$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa File: f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa (raw, json) Hash identifier: sc44Ez0WKZWyG0h9C1JeP+mnT30PqY5iOq8VA9TVfb8= Subject key identifier: 9D:6B:70:CD:27:DA:84:33:EA:AB:07:C5:64:35:98:D5:94:1C:94:6F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DEC391FA5C381B17C900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:de:c3:91:fa:5c:38:1b:17:c9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=9e14c0ed-eaf2-4b3e-a68d-19df55ad0bdd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ce:77:35:e9:a6:5b:7f:50:cb:1f:96:00:2e: 7a:f6:50:c3:c8:2e:4d:1e:12:f6:2d:0a:05:77:67: b7:f2:27:96:8a:e3:e1:55:db:6b:88:10:69:06:28: b5:fa:4f:b4:19:2e:7b:d7:1a:d9:b5:b6:80:0b:f0: 31:6b:3a:6f:71:24:53:d3:25:0c:1c:64:cf:a6:f9: 80:1a:cd:c6:f2:c6:e6:9e:f6:a3:63:fa:01:49:19: eb:42:22:65:6d:9c:1b:e7:b5:87:ba:c1:7f:da:4a: 2a:e2:14:b1:6b:07:e6:c2:5a:e7:20:2d:57:28:2b: c8:8a:73:25:c4:bb:32:b4:36:8b:c2:b3:55:93:f0: 65:f3:a8:6e:7b:7b:10:59:5c:7f:16:5a:fd:32:bb: 43:7a:41:ef:af:50:cb:3a:cf:df:51:b4:33:ed:ff: d7:69:7e:8c:36:82:51:07:e2:01:55:bd:97:67:b8: 90:70:2d:fd:78:a4:67:58:23:d1:33:02:3e:63:af: aa:92:a4:5d:91:5c:0b:28:fa:bd:52:fc:5e:dd:13: 0f:6f:36:b1:40:b4:65:ca:85:fd:8b:a6:e9:75:d7: 96:a0:88:83:79:79:43:7d:35:67:00:77:32:37:69: 0f:88:8e:c5:3f:f9:23:85:ed:67:02:20:f8:97:66: e2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6B:70:CD:27:DA:84:33:EA:AB:07:C5:64:35:98:D5:94:1C:94:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f39a9c5f-15f1-32a6-8a5f-5a2b444592c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:01:80:d0:6b:d3:d0:dc:73:bc:09:1f:7a:73:59:62:44:6b: 64:aa:5c:e1:54:68:61:e1:02:95:39:63:bc:75:e4:44:de:ae: 89:33:9b:ad:99:1c:75:a2:29:ac:3f:9e:6c:ef:4b:12:29:11: f0:b5:2a:f7:00:31:98:72:1c:a4:05:fc:cf:70:4a:53:20:b6: 07:1f:7e:7e:73:10:8e:17:47:d0:46:8a:56:24:f6:c1:11:56: 6e:d3:67:42:d3:fd:c9:8a:d2:4b:b6:ee:31:bd:1e:63:12:11: 5a:c0:f7:f8:24:67:7c:f9:e2:9e:f5:63:2b:79:7f:7f:d8:a4: ab:58:83:d2:fb:4b:34:59:68:44:bb:80:65:10:05:48:cd:8a: 69:1b:94:8d:a9:9b:e8:a8:2f:72:ad:15:91:84:63:a3:81:af: 85:68:79:b5:29:75:9f:9b:60:9e:90:1b:cb:93:af:b3:30:5b: 2d:64:64:d7:8f:c4:2e:4b:71:37:7d:07:9b:be:5b:85:d7:18: bf:69:03:9a:4d:92:18:7b:49:d4:d5:38:4b:28:27:02:1c:b7: c6:40:2d:a7:a1:44:7c:74:5b:94:28:e7:9e:81:a3:43:24:b6: f2:c7:49:cf:40:b2:7a:5b:f9:38:3f:4a:5e:77:3e:2d:3c:32: 49:25:0c:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgd7DkfpcOBsXyQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OWUxNGMwZWQtZWFmMi00YjNlLWE2OGQtMTlkZjU1YWQwYmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArM53NemmW39Qyx+WAC569lDDyC5NHhL2LQoF d2e38ieWiuPhVdtriBBpBii1+k+0GS571xrZtbaAC/AxazpvcSRT0yUMHGTPpvmA Gs3G8sbmnvajY/oBSRnrQiJlbZwb57WHusF/2koq4hSxawfmwlrnIC1XKCvIinMl xLsytDaLwrNVk/Bl86hue3sQWVx/Flr9MrtDekHvr1DLOs/fUbQz7f/XaX6MNoJR B+IBVb2XZ7iQcC39eKRnWCPRMwI+Y6+qkqRdkVwLKPq9Uvxe3RMPbzaxQLRlyoX9 i6bpddeWoIiDeXlDfTVnAHcyN2kPiI7FP/kjhe1nAiD4l2biuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1rcM0n2oQz6qsHxWQ1mNWUHJRvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjM5YTljNWYtMTVmMS0z MmE2LThhNWYtNWEyYjQ0NDU5MmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPORMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8BgNBr09Dcc7wJH3pzWWJEa2SqXOFUaGHhApU5Y7x15ETerokzm62Z HHWiKaw/nmzvSxIpEfC1KvcAMZhyHKQF/M9wSlMgtgcffn5zEI4XR9BGilYk9sER Vm7TZ0LT/cmK0ku27jG9HmMSEVrA9/gkZ3z54p71Yyt5f3/YpKtYg9L7SzRZaES7 gGUQBUjNimkblI2pm+ioL3KtFZGEY6OBr4VoebUpdZ+bYJ6QG8uTr7MwWy1kZNeP xC5LcTd9B5u+W4XXGL9pA5pNkhh7SdTVOEsoJwIct8ZALaehRHx0W5Qo556Bo0Mk tvLHSc9Asnpb+Tg/Sl53Pi08MkklDPQ= -----END CERTIFICATE-----Generated at Fri Mar 14 10:28:23 2025 by rpki-client