:df:40:93:fa:ed:ba:fb:22: 8b:4b:1c:65:74:20:69:9e:95:0a:42:73:86:9b:ae:4d:33:10: cd:8b:b5:df:dd:4b:9e:24:0d:f7:a7:9a:bf:f9:4d:aa:05:73: 90:02:94:c8:53:ec:e4:5c:f9:d5:e7:68:02:c8:98:47:7c:a2: 11:d8:b6:8a:f8:34:29:f7:38:57:1c:fa:cf:21:a4:44:19:a6: f9:3d:7b:bb:2e:45:74:45:ea:97:13:60:a0:c3:ab:47:2a:03: 61:17:d0:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUObO83TxsQC8pAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NzZlMTIwODEtYzEwNS00NWJmLTgxMmEtZmQxYzIwNzE1M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIrp9tq3k91yvDhYgnsPYevX95uyvme8bftO lz58OKoqlxJiS48gv5SUNZ2z8BxdKFz2LMMv9OtnRPbme2dcmFlqUogyl8Q5qPx7 sXpVTK9BrsksvXgi86mzENQEuthqzy5n/yRpC8V6uty3xfOzooPuih1TnNGv+Swv BWbeMnw8x5tqFvkcg2e/kaQBYDPUaZHbE9HnMlXT5DwaYeo4crdkqx3j88hq2paD GDqAJxiAqvd6SOc41JvlI0uanTjYHt4WYpz9VtFOQZ+qdValhT1Z3ZLNAQ+V4L1j YxuWRQtK0200EydabYYAfytqczA/gPwCA0me/Z2egynvblqOoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLdeKJEy9BYKhBKrfvurS14xs/dEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGE1ODZkODQtNDMzYi0z Zjc5LWEwZTYtMTdhYTc0MDc2ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/U/h1OJoeyT3Qc5/tCAmiLwG1bUMRZfBlLaD3NzY9vx/6dT6xUT5Ao 6ZvHuwOKN673VD8e/JWio0i8zHNoBKmL0y13WTU8/paXdxtGAAsi/F+drV4fy5/S nuePWCI8HwWCunbnfmHZhpKplMjKrV0+ri/wMS9HH3jK7gUDdRKNscmUjw1OWRjv Ly8gUXIdb/yE+JKPrcsXpJDfQJP67br7IotLHGV0IGmelQpCc4abrk0zEM2Ltd/d S54kDfenmr/5TaoFc5AClMhT7ORc+dXnaALImEd8ohHYtor4NCn3OFcc+s8hpEQZ pvk9e7suRXRF6pcTYKDDq0cqA2EX0Cw= -----END CERTIFICATE-----Generated at Fri Mar 14 09:44:18 2025 by rpki-client