$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa File: f99da527-b425-3438-91d1-aa255a3de285.roa (raw, json) Hash identifier: YZEDZlV0FSiaSIb5Q6cUum1f9N5Y/70KgPXScBvJz0Y= Subject key identifier: 92:23:AB:C5:E9:21:8F:03:89:64:DB:F2:EB:84:DD:87:A2:52:05:1A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814D633C9B24972D379900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4d:63:3c:9b:24:97:2d:37:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=573cbf7c-fcb4-4814-a600-efcbb4cbd162 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:87:88:05:8d:4f:c6:00:05:98:86:13:96:ee: 90:7e:be:09:bf:93:93:06:48:98:77:b2:e6:ef:51: 80:d5:07:e0:60:1a:0f:71:fd:59:0a:43:50:e9:2d: 84:97:02:27:4d:a2:a5:de:68:fc:d3:02:d3:4f:5d: cb:08:12:15:a4:1b:22:22:d5:fb:ef:15:05:97:4d: c8:74:64:e4:50:e5:36:de:92:d3:61:53:da:3c:64: d0:f3:d9:ef:56:65:62:ce:89:17:c7:9b:9a:17:27: 20:a4:27:4b:bb:bb:9f:a0:52:52:b9:f4:ae:70:33: fb:4f:94:ec:2f:71:cc:f4:74:7d:c8:4f:3e:2f:90: 7f:07:f8:c5:5d:a4:3a:f1:36:06:93:89:e3:be:8d: f7:b3:4a:ec:83:77:37:bd:e5:41:b0:e6:08:0e:dd: 6b:cd:6e:e4:23:15:3e:ae:9b:a9:ce:0f:ee:d5:cd: 05:65:1a:42:1a:d7:90:b4:cd:68:af:80:27:0f:dc: b5:9a:95:ab:9c:1d:78:d3:4a:03:2c:77:d9:da:e3: ec:47:51:46:7a:8b:a7:03:6b:8f:3a:86:43:1e:b6: 37:e9:25:38:dd:d2:36:79:a4:e9:77:de:5d:23:f9: 1f:81:e8:64:5f:e9:ff:01:ac:fb:14:36:dc:96:93: 3f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:23:AB:C5:E9:21:8F:03:89:64:DB:F2:EB:84:DD:87:A2:52:05:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f99da527-b425-3438-91d1-aa255a3de285.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:d0:5e:e3:de:1e:ce:3b:41:6a:e7:f2:42:bd:4e:04:85:07: 54:dd:53:93:da:a3:d6:ea:00:c8:e5:2f:9a:a7:b6:ab:4f:0c: e4:4e:e8:a4:32:3e:94:c7:be:d1:d2:dc:61:0a:29:27:41:5a: c1:a6:ee:b1:be:33:ec:27:7b:31:9c:86:f0:21:43:df:91:57: 4e:54:b1:bc:55:f5:ef:c9:3d:80:e8:24:71:9f:ea:9c:f7:b0: a2:3e:81:3d:56:53:b8:b1:a2:37:d3:a4:fa:c7:fd:bb:12:79: 3a:8e:7f:21:a6:d7:61:fc:43:cb:29:37:fb:4f:7f:a3:6f:f4: 8f:c0:5a:38:4d:4b:33:18:9b:67:6f:d8:a6:41:f5:39:d2:93: 1c:93:68:0a:72:8f:43:31:cc:de:1e:e6:ef:a5:de:d5:34:ec: 8b:9a:0c:d6:3a:26:7b:3f:43:86:66:06:92:36:fa:a4:5c:d9: f3:20:ef:33:69:09:7b:75:49:b2:84:8d:e6:e7:bd:03:66:09: bb:34:91:51:2c:5e:b7:73:59:68:0d:ff:96:85:2d:9e:40:bd: 71:51:bf:cd:64:53:69:07:7f:14:59:63:b5:d2:a1:85:c9:ee: 10:1f:da:e6:d8:7c:d1:1e:0c:bc:6e:5b:2f:f8:88:20:42:c9: 95:9a:73:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgU1jPJskly03mQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTczY2JmN2MtZmNiNC00ODE0LWE2MDAtZWZjYmI0Y2JkMTYyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIeIBY1PxgAFmIYTlu6Qfr4Jv5OTBkiYd7Lm 71GA1QfgYBoPcf1ZCkNQ6S2ElwInTaKl3mj80wLTT13LCBIVpBsiItX77xUFl03I dGTkUOU23pLTYVPaPGTQ89nvVmVizokXx5uaFycgpCdLu7ufoFJSufSucDP7T5Ts L3HM9HR9yE8+L5B/B/jFXaQ68TYGk4njvo33s0rsg3c3veVBsOYIDt1rzW7kIxU+ rpupzg/u1c0FZRpCGteQtM1or4AnD9y1mpWrnB1400oDLHfZ2uPsR1FGeounA2uP OoZDHrY36SU43dI2eaTpd95dI/kfgehkX+n/Aaz7FDbclpM/XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJIjq8XpIY8DiWTb8uuE3YeiUgUaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjk5ZGE1MjctYjQyNS0z NDM4LTkxZDEtYWEyNTVhM2RlMjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHQXuPeHs47QWrn8kK9TgSFB1TdU5Pao9bqAMjlL5qntqtPDORO6KQy PpTHvtHS3GEKKSdBWsGm7rG+M+wnezGchvAhQ9+RV05UsbxV9e/JPYDoJHGf6pz3 sKI+gT1WU7ixojfTpPrH/bsSeTqOfyGm12H8Q8spN/tPf6Nv9I/AWjhNSzMYm2dv 2KZB9TnSkxyTaApyj0MxzN4e5u+l3tU07IuaDNY6Jns/Q4ZmBpI2+qRc2fMg7zNp CXt1SbKEjebnvQNmCbs0kVEsXrdzWWgN/5aFLZ5AvXFRv81kU2kHfxRZY7XSoYXJ 7hAf2ubYfNEeDLxuWy/4iCBCyZWac4M= -----END CERTIFICATE-----Generated at Fri Apr 11 23:59:16 2025 by rpki-client