$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa File: 01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa (raw, json) Hash identifier: +/MxUhsfFirntkeWxZxstsorYoKjGCLhFcWofz/2YIs= Subject key identifier: A3:09:3A:A9:35:D5:FB:DA:3E:2D:13:C4:02:F7:AC:B0:56:46:87:ED Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5811346DED046A9FFE69DE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:13:46:de:d0:46:a9:ff:e6:9d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=207e8168-17a7-4b00-bf83-0cecc4850472 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:81:71:b9:10:66:d3:9e:7e:84:56:02:65:45: 87:b4:e6:9f:04:ce:3a:44:85:95:c4:1d:cf:f4:a5: 32:93:f7:67:74:cb:cf:cf:e6:f5:53:f6:49:16:7b: 3a:c6:e0:6e:be:d6:e6:ae:3c:d3:da:b6:c9:e3:b1: 06:dd:4e:81:02:46:e2:16:2d:94:ff:79:4b:50:25: 46:5e:0e:07:fc:06:84:ed:f9:ae:41:67:28:e1:3b: 5a:89:32:9f:99:34:fc:a9:11:93:61:69:76:ae:47: 3c:ac:8a:79:55:71:bf:1c:fb:a5:a6:d9:2f:39:05: fc:a2:a9:aa:83:b0:44:75:0a:5e:f5:5e:8f:c2:1d: a9:15:45:80:7a:e6:3d:90:37:39:5d:ff:7a:4d:af: ce:a8:2d:db:05:92:85:b6:37:88:35:7d:3b:dd:6e: 24:1d:e6:13:e2:5c:2e:7d:7b:1b:4b:66:5c:e5:b0: 09:0a:74:4c:ed:aa:e2:98:74:fb:e8:3f:7c:07:7d: 6f:a6:1d:04:f5:06:5e:91:fe:0a:42:04:00:aa:23: 8d:f5:e9:42:8d:e1:c3:da:1a:6e:1f:3d:d0:53:74: 90:15:f8:54:44:77:31:56:d6:c3:7b:31:45:d8:58: 2b:f4:64:f4:11:47:69:b7:c5:69:b7:45:0e:9e:05: c9:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:09:3A:A9:35:D5:FB:DA:3E:2D:13:C4:02:F7:AC:B0:56:46:87:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01e17b2c-98c7-37b0-acc2-846e6503a6e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:63:7a:09:0e:3f:0d:0f:b1:60:ca:2d:8c:93:8f:61:2d:56: c8:f5:ab:df:74:17:f0:11:39:42:55:83:c8:43:2d:82:d5:12: 78:56:30:90:0f:81:e8:07:4f:bb:46:ac:7b:d5:a4:65:3c:e3: 97:90:10:84:10:12:67:26:be:20:61:f6:46:11:16:de:0a:76: 74:ec:1c:92:30:84:a9:fe:a1:62:cc:2c:31:ce:59:ea:db:dc: 7e:1f:1a:36:70:54:0c:b8:cf:82:82:c7:17:96:4e:b1:45:8f: c5:c4:e4:06:de:c1:d2:8b:72:82:7b:04:11:be:70:23:db:82: 37:45:e1:9c:3b:af:e5:67:a1:59:8b:3d:bb:29:bb:8c:e4:18: 96:2a:59:c2:11:d9:70:0c:13:57:c2:84:1f:1b:67:c5:3f:7f: 68:69:ff:ea:9a:be:0c:bf:1a:c2:42:56:7d:b5:4d:cd:3e:45: ac:43:eb:e6:0f:f7:9a:79:42:60:23:5b:de:50:8e:74:3b:49: f4:01:f3:0d:d4:13:60:7e:f2:dc:b6:a9:21:f9:fc:0f:76:6b: 24:cb:0c:d5:0e:de:2a:d9:b1:c0:38:3f:44:fb:fc:b0:03:0d: 40:1e:e4:ef:22:e0:8a:25:88:0d:63:82:a1:8c:9f:9c:fc:a4: b0:fc:d7:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRNG3tBGqf/mneAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjA3ZTgxNjgtMTdhNy00YjAwLWJmODMtMGNlY2M0ODUwNDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIFxuRBm055+hFYCZUWHtOafBM46RIWVxB3P 9KUyk/dndMvPz+b1U/ZJFns6xuBuvtbmrjzT2rbJ47EG3U6BAkbiFi2U/3lLUCVG Xg4H/AaE7fmuQWco4TtaiTKfmTT8qRGTYWl2rkc8rIp5VXG/HPulptkvOQX8oqmq g7BEdQpe9V6Pwh2pFUWAeuY9kDc5Xf96Ta/OqC3bBZKFtjeINX073W4kHeYT4lwu fXsbS2Zc5bAJCnRM7arimHT76D98B31vph0E9QZekf4KQgQAqiON9elCjeHD2hpu Hz3QU3SQFfhURHcxVtbDezFF2Fgr9GT0EUdpt8Vpt0UOngXJqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMJOqk11fvaPi0TxAL3rLBWRoftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDFlMTdiMmMtOThjNy0z N2IwLWFjYzItODQ2ZTY1MDNhNmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK38MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFjegkOPw0PsWDKLYyTj2EtVsj1q990F/AROUJVg8hDLYLVEnhWMJAP gegHT7tGrHvVpGU845eQEIQQEmcmviBh9kYRFt4KdnTsHJIwhKn+oWLMLDHOWerb 3H4fGjZwVAy4z4KCxxeWTrFFj8XE5AbewdKLcoJ7BBG+cCPbgjdF4Zw7r+VnoVmL Pbspu4zkGJYqWcIR2XAME1fChB8bZ8U/f2hp/+qavgy/GsJCVn21Tc0+RaxD6+YP 95p5QmAjW95QjnQ7SfQB8w3UE2B+8ty2qSH5/A92ayTLDNUO3irZscA4P0T7/LAD DUAe5O8i4IoliA1jgqGMn5z8pLD816o= -----END CERTIFICATE-----Generated at Fri Apr 11 23:47:17 2025 by rpki-client