$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa File: 0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa (raw, json) Hash identifier: /uJTp1UeMU8M0AcgJzpkBzBq+DG5CXoSa2Gjl7DGYN8= Subject key identifier: 52:44:6A:76:A2:C0:67:6F:B0:48:20:F5:32:A1:59:D8:CB:5C:70:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810B99C2C3F225D9605A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0b:99:c2:c3:f2:25:d9:60:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=23db715d-4df0-4b3d-8c23-80e19a965db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:64:80:da:76:e9:f0:ad:b5:ea:3b:75:de:c7: 21:c4:09:4c:24:06:8a:0f:79:ec:df:6a:48:56:32: c6:a9:22:a1:ea:cc:30:80:d7:37:9e:ca:17:f8:ca: be:aa:98:a2:9c:b5:e8:4d:18:d2:03:a0:de:ba:81: 88:83:a7:eb:b7:ac:c9:ad:0a:cb:e4:83:f7:6a:06: 6e:21:ce:2a:1d:c2:0c:67:f1:0f:59:23:30:e6:a3: 97:66:c3:a9:84:a5:aa:9f:bb:42:90:d1:b6:7c:25: 5a:67:c3:f2:c6:2b:28:d0:51:3d:fe:e3:1f:97:60: 64:95:04:14:51:79:97:97:4e:5d:9f:91:50:24:ff: 03:db:24:45:6b:d7:e8:c3:f9:c9:78:8b:76:cb:40: 1d:d6:30:79:03:ca:4a:44:a9:0a:99:b7:85:a4:db: 8b:1c:99:d1:58:97:58:88:2e:de:64:b9:3a:a7:a1: 7a:9f:08:ce:3b:13:bb:bb:ed:33:6b:00:96:64:51: 68:44:ed:78:91:77:f5:53:26:ba:59:27:a4:85:3d: 63:36:a8:83:bb:a5:21:ac:35:64:fd:11:f7:ef:d4: 8b:f5:46:aa:62:a8:04:a8:d0:96:ce:6f:5b:1a:a2: 4c:43:04:e0:1f:31:9a:63:7d:06:af:9c:27:5e:b3: 47:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:44:6A:76:A2:C0:67:6F:B0:48:20:F5:32:A1:59:D8:CB:5C:70:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:bc:9e:1a:be:d5:f7:4e:b5:f2:09:32:53:79:81:b6:a4:eb: c9:fd:d8:0b:ef:9f:4e:9d:f3:b9:67:35:74:5d:90:0c:51:19: 4c:b9:55:2f:74:21:8f:10:10:56:59:5e:5c:a4:12:be:c0:54: 29:8b:de:56:35:c5:30:db:8a:03:d5:5e:06:71:d1:80:a8:e0: 5f:5d:f2:24:51:03:f0:b9:5a:10:89:e8:79:24:e1:65:3f:ea: 51:4f:92:94:c6:a7:60:1a:e9:f6:d5:2a:f1:a4:84:a3:a1:75: 5d:91:fa:2e:11:73:2f:fd:7d:a8:5b:e6:55:4d:60:d4:c6:a7: 62:56:fc:9e:f7:6b:9f:d1:25:f9:10:24:79:67:99:93:92:01: db:3e:fb:ec:40:1e:da:df:68:a2:db:b6:f6:a3:12:22:3c:06: cf:43:67:69:0b:08:b3:a1:f5:d9:2b:f1:28:2d:97:49:88:cf: 4f:9c:83:2b:44:c8:4e:b8:d4:7f:a5:82:5e:10:4c:e3:a2:cd: 4f:47:d7:ef:5d:00:05:2c:01:a3:eb:47:60:5d:91:ec:69:5d: c2:90:2a:7c:ca:b3:85:02:55:0e:ca:a9:e1:7f:ad:3c:2a:3f: 33:b2:b7:10:58:9d:6d:06:ca:d5:b6:f7:1a:cf:06:a9:94:d5: 9a:4f:5a:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQuZwsPyJdlgWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjNkYjcxNWQtNGRmMC00YjNkLThjMjMtODBlMTlhOTY1ZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmSA2nbp8K216jt13schxAlMJAaKD3ns32pI VjLGqSKh6swwgNc3nsoX+Mq+qpiinLXoTRjSA6DeuoGIg6frt6zJrQrL5IP3agZu Ic4qHcIMZ/EPWSMw5qOXZsOphKWqn7tCkNG2fCVaZ8Pyxiso0FE9/uMfl2BklQQU UXmXl05dn5FQJP8D2yRFa9fow/nJeIt2y0Ad1jB5A8pKRKkKmbeFpNuLHJnRWJdY iC7eZLk6p6F6nwjOOxO7u+0zawCWZFFoRO14kXf1Uya6WSekhT1jNqiDu6UhrDVk /RH379SL9UaqYqgEqNCWzm9bGqJMQwTgHzGaY30Gr5wnXrNHPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJEanaiwGdvsEgg9TKhWdjLXHCaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI2NjUxZTMtOGJkOS0z MGNmLWI3ZjYtOGIyN2YwY2U1NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHy8nhq+1fdOtfIJMlN5gbak68n92Avvn06d87lnNXRdkAxRGUy5VS90 IY8QEFZZXlykEr7AVCmL3lY1xTDbigPVXgZx0YCo4F9d8iRRA/C5WhCJ6Hkk4WU/ 6lFPkpTGp2Aa6fbVKvGkhKOhdV2R+i4Rcy/9fahb5lVNYNTGp2JW/J73a5/RJfkQ JHlnmZOSAds+++xAHtrfaKLbtvajEiI8Bs9DZ2kLCLOh9dkr8Sgtl0mIz0+cgytE yE641H+lgl4QTOOizU9H1+9dAAUsAaPrR2BdkexpXcKQKnzKs4UCVQ7KqeF/rTwq PzOytxBYnW0GytW29xrPBqmU1ZpPWnk= -----END CERTIFICATE-----Generated at Sun Apr 13 00:36:19 2025 by rpki-client