$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f040e6f1-f269-3170-9bbb-75d3a3029c31.roa File: f040e6f1-f269-3170-9bbb-75d3a3029c31.roa (raw, json) Hash identifier: PFZ3gnc0Zmz1/psfjmko6msZ1386Rxxraj8GZ8nLp1Y= Subject key identifier: CE:00:92:A6:D7:3A:16:91:3D:83:08:AB:25:51:D8:A6:43:84:BD:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814ACE6043A9ABCEFDE6C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f040e6f1-f269-3170-9bbb-75d3a3029c31.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4a:ce:60:43:a9:ab:ce:fd:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9dce2815-c2a3-4234-a71e-a9588d11a998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:46:15:57:85:b7:df:b9:01:3d:13:85:50:48: 6f:12:40:a1:c7:ce:bc:d4:9b:89:69:c2:a7:ac:7a: b4:30:77:ea:34:75:fa:d2:65:94:9f:e8:6e:4c:1d: 87:cf:80:12:77:a1:1a:58:4d:4a:76:22:2f:6c:5b: 6b:44:5f:84:2f:21:f9:63:ca:c8:bb:e8:55:72:34: 56:ca:05:73:0f:bf:4d:42:64:44:e4:28:d2:3e:db: c6:43:42:fe:d1:c3:e7:3c:81:7d:53:9f:5a:6e:76: 7a:14:46:e1:31:89:37:f0:14:c8:c9:0a:ef:2a:df: f7:54:f6:14:8b:f0:42:4a:ab:d4:18:7f:a3:40:f7: 53:dc:0a:d6:15:43:c6:87:83:41:96:e3:aa:09:80: f8:e5:2d:92:dd:be:5e:85:91:9d:8e:75:58:d8:c4: 88:18:dd:2b:34:2e:93:00:5d:2e:65:94:32:83:41: 77:44:88:60:05:1d:14:cd:6f:67:70:27:f9:ca:a4: 22:d2:60:a9:dd:ff:d2:d6:ae:c7:2b:68:74:69:35: dc:8d:0d:55:e5:bd:7f:d1:67:36:3c:d8:99:bc:0c: 74:14:f4:ad:60:62:31:7d:ac:7d:7f:23:d0:f0:17: c0:00:4b:fa:c3:3f:47:8a:f7:8c:b4:73:3e:db:32: 47:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:00:92:A6:D7:3A:16:91:3D:83:08:AB:25:51:D8:A6:43:84:BD:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f040e6f1-f269-3170-9bbb-75d3a3029c31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:eb:29:4e:e2:89:0c:a0:37:da:f3:84:49:dd:c5:81:a4:21: ab:57:56:f4:c2:49:f2:a4:28:69:f9:b8:0c:fb:f9:fe:9d:76: e1:01:1d:f8:37:39:cc:af:e4:24:e4:84:3d:af:71:a7:63:51: ea:f7:00:46:6b:ee:7c:50:db:08:ce:13:d0:75:79:02:1e:3e: f1:5d:f0:0c:93:83:24:7c:00:be:8d:bc:5e:1a:c4:1e:70:65: e4:47:9d:2b:b7:18:80:e4:6b:e5:ca:c6:ed:f3:79:e4:a5:10: 9e:ce:ef:ab:47:f6:5a:7e:4d:4f:95:57:f7:e2:eb:cf:29:6d: da:5d:dd:c3:d7:50:36:41:9c:be:c0:63:ce:95:7e:82:ed:71: af:6a:5e:b6:c0:60:6d:5d:f0:17:52:df:2a:47:17:8f:e2:a3: 1a:d2:93:84:c1:f8:68:eb:22:c0:d9:ce:5e:f8:87:6d:3e:57: 0b:09:ac:c9:7e:f1:56:3d:27:3c:8c:67:5e:72:cc:7d:2c:60: 2d:f0:95:4e:83:e6:46:9f:1b:66:64:57:71:74:e4:64:d0:6a: a3:78:cb:43:08:2a:37:b0:b4:d4:96:a6:08:ed:73:d9:6a:5f: 46:47:5c:ab:ff:bc:20:d7:b9:61:8d:6d:cd:c0:dc:d1:bf:5f: 40:f8:05:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUrOYEOpq8795sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWRjZTI4MTUtYzJhMy00MjM0LWE3MWUtYTk1ODhkMTFhOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykYVV4W337kBPROFUEhvEkChx8681JuJacKn rHq0MHfqNHX60mWUn+huTB2Hz4ASd6EaWE1KdiIvbFtrRF+ELyH5Y8rIu+hVcjRW ygVzD79NQmRE5CjSPtvGQ0L+0cPnPIF9U59abnZ6FEbhMYk38BTIyQrvKt/3VPYU i/BCSqvUGH+jQPdT3ArWFUPGh4NBluOqCYD45S2S3b5ehZGdjnVY2MSIGN0rNC6T AF0uZZQyg0F3RIhgBR0UzW9ncCf5yqQi0mCp3f/S1q7HK2h0aTXcjQ1V5b1/0Wc2 PNiZvAx0FPStYGIxfax9fyPQ8BfAAEv6wz9HiveMtHM+2zJHwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM4AkqbXOhaRPYMIqyVR2KZDhL1lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjA0MGU2ZjEtZjI2OS0z MTcwLTliYmItNzVkM2EzMDI5YzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjrKU7iiQygN9rzhEndxYGkIatXVvTCSfKkKGn5uAz7+f6dduEBHfg3 Ocyv5CTkhD2vcadjUer3AEZr7nxQ2wjOE9B1eQIePvFd8AyTgyR8AL6NvF4axB5w ZeRHnSu3GIDka+XKxu3zeeSlEJ7O76tH9lp+TU+VV/fi688pbdpd3cPXUDZBnL7A Y86VfoLtca9qXrbAYG1d8BdS3ypHF4/ioxrSk4TB+GjrIsDZzl74h20+VwsJrMl+ 8VY9JzyMZ15yzH0sYC3wlU6D5kafG2ZkV3F05GTQaqN4y0MIKjewtNSWpgjtc9lq X0ZHXKv/vCDXuWGNbc3A3NG/X0D4BWg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:06 2025 by rpki-client