$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa File: 03869d3c-77f4-3705-aed3-af0b2f180872.roa (raw, json) Hash identifier: K/yDzJLcjPsrra2+f1FH027fvgrBth+/m5yXto1pJIE= Subject key identifier: BB:84:DE:F1:BB:66:4E:56:B2:18:BD:A5:1B:39:67:D3:3F:16:A7:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819F32C74A7D4ADFF4B400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9f:32:c7:4a:7d:4a:df:f4:b4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=27c13dbf-02ee-4901-8e24-18c54046888d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ec:52:ec:8b:a7:40:10:2d:c2:a7:ec:c2:23: bd:e2:f7:3b:32:81:de:0e:13:13:d2:ca:86:e6:d9: 6f:5c:10:84:34:09:d1:cb:10:f2:d4:4d:44:d0:d1: dd:f9:64:18:60:04:ba:b4:1c:be:6d:eb:a4:bb:63: 43:ce:47:d6:0a:8a:8c:a8:d0:74:b6:fb:ac:08:3b: 27:37:20:1a:4e:eb:6e:65:92:49:ec:a9:52:a5:14: 03:ac:d9:06:d1:2a:3a:58:07:ad:c7:e5:ae:10:a3: e2:54:c0:88:cf:23:69:46:44:92:76:9f:ab:b4:c6: d1:4f:1a:f0:bb:00:68:70:6c:3e:b9:d4:a5:f0:fd: 8c:bd:43:70:5f:57:d7:c1:be:81:f6:59:92:59:a1: 9e:57:0a:87:7a:7f:83:b9:91:00:88:4b:e8:53:2f: 05:61:82:b8:af:e2:32:5e:cb:1e:da:12:4f:23:3e: e3:51:1e:78:18:6b:26:ed:11:3f:c1:d1:cb:63:cd: e3:95:99:17:17:70:47:77:59:bf:cb:b1:16:d6:d7: 53:16:dd:2d:94:98:64:2f:5b:bb:ac:2d:22:50:74: d2:10:ff:98:3a:58:bb:7f:a0:52:73:89:c9:52:d8: d1:5d:46:21:8c:10:58:e3:65:5b:6b:78:a9:51:99: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:84:DE:F1:BB:66:4E:56:B2:18:BD:A5:1B:39:67:D3:3F:16:A7:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/03869d3c-77f4-3705-aed3-af0b2f180872.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:ec:80:2c:6d:36:af:b0:fd:a9:c5:e9:ae:c2:17:b3:75:d3: 9d:42:b7:ba:af:bb:d6:e4:ea:82:0a:00:8b:84:1e:f2:f3:c0: c1:2f:56:3c:f8:49:72:cb:f4:5a:54:ff:08:84:84:4c:7a:f6: 3d:5f:bd:e3:27:e3:87:e4:1e:2a:69:54:46:06:ba:45:ae:b6: 45:da:cb:e5:b8:86:9c:be:e2:96:71:f0:05:d5:c9:13:82:ea: fb:09:80:d7:64:ff:4f:44:86:aa:bc:1d:d8:2c:1d:eb:09:46: ff:51:59:c1:50:84:9f:05:40:8f:03:d2:d2:f4:b7:a0:92:f1: a7:22:79:d3:e1:96:c1:9b:3b:8e:7e:75:c0:c9:55:a0:4a:68: 2d:7c:ff:7e:32:38:4c:a6:31:72:e2:19:a9:5e:51:98:7f:bf: 8c:4e:03:89:9d:21:c4:e7:59:69:ad:ad:8a:9d:4b:bc:86:66: fc:f4:2d:59:09:7c:5f:7e:c3:ff:13:8f:e2:34:25:7a:45:82: d8:4d:bc:86:50:7c:7e:da:03:c8:d0:a5:fa:ba:16:f8:cf:b9: ea:d0:84:d2:8c:6a:6b:09:c5:72:33:ae:ae:f5:ab:ab:72:0b: dc:3a:51:64:91:9c:96:e3:18:d5:0f:1d:0f:d5:58:b5:0d:4d: a9:b2:fc:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ8yx0p9St/0tAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjdjMTNkYmYtMDJlZS00OTAxLThlMjQtMThjNTQwNDY4ODhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhexS7IunQBAtwqfswiO94vc7MoHeDhMT0sqG 5tlvXBCENAnRyxDy1E1E0NHd+WQYYAS6tBy+beuku2NDzkfWCoqMqNB0tvusCDsn NyAaTutuZZJJ7KlSpRQDrNkG0So6WAetx+WuEKPiVMCIzyNpRkSSdp+rtMbRTxrw uwBocGw+udSl8P2MvUNwX1fXwb6B9lmSWaGeVwqHen+DuZEAiEvoUy8FYYK4r+Iy Xsse2hJPIz7jUR54GGsm7RE/wdHLY83jlZkXF3BHd1m/y7EW1tdTFt0tlJhkL1u7 rC0iUHTSEP+YOli7f6BSc4nJUtjRXUYhjBBY42Vba3ipUZkZ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuE3vG7Zk5Wshi9pRs5Z9M/FqdKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDM4NjlkM2MtNzdmNC0z NzA1LWFlZDMtYWYwYjJmMTgwODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK15MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK/sgCxtNq+w/anF6a7CF7N1051Ct7qvu9bk6oIKAIuEHvLzwMEvVjz4 SXLL9FpU/wiEhEx69j1fveMn44fkHippVEYGukWutkXay+W4hpy+4pZx8AXVyROC 6vsJgNdk/09Ehqq8HdgsHesJRv9RWcFQhJ8FQI8D0tL0t6CS8aciedPhlsGbO45+ dcDJVaBKaC18/34yOEymMXLiGaleUZh/v4xOA4mdIcTnWWmtrYqdS7yGZvz0LVkJ fF9+w/8Tj+I0JXpFgthNvIZQfH7aA8jQpfq6FvjPuerQhNKMamsJxXIzrq71q6ty C9w6UWSRnJbjGNUPHQ/VWLUNTamy/G4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:34 2025 by rpki-client