$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ab8198-89a6-3716-ae34-c60f94305356.roa File: f6ab8198-89a6-3716-ae34-c60f94305356.roa (raw, json) Hash identifier: NLpRTGdEetHYY4Lb/tea66Pz8FYwt2p6fXLiwv6CXV4= Subject key identifier: A9:AD:02:1B:4B:37:D9:AC:6D:AC:2C:7D:23:70:C8:23:FE:87:59:C5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581DBAFDF6C9DEF1DCF2C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ab8198-89a6-3716-ae34-c60f94305356.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.242.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:db:af:df:6c:9d:ef:1d:cf:2c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=22a644e3-1eb6-4fe0-852f-f3c6ff553c44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e8:eb:0e:1d:04:cb:4d:86:07:85:c0:0c:f5: 05:3e:4d:39:0b:f0:e3:06:b3:41:85:54:4e:65:6a: 10:40:0b:28:5e:a8:42:7f:ca:90:f0:12:d5:94:b4: 10:79:3d:bd:0e:f0:01:cf:f3:b3:2d:73:88:f9:80: 34:11:a2:5b:6c:77:0c:c0:7f:7a:5f:6f:4e:1b:71: 22:16:50:00:fb:2d:ae:76:34:8f:d8:06:5a:b3:0d: b4:49:46:b6:74:20:92:02:6b:d4:b5:4d:ee:71:7b: 34:7b:d8:8e:66:36:3f:76:43:a1:e0:12:4d:e4:9d: e1:03:8a:be:5e:b7:30:bd:a3:d8:56:fa:f4:b5:83: dc:e8:cd:df:28:df:77:b0:74:d5:88:10:b0:d7:54: 0b:16:1f:4d:92:35:21:89:e0:70:c2:69:28:df:92: ae:ac:47:8c:59:62:72:c7:69:e5:41:9e:31:10:53: d1:b4:31:ec:27:ef:6c:60:f2:0f:59:10:67:dc:07: cc:99:83:78:0b:b9:0b:af:b9:91:af:e8:c2:51:ed: c8:39:a9:74:67:4b:6f:be:51:f4:df:bf:1a:ae:82: 01:fd:6e:88:a7:fc:fa:11:26:70:38:fc:37:4c:69: c3:f8:0e:64:91:92:3e:af:09:cb:70:20:d2:22:08: 36:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:AD:02:1B:4B:37:D9:AC:6D:AC:2C:7D:23:70:C8:23:FE:87:59:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ab8198-89a6-3716-ae34-c60f94305356.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:41:eb:a2:69:74:e8:8a:79:5a:b8:dd:e0:4d:3f:ed:4e:6f: 55:8d:a7:82:fb:83:e8:eb:0e:31:95:92:37:cb:0f:00:33:85: 8d:e5:ec:66:16:c6:ad:83:d9:ab:25:a5:7c:29:6b:03:46:01: 95:18:8a:bb:77:c0:f6:74:4d:0e:00:34:4f:45:65:ed:93:f5: 7c:46:e7:42:15:4d:42:1c:13:df:8e:22:df:09:52:9b:ea:41: 35:40:30:00:97:dd:33:6e:4c:4a:55:ab:64:6e:10:4c:2e:2e: 6e:cd:49:11:49:9c:5c:ef:c8:69:dc:c1:f0:31:9e:02:71:f9: 62:d9:a2:84:7f:1f:44:a9:f7:da:e8:0b:a2:1b:25:d5:4f:35: 7c:db:da:09:30:cb:61:6d:2c:e5:95:30:88:e8:25:c8:aa:71: 1f:ae:77:4a:e6:4e:a9:07:6b:c2:fd:f8:a6:78:89:23:55:4c: 04:1e:a2:b4:af:5e:e9:3f:2e:d3:6a:6c:ff:ee:b2:72:8c:59: b1:a6:2b:6c:46:a4:b9:a2:ce:a4:65:40:d4:dc:dd:38:ca:0c: 73:ff:b8:e8:37:95:4b:8e:3a:17:a5:9e:e8:e0:61:14:b0:0c: 1b:e1:02:21:fc:72:b3:32:d3:d9:bc:2c:da:a8:c6:bf:b9:e1: ca:43:c6:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgduv32yd7x3PLEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjJhNjQ0ZTMtMWViNi00ZmUwLTg1MmYtZjNjNmZmNTUzYzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+jrDh0Ey02GB4XADPUFPk05C/DjBrNBhVRO ZWoQQAsoXqhCf8qQ8BLVlLQQeT29DvABz/OzLXOI+YA0EaJbbHcMwH96X29OG3Ei FlAA+y2udjSP2AZasw20SUa2dCCSAmvUtU3ucXs0e9iOZjY/dkOh4BJN5J3hA4q+ XrcwvaPYVvr0tYPc6M3fKN93sHTViBCw11QLFh9NkjUhieBwwmko35KurEeMWWJy x2nlQZ4xEFPRtDHsJ+9sYPIPWRBn3AfMmYN4C7kLr7mRr+jCUe3IOal0Z0tvvlH0 378aroIB/W6Ip/z6ESZwOPw3TGnD+A5kkZI+rwnLcCDSIgg2VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKmtAhtLN9msbawsfSNwyCP+h1nFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjZhYjgxOTgtODlhNi0z NzE2LWFlMzQtYzYwZjk0MzA1MzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9B66JpdOiKeVq43eBNP+1Ob1WNp4L7g+jrDjGVkjfLDwAzhY3l7GYW xq2D2aslpXwpawNGAZUYirt3wPZ0TQ4ANE9FZe2T9XxG50IVTUIcE9+OIt8JUpvq QTVAMACX3TNuTEpVq2RuEEwuLm7NSRFJnFzvyGncwfAxngJx+WLZooR/H0Sp99ro C6IbJdVPNXzb2gkwy2FtLOWVMIjoJciqcR+ud0rmTqkHa8L9+KZ4iSNVTAQeorSv Xuk/LtNqbP/usnKMWbGmK2xGpLmizqRlQNTc3TjKDHP/uOg3lUuOOhelnujgYRSw DBvhAiH8crMy09m8LNqoxr+54cpDxhc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:27:51 2025 by rpki-client