$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa File: e155ec42-d837-3995-866a-d373aee2e510.roa (raw, json) Hash identifier: dNFdXXbP190U9bJxFY3egEZt1WuVKhLo03dLCXQ/2Zk= Subject key identifier: 4A:50:38:F5:C0:03:87:9C:0B:51:99:72:F7:61:DF:9E:66:DF:EA:0A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58148D2FE73BEA33F90FFC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:48:d2:fe:73:be:a3:3f:90:ff:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2eb5292e-0db5-4315-af34-2f176b8a1c2c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:ea:dc:25:fa:2a:56:ab:22:45:e4:fb:2d:ef: 79:6e:0d:35:7a:38:f5:31:c6:4d:7b:71:2a:46:a9: 88:8a:cf:f6:dc:4f:54:ce:72:d2:f6:61:61:e0:20: 3e:ac:14:65:19:39:43:b7:85:ab:49:8a:5a:51:4d: 86:4e:cf:47:40:ae:e8:51:95:3e:87:78:ca:bf:c4: b1:4f:99:8a:b1:ab:c1:b0:0f:0d:b5:ab:f5:3a:6f: 28:40:6b:13:1a:5f:30:e8:51:e4:14:35:14:09:31: 02:e4:de:06:a5:dd:2b:d8:18:0e:86:56:2b:85:b3: 1e:f9:a2:97:1c:15:58:8d:49:d1:95:f9:ce:08:7f: 85:55:1c:3c:16:d0:e7:aa:4b:0d:25:97:4e:d8:6e: 91:1d:6c:72:c9:81:d0:88:4d:7e:93:6c:39:bb:4d: 9d:cc:ec:0c:cc:c6:df:77:26:26:f2:d4:53:bc:c3: 64:a7:f1:63:2e:f3:c2:06:fc:21:2a:2b:00:db:ec: 34:9c:be:f7:ef:95:f3:36:9a:9f:07:be:63:f9:aa: 2f:ab:d5:76:75:83:e6:44:83:de:a3:cd:36:f9:2f: 0a:85:33:63:27:65:f1:40:8d:cf:cf:e2:eb:cc:91: 9b:33:99:f3:72:80:f7:ee:6b:b1:65:b7:53:c5:33: b6:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:50:38:F5:C0:03:87:9C:0B:51:99:72:F7:61:DF:9E:66:DF:EA:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e155ec42-d837-3995-866a-d373aee2e510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:1f:e1:6e:e7:a1:3c:84:95:bf:71:ac:62:43:42:18:a4:bd: 9e:26:f9:a8:a7:2f:44:8d:c9:90:6b:ab:45:5d:e2:3f:97:a4: 65:36:d3:be:cf:7d:68:90:97:b2:4b:38:ea:44:d9:1e:72:40: cd:c8:5c:d8:b1:6c:08:ce:99:ac:3e:82:06:cc:c4:f3:a0:79: e0:91:b7:e4:a2:1e:65:ed:f4:4d:e2:bf:15:e4:52:17:7a:62: 43:99:a7:fa:9e:93:b7:82:f9:40:1e:7c:2e:02:bd:7a:89:f3: d3:fa:a0:a6:ff:89:76:a7:aa:61:e3:b4:52:ce:d1:bb:08:ea: 3a:1b:ad:e6:e2:1b:b6:a2:88:f2:7c:17:f9:ee:82:c5:b8:71: 87:b7:2f:52:f6:e8:3b:7b:22:d3:76:01:99:99:1a:be:7b:c8: 83:95:43:a3:fd:77:15:48:23:09:73:99:41:a7:10:68:d0:58: fb:24:fd:48:38:5a:ad:9a:5e:fd:52:a1:e5:5d:8d:e2:5a:c7: 61:a1:63:fb:fe:80:6d:a9:34:5b:1e:aa:e9:4f:56:e4:35:f4: e8:48:49:54:12:b1:d1:c6:31:da:c4:45:cc:46:68:f0:d3:80: c7:31:09:0d:b2:bb:bc:1a:53:3d:54:86:4d:b9:d1:04:70:f6: 40:1b:00:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUjS/nO+oz+Q/8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmViNTI5MmUtMGRiNS00MzE1LWFmMzQtMmYxNzZiOGExYzJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+rcJfoqVqsiReT7Le95bg01ejj1McZNe3Eq RqmIis/23E9UznLS9mFh4CA+rBRlGTlDt4WrSYpaUU2GTs9HQK7oUZU+h3jKv8Sx T5mKsavBsA8Ntav1Om8oQGsTGl8w6FHkFDUUCTEC5N4Gpd0r2BgOhlYrhbMe+aKX HBVYjUnRlfnOCH+FVRw8FtDnqksNJZdO2G6RHWxyyYHQiE1+k2w5u02dzOwMzMbf dyYm8tRTvMNkp/FjLvPCBvwhKisA2+w0nL7375XzNpqfB75j+aovq9V2dYPmRIPe o802+S8KhTNjJ2XxQI3Pz+LrzJGbM5nzcoD37muxZbdTxTO2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEpQOPXAA4ecC1GZcvdh355m3+oKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTE1NWVjNDItZDgzNy0z OTk1LTg2NmEtZDM3M2FlZTJlNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4f4W7noTyElb9xrGJDQhikvZ4m+ainL0SNyZBrq0Vd4j+XpGU2077P fWiQl7JLOOpE2R5yQM3IXNixbAjOmaw+ggbMxPOgeeCRt+SiHmXt9E3ivxXkUhd6 YkOZp/qek7eC+UAefC4CvXqJ89P6oKb/iXanqmHjtFLO0bsI6jobrebiG7aiiPJ8 F/nugsW4cYe3L1L26Dt7ItN2AZmZGr57yIOVQ6P9dxVIIwlzmUGnEGjQWPsk/Ug4 Wq2aXv1SoeVdjeJax2GhY/v+gG2pNFsequlPVuQ19OhISVQSsdHGMdrERcxGaPDT gMcxCQ2yu7waUz1Uhk250QRw9kAbAPM= -----END CERTIFICATE-----Generated at Fri Apr 11 23:11:19 2025 by rpki-client