$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/021e3829-5d23-3794-8971-b5e6fb58448e.roa File: 021e3829-5d23-3794-8971-b5e6fb58448e.roa (raw, json) Hash identifier: 2TJV7CCrNrMPb3MhT6BCyWhY0eKzGgwf6sU75dJkWWM= Subject key identifier: 89:00:9B:7B:B9:70:E5:F2:2A:FA:9B:A8:BE:ED:2C:58:1B:F0:07:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810E092A9B7C09AA07C120 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/021e3829-5d23-3794-8971-b5e6fb58448e.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.76.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0e:09:2a:9b:7c:09:aa:07:c1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=44923b9b-deee-4759-a5a4-e8ae0dbab868 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:12:00:44:3e:50:ef:a5:a9:37:c9:5b:eb:75: 57:7e:b3:7c:09:75:13:6d:b9:24:48:1b:fc:5e:c0: d2:69:33:44:d2:1a:f8:48:33:df:14:68:62:1a:3b: 31:ab:6a:6c:31:a1:ea:33:35:61:29:65:3b:29:13: 5c:b6:df:0a:a7:7e:e3:92:74:2f:0c:88:c0:01:6c: 1a:53:0a:f5:ca:e3:96:89:94:ca:11:65:ae:a9:17: f5:3a:9e:8b:45:8f:80:77:da:4d:5b:7a:df:a4:ba: 66:8d:a2:ed:7e:53:47:a8:48:35:a5:2c:45:3b:5f: 74:6f:5d:84:7f:d4:56:37:5f:15:70:23:ed:77:8b: 5a:73:e7:49:5d:6a:93:e1:50:14:ba:17:d5:61:35: a0:2c:73:c9:c0:d8:9b:dd:c8:e8:86:d5:78:0c:68: 91:61:ef:46:07:04:f4:b4:8f:b6:ae:ea:74:32:4b: c2:e0:8a:17:87:16:fe:c5:65:82:ec:fe:bf:fe:b4: e8:fe:8f:7b:90:1b:3b:51:0d:bb:00:61:a0:a0:1c: 75:d7:26:c1:73:d7:6b:21:31:74:6d:a5:a3:75:dc: 6b:30:c3:51:ae:f8:f8:b2:d2:70:ab:87:9b:45:47: 87:ed:ae:eb:21:c0:44:aa:6d:00:e2:93:ba:af:f1: 2c:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:00:9B:7B:B9:70:E5:F2:2A:FA:9B:A8:BE:ED:2C:58:1B:F0:07:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/021e3829-5d23-3794-8971-b5e6fb58448e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.76.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:fb:54:3b:21:22:88:ff:08:82:60:b0:ae:8d:5a:a4:a4:77: 84:a0:7e:a0:e3:ca:cf:4e:d2:89:95:dc:12:bb:38:0c:6a:f5: eb:47:b9:77:48:ba:a2:23:b3:34:91:61:80:98:16:93:fe:2e: 13:0b:c5:e9:4f:77:2c:9e:01:54:cb:41:e1:35:b1:49:16:8a: f8:60:b7:69:b7:b2:da:3b:cc:2f:ba:9c:09:05:34:93:4d:7e: 48:57:06:0d:85:98:18:f9:6c:45:23:8e:fa:18:f6:ad:1f:37: e2:07:ff:d2:36:b0:ee:a6:2c:87:70:48:ee:6c:92:40:f6:dc: 5a:d6:03:de:eb:fa:6e:b4:16:01:89:0d:3a:05:54:4c:73:71: 0c:7c:d1:8a:64:70:7b:7e:87:5e:ce:3b:91:95:59:bd:a1:14: 54:c8:81:c7:4c:d9:79:a2:17:8d:1c:98:1f:24:0a:59:ab:2f: ea:ae:a2:e7:e1:c5:04:21:5b:54:8f:c2:3a:43:f8:4b:61:c6: 8d:6e:ce:c2:d3:65:4f:34:64:f0:ec:41:36:a9:2d:ba:5f:fe: c9:49:70:bb:68:e2:7f:6e:ad:77:91:bb:e1:c7:ee:2c:73:50: 96:b6:a7:33:b7:ce:63:f7:93:e7:2c:5b:12:7d:11:08:0f:77: a0:f3:2f:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ4JKpt8CaoHwSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDQ5MjNiOWItZGVlZS00NzU5LWE1YTQtZThhZTBkYmFiODY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzRIARD5Q76WpN8lb63VXfrN8CXUTbbkkSBv8 XsDSaTNE0hr4SDPfFGhiGjsxq2psMaHqMzVhKWU7KRNctt8Kp37jknQvDIjAAWwa Uwr1yuOWiZTKEWWuqRf1Op6LRY+Ad9pNW3rfpLpmjaLtflNHqEg1pSxFO190b12E f9RWN18VcCPtd4tac+dJXWqT4VAUuhfVYTWgLHPJwNib3cjohtV4DGiRYe9GBwT0 tI+2rup0MkvC4IoXhxb+xWWC7P6//rTo/o97kBs7UQ27AGGgoBx11ybBc9drITF0 baWjddxrMMNRrvj4stJwq4ebRUeH7a7rIcBEqm0A4pO6r/EsDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkAm3u5cOXyKvqbqL7tLFgb8Ac8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDIxZTM4MjktNWQyMy0z Nzk0LTg5NzEtYjVlNmZiNTg0NDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAP7VDshIoj/CIJgsK6NWqSkd4SgfqDjys9O0omV3BK7OAxq9etHuXdI uqIjszSRYYCYFpP+LhMLxelPdyyeAVTLQeE1sUkWivhgt2m3sto7zC+6nAkFNJNN fkhXBg2FmBj5bEUjjvoY9q0fN+IH/9I2sO6mLIdwSO5skkD23FrWA97r+m60FgGJ DToFVExzcQx80YpkcHt+h17OO5GVWb2hFFTIgcdM2XmiF40cmB8kClmrL+quoufh xQQhW1SPwjpD+Ethxo1uzsLTZU80ZPDsQTapLbpf/slJcLto4n9urXeRu+HH7ixz UJa2pzO3zmP3k+csWxJ9EQgPd6DzL+Q= -----END CERTIFICATE-----Generated at Fri Apr 11 23:17:28 2025 by rpki-client