$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa File: ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa (raw, json) Hash identifier: DF7PJsuXkgmV3pnEqX5SipKliKNE4khqL9ikuMxJcCY= Subject key identifier: 63:0E:4D:AE:F1:2B:0E:26:39:36:54:18:86:5C:5B:DF:3E:BE:C2:0A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581E1B626AE97C48343C780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:e1:b6:26:ae:97:c4:83:43:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e692279c-dd4e-4f37-a6b2-8b2d0e4dd324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:26:05:c9:7d:e2:17:08:3b:30:4e:63:45: dc:d0:47:e7:59:46:73:9f:ab:96:50:a7:b5:f6:c4: 53:94:33:33:da:f2:5f:86:dc:32:a4:81:12:3e:b7: a1:81:59:ef:46:60:a7:29:db:c6:6e:ef:5d:11:fe: a4:41:4b:a9:69:d3:21:d8:28:27:2c:61:d9:bf:cf: 9d:9c:02:a5:6c:24:d0:2a:eb:63:01:a5:e2:cc:d0: 6c:d5:8d:9a:d5:0a:6b:86:cb:ba:26:39:53:59:5b: 37:9c:94:97:a9:c9:df:f7:98:24:c8:bb:98:28:8b: 1c:ad:31:a0:21:99:f8:83:51:57:0a:d5:26:12:2c: d9:8c:0e:9d:da:b7:af:7d:16:84:8a:66:1a:e9:1b: d3:d4:3b:aa:73:f9:24:ac:4f:4e:8e:d8:18:a0:84: 7d:0e:88:1b:7b:5c:99:cc:f9:f9:92:7f:37:a0:cb: 44:36:7f:bd:60:35:b6:0c:c8:fb:aa:fc:38:7a:b4: 3f:13:b6:60:dd:af:26:b7:03:00:34:5b:fb:96:4a: ff:89:b1:9f:ad:da:14:75:4a:e1:cc:b8:74:ac:1e: d1:9e:9c:ac:23:d0:0c:38:99:9d:1f:cf:b6:23:2c: 4b:bf:de:1d:2c:97:be:97:ee:cb:19:12:c6:00:10: 93:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:0E:4D:AE:F1:2B:0E:26:39:36:54:18:86:5C:5B:DF:3E:BE:C2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ee2fc42f-2737-34a6-ad0d-88a899d28ef7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:5f:69:e5:e7:6e:f8:b2:49:e0:5a:d5:73:c9:28:e0:27:a0: dd:3e:cb:7b:59:56:2c:04:30:82:d2:90:70:fa:a4:b1:3e:48: 57:8d:ab:a9:c0:1b:4d:de:2b:e3:f8:00:0b:2c:64:19:a1:45: d7:65:a3:98:1e:fd:6c:0f:00:23:18:22:8a:48:1e:7f:18:e2: 39:91:98:2d:46:e9:50:9d:5a:72:cf:26:6d:6c:fd:72:6c:f3: d6:4f:db:03:a8:c8:73:16:ab:71:bc:b2:d3:cd:4e:76:b4:0c: 42:d5:78:36:a5:d7:f4:c1:ef:b4:85:87:ca:92:47:81:ed:26: 8a:02:ef:c2:f6:2c:c4:07:37:ea:68:97:58:ce:76:03:99:f8: b9:3f:b6:00:8c:be:65:d2:3b:18:b1:e3:20:1f:19:c1:30:79: bd:33:df:48:ee:b4:a8:14:44:19:e0:3e:11:c9:ef:39:77:40: d7:30:36:9c:ba:c0:e4:c1:c9:e6:25:f8:21:15:88:73:54:ab: d7:10:cf:e0:0c:bd:98:6f:b9:ea:ab:bf:0e:f2:23:dc:fa:73: 8d:ad:2c:ec:bb:d3:b4:02:ae:08:3f:c9:84:6e:9a:48:d2:98: 69:0e:0b:55:9d:43:06:a3:3b:74:52:29:4d:ec:33:05:d5:76: 71:59:a5:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgeG2Jq6XxINDx4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTY5MjI3OWMtZGQ0ZS00ZjM3LWE2YjItOGIyZDBlNGRkMzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf0mBcl94hcIOzBOY0Xc0EfnWUZzn6uWUKe1 9sRTlDMz2vJfhtwypIESPrehgVnvRmCnKdvGbu9dEf6kQUupadMh2CgnLGHZv8+d nAKlbCTQKutjAaXizNBs1Y2a1Qprhsu6JjlTWVs3nJSXqcnf95gkyLuYKIscrTGg IZn4g1FXCtUmEizZjA6d2revfRaEimYa6RvT1Duqc/kkrE9OjtgYoIR9Dogbe1yZ zPn5kn83oMtENn+9YDW2DMj7qvw4erQ/E7Zg3a8mtwMANFv7lkr/ibGfrdoUdUrh zLh0rB7RnpysI9AMOJmdH8+2IyxLv94dLJe+l+7LGRLGABCT/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGMOTa7xKw4mOTZUGIZcW98+vsIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWUyZmM0MmYtMjczNy0z NGE2LWFkMGQtODhhODk5ZDI4ZWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlfaeXnbviySeBa1XPJKOAnoN0+y3tZViwEMILSkHD6pLE+SFeNq6nA G03eK+P4AAssZBmhRddlo5ge/WwPACMYIopIHn8Y4jmRmC1G6VCdWnLPJm1s/XJs 89ZP2wOoyHMWq3G8stPNTna0DELVeDal1/TB77SFh8qSR4HtJooC78L2LMQHN+po l1jOdgOZ+Lk/tgCMvmXSOxix4yAfGcEweb0z30jutKgURBngPhHJ7zl3QNcwNpy6 wOTByeYl+CEViHNUq9cQz+AMvZhvueqrvw7yI9z6c42tLOy707QCrgg/yYRumkjS mGkOC1WdQwajO3RSKU3sMwXVdnFZpa4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:48 2025 by rpki-client