$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa File: fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa (raw, json) Hash identifier: oOzzM4vFwRZmKZZhflml3ON6VYV08KjOlbEEo9JoP0I= Subject key identifier: 43:FF:5D:BA:3F:D6:C0:A1:C6:28:02:7F:AF:E5:1E:74:C9:37:FC:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5814ED23AE5E79D355E7A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 172.243.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:4e:d2:3a:e5:e7:9d:35:5e:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b3c0e1e0-8fa5-4140-8083-5730149cbd1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:ab:9d:a0:ca:20:a3:b6:06:74:00:4e:de:1d: 9c:89:60:3d:ff:63:b4:e0:cf:65:2a:14:50:31:20: f4:b7:b7:8e:7b:86:94:c3:0d:c0:e8:e8:46:a9:c9: 1c:b1:ad:17:a1:e6:8d:75:a3:15:18:42:17:ed:ea: b5:04:5a:de:cb:ff:53:4d:d3:2f:18:50:03:31:37: 8a:f2:0c:b2:20:34:93:c1:8f:01:67:97:29:56:df: 27:fa:f7:25:ac:ef:0c:12:aa:0d:c6:23:7a:c8:fa: e5:08:a2:25:c7:81:47:f8:ae:ac:06:98:c4:70:5c: 2c:ae:a2:e7:63:fa:24:ce:8f:b0:71:ed:24:06:1b: af:f2:4d:63:62:b7:84:04:13:7a:16:c5:ee:bf:32: ff:df:60:db:74:e1:1d:a5:37:61:6f:c5:75:4e:c0: 8a:8e:31:8e:05:ab:97:16:8f:9d:e0:da:d3:28:71: ab:e9:5a:49:ab:60:a6:79:71:41:df:39:a9:52:ef: 1f:36:42:60:b1:13:72:ed:90:4c:7a:75:7b:4d:ec: df:17:cc:48:fa:31:06:41:05:fb:48:79:78:dc:b7: cc:71:75:71:42:ee:ff:10:59:8f:34:a9:89:b3:a5: bb:85:61:46:c6:7f:42:91:96:7d:bb:cf:fe:f6:b0: cb:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FF:5D:BA:3F:D6:C0:A1:C6:28:02:7F:AF:E5:1E:74:C9:37:FC:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fb8ba67f-f839-3862-bf3c-a1d79fe9b6ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:84:62:71:03:af:89:45:df:b6:3d:c6:37:7c:9b:1c:c7:d9: 7d:38:1b:e3:0f:18:99:f3:ba:7e:d0:a4:ab:66:5e:a1:80:f3: e4:df:ed:16:cb:e6:4b:85:41:67:7d:20:eb:9b:d2:8a:6f:57: bb:31:68:e1:f6:79:7a:e9:3d:d1:93:35:12:2b:6d:0d:65:54: 42:c3:37:6f:1f:bb:77:32:bd:21:e5:51:ec:5e:4f:38:aa:73: ae:87:1e:96:f2:30:63:cb:26:72:6d:79:21:27:e1:54:11:35: 5e:b9:25:f3:ae:0d:87:4f:46:fc:28:73:aa:67:1f:6d:38:00: 11:1b:77:3b:a3:f8:45:5c:16:dd:75:69:72:e2:e1:f8:9c:7d: 0c:73:49:8d:a1:b4:53:d7:10:e2:34:dc:eb:dc:29:7d:8e:7f: a8:01:0c:e0:25:02:9d:de:85:03:d3:91:f5:d8:9d:f8:c5:42: b5:9b:4a:29:82:44:19:15:fc:97:58:07:7f:3e:23:01:0f:44: 52:45:b2:3a:3f:9f:7b:f0:bd:33:9b:5a:1c:a3:5a:d2:76:a7: 12:c7:ee:fe:14:74:de:fd:03:c6:6e:95:aa:6c:3d:e9:a3:61: b0:d4:62:46:4d:31:c9:77:71:dc:c2:f7:0d:8b:ab:8d:85:53: 1d:2d:c0:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgU7SOuXnnTVeegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjNjMGUxZTAtOGZhNS00MTQwLTgwODMtNTczMDE0OWNiZDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArqudoMogo7YGdABO3h2ciWA9/2O04M9lKhRQ MSD0t7eOe4aUww3A6OhGqckcsa0XoeaNdaMVGEIX7eq1BFrey/9TTdMvGFADMTeK 8gyyIDSTwY8BZ5cpVt8n+vclrO8MEqoNxiN6yPrlCKIlx4FH+K6sBpjEcFwsrqLn Y/okzo+wce0kBhuv8k1jYreEBBN6FsXuvzL/32DbdOEdpTdhb8V1TsCKjjGOBauX Fo+d4NrTKHGr6VpJq2CmeXFB3zmpUu8fNkJgsRNy7ZBMenV7TezfF8xI+jEGQQX7 SHl43LfMcXVxQu7/EFmPNKmJs6W7hWFGxn9CkZZ9u8/+9rDL6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEP/Xbo/1sChxigCf6/lHnTJN/yTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmI4YmE2N2YtZjgzOS0z ODYyLWJmM2MtYTFkNzlmZTliNmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2EYnEDr4lF37Y9xjd8mxzH2X04G+MPGJnzun7QpKtmXqGA8+Tf7RbL 5kuFQWd9IOub0opvV7sxaOH2eXrpPdGTNRIrbQ1lVELDN28fu3cyvSHlUexeTziq c66HHpbyMGPLJnJteSEn4VQRNV65JfOuDYdPRvwoc6pnH204ABEbdzuj+EVcFt11 aXLi4ficfQxzSY2htFPXEOI03OvcKX2Of6gBDOAlAp3ehQPTkfXYnfjFQrWbSimC RBkV/JdYB38+IwEPRFJFsjo/n3vwvTObWhyjWtJ2pxLH7v4UdN79A8ZulapsPemj YbDUYkZNMcl3cdzC9w2Lq42FUx0twAo= -----END CERTIFICATE-----Generated at Fri Apr 11 23:50:23 2025 by rpki-client