$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa File: 0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa (raw, json) Hash identifier: WP5aJfYb+mNyBlA5OE7gjH/cnUEBnXBF1wx8an7xMWM= Subject key identifier: 10:47:F8:98:4B:94:55:00:4D:20:4C:85:71:FA:B0:68:06:C2:20:7C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810F62817D4FBA43BFF800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0f:62:81:7d:4f:ba:43:bf:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=db8941fa-4605-4e66-8af1-5844ac304093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d5:f7:af:eb:6c:c3:2d:dd:33:43:40:08:3e: 63:31:fb:2f:ba:b8:77:f4:d4:70:38:94:8d:44:25: 29:66:c5:d1:c6:2a:8e:0c:90:7e:6b:88:f4:4f:eb: 1f:8b:ee:b2:af:a7:61:63:cc:62:ff:75:3a:0a:f8: 60:c0:46:00:73:dc:d8:3e:99:ad:55:c8:60:2e:d6: 29:4d:e3:d1:88:9e:83:27:4b:42:de:ce:df:84:f1: 22:d2:15:c2:a8:ea:f6:3b:47:5e:06:67:6e:e4:5d: b6:48:ad:13:a4:eb:ca:82:a7:6e:82:09:de:a6:cb: d6:23:d9:09:18:d4:51:97:90:2c:89:a0:92:64:3a: be:1f:7a:49:f1:f6:a7:1d:d6:13:3e:5b:6e:a7:d3: a7:3d:84:e1:00:a1:6e:c1:7a:2a:b6:af:41:3e:54: 8f:01:26:d5:4d:52:e9:a7:d2:88:7a:69:2b:1c:a5: 98:a7:ae:e5:02:7f:69:e5:ef:b1:05:4d:db:61:6d: 2d:c4:ca:c1:62:bb:b4:6d:53:39:72:54:13:3d:c7: e5:33:29:fa:c4:26:10:1f:53:ee:82:f0:6e:f6:0e: 17:f9:33:aa:0b:17:af:70:86:b1:38:78:fc:29:92: ec:bb:d0:12:81:9a:49:3f:17:4f:ac:73:bf:8a:70: 1a:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:47:F8:98:4B:94:55:00:4D:20:4C:85:71:FA:B0:68:06:C2:20:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:b5:2c:f2:89:dd:5d:7c:fb:ff:b3:cd:bc:be:f9:45:39:e3: a1:8e:4b:a0:4f:db:f3:15:89:bf:79:41:bb:40:b0:5a:66:89: 98:55:0b:62:34:00:a2:bf:aa:4c:6c:d6:2c:3f:0a:0d:84:b5: 59:7c:ae:3a:07:d2:27:e9:21:80:98:8a:5d:8e:13:2e:40:0e: 57:14:12:40:8e:88:ff:5c:86:9a:a9:10:10:2b:be:33:d3:9f: b1:b2:e2:5b:54:e8:47:98:37:53:a6:05:e5:77:f8:4c:78:2b: 8c:ed:c4:84:f4:f6:9c:dc:b6:8d:3c:e1:46:50:d5:01:7f:a5: 4c:a6:0c:e9:72:8e:87:ec:ec:f1:57:1c:8d:79:db:92:a2:2c: 20:4c:c4:0e:b0:ab:ec:8c:d8:35:22:d3:76:3b:7b:e5:2d:e8: 15:42:18:24:0f:2a:a0:5a:44:28:bf:a7:67:af:7b:02:93:2f: 17:b1:39:25:c1:af:fa:a0:e9:55:3f:f6:cc:62:a2:b0:f9:cb: 9b:ad:46:29:d0:35:14:8a:21:b9:02:c1:60:70:62:03:58:9d: 68:71:78:23:a9:46:c2:6d:96:4f:24:b6:5c:21:b6:bd:12:d1: 35:c7:1a:8d:6d:87:5d:b9:ac:6c:2d:21:1b:22:f8:32:d8:9b: 01:c8:9d:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ9igX1PukO/+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZGI4OTQxZmEtNDYwNS00ZTY2LThhZjEtNTg0NGFjMzA0MDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAotX3r+tswy3dM0NACD5jMfsvurh39NRwOJSN RCUpZsXRxiqODJB+a4j0T+sfi+6yr6dhY8xi/3U6CvhgwEYAc9zYPpmtVchgLtYp TePRiJ6DJ0tC3s7fhPEi0hXCqOr2O0deBmdu5F22SK0TpOvKgqduggnepsvWI9kJ GNRRl5AsiaCSZDq+H3pJ8fanHdYTPltup9OnPYThAKFuwXoqtq9BPlSPASbVTVLp p9KIemkrHKWYp67lAn9p5e+xBU3bYW0txMrBYru0bVM5clQTPcflMyn6xCYQH1Pu gvBu9g4X+TOqCxevcIaxOHj8KZLsu9ASgZpJPxdPrHO/inAaLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBBH+JhLlFUATSBMhXH6sGgGwiB8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGE0YzIwYjUtY2Q0Yi0z OTZjLTgzOWEtMmI5YzNhNWUzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANe1LPKJ3V18+/+zzby++UU546GOS6BP2/MVib95QbtAsFpmiZhVC2I0 AKK/qkxs1iw/Cg2EtVl8rjoH0ifpIYCYil2OEy5ADlcUEkCOiP9chpqpEBArvjPT n7Gy4ltU6EeYN1OmBeV3+Ex4K4ztxIT09pzcto084UZQ1QF/pUymDOlyjofs7PFX HI1525KiLCBMxA6wq+yM2DUi03Y7e+Ut6BVCGCQPKqBaRCi/p2evewKTLxexOSXB r/qg6VU/9sxiorD5y5utRinQNRSKIbkCwWBwYgNYnWhxeCOpRsJtlk8ktlwhtr0S 0TXHGo1th125rGwtIRsi+DLYmwHInUI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:02 2025 by rpki-client