$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa File: e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa (raw, json) Hash identifier: oR7mH/8C0/ahVAsafoUQI+tf8Nt485FRjowQHYklKqE= Subject key identifier: 64:73:BB:B3:CE:C1:84:E2:09:E9:7C:8C:6D:F6:53:4F:C5:5D:A4:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DF6148ED5AAB5AC2D340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:df:61:48:ed:5a:ab:5a:c2:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=446444fb-ab8b-4588-aad5-98b4a0812bea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5b:da:40:8e:d8:fd:24:a1:b2:b6:3f:63:da: 10:be:e0:30:a2:33:ad:ec:0a:28:98:52:fe:c8:ab: 1d:9e:84:0b:e0:c4:bf:d0:fc:56:15:16:e1:50:85: b3:0b:9f:b8:c6:09:d0:0e:ca:83:11:65:04:ee:1d: 09:6e:a2:dc:af:e6:14:d2:21:b5:2b:29:3a:a1:05: d5:fe:97:db:51:78:9c:70:28:a5:88:72:71:e7:76: b9:89:4e:02:33:fa:94:65:99:c2:db:91:fa:5e:95: a3:e4:1b:eb:b4:8a:e4:80:91:cf:bc:4a:3f:2d:8b: 4f:f6:c8:c3:1d:f5:08:25:50:af:ef:64:72:18:55: 7b:08:4c:cd:18:6f:d1:16:3c:ca:b6:45:49:66:cb: 6b:7f:f3:fb:3d:5e:0a:4d:37:88:70:7f:a8:53:f8: 85:12:bc:59:f7:3a:6b:ab:ae:7f:e2:1b:6d:45:7e: b3:32:eb:ff:d7:29:f2:04:f2:2c:4b:f9:9e:7d:c1: be:bb:2e:89:65:14:a4:ec:89:33:55:99:c8:90:52: a5:06:5a:8a:9b:ac:6e:ec:4a:1a:14:22:34:70:18: 1f:88:df:13:6d:60:3d:91:91:f3:4a:54:ab:b0:93: 19:13:23:af:b2:de:7a:8b:df:3d:cf:f0:91:21:03: 65:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:73:BB:B3:CE:C1:84:E2:09:E9:7C:8C:6D:F6:53:4F:C5:5D:A4:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d9:45:95:d9:60:b4:07:d1:ff:23:28:fe:19:d8:94:02:54:03: 32:9f:3c:a3:67:04:9d:d1:63:79:a2:0c:c8:84:51:1f:2c:cf: 54:7b:39:57:48:27:37:8a:e0:31:fc:b7:70:87:fa:ae:6d:09: da:4a:c8:20:c4:41:00:de:56:22:1b:94:38:74:6f:84:9c:90: 33:5f:c5:cf:a6:b0:49:26:2d:00:05:a0:85:ed:7c:a2:c6:69: fe:47:b8:bc:b2:01:6b:1d:29:aa:2e:a2:2e:2e:6a:79:e1:81: 9c:d0:6e:93:f8:e6:db:82:96:5e:6c:ff:c2:cb:42:22:09:f5: 39:09:80:67:f3:45:48:62:d5:b4:8d:dc:bd:6e:76:df:45:5b: 05:5a:70:e4:69:44:04:11:b9:db:72:11:67:17:b8:f6:e7:95: 84:5d:aa:43:bb:a0:22:5c:13:e7:e1:20:bd:17:f2:d7:9a:34: 8c:af:a0:2d:26:55:d0:3f:34:a1:c0:12:4c:f3:d4:52:85:53: 35:8d:2a:14:df:35:3f:e3:fc:80:45:83:7b:6a:47:49:7c:23: d9:1e:0d:4a:fb:24:29:07:02:94:e5:01:5a:21:4b:7d:b8:6d: 77:cb:68:f1:2e:ba:63:9e:5e:b5:15:ab:9e:ba:c8:09:46:b9: 7d:4e:4a:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd9hSO1aq1rC00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDQ2NDQ0ZmItYWI4Yi00NTg4LWFhZDUtOThiNGEwODEyYmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApVvaQI7Y/SShsrY/Y9oQvuAwojOt7AoomFL+ yKsdnoQL4MS/0PxWFRbhUIWzC5+4xgnQDsqDEWUE7h0JbqLcr+YU0iG1Kyk6oQXV /pfbUXiccCiliHJx53a5iU4CM/qUZZnC25H6XpWj5BvrtIrkgJHPvEo/LYtP9sjD HfUIJVCv72RyGFV7CEzNGG/RFjzKtkVJZstrf/P7PV4KTTeIcH+oU/iFErxZ9zpr q65/4httRX6zMuv/1ynyBPIsS/mefcG+uy6JZRSk7IkzVZnIkFKlBlqKm6xu7Eoa FCI0cBgfiN8TbWA9kZHzSlSrsJMZEyOvst56i989z/CRIQNlMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRzu7POwYTiCel8jG32U0/FXaR7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTk5OGFhOTUtZjMzOC0z YmZjLTg2MjAtMGZhM2E4ZWI2MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANlFldlgtAfR/yMo/hnYlAJUAzKfPKNnBJ3RY3miDMiEUR8sz1R7OVdI JzeK4DH8t3CH+q5tCdpKyCDEQQDeViIblDh0b4SckDNfxc+msEkmLQAFoIXtfKLG af5HuLyyAWsdKaouoi4uannhgZzQbpP45tuCll5s/8LLQiIJ9TkJgGfzRUhi1bSN 3L1udt9FWwVacORpRAQRudtyEWcXuPbnlYRdqkO7oCJcE+fhIL0X8teaNIyvoC0m VdA/NKHAEkzz1FKFUzWNKhTfNT/j/IBFg3tqR0l8I9keDUr7JCkHApTlAVohS324 bXfLaPEuumOeXrUVq566yAlGuX1OSnc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:21:17 2025 by rpki-client