$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa File: 129dca48-db60-34d2-801e-0d7c82dc0f87.roa (raw, json) Hash identifier: IcX5SEaBkdmQLiZYat/i8anu9oe3v6wJEb+y/LdGJt0= Subject key identifier: 38:E6:7A:9D:1D:00:78:10:17:99:69:C3:22:B4:90:BD:9F:89:2D:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819E0E8F50A79425FA3A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9e:0e:8f:50:a7:94:25:fa:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e343bb17-23f5-4b0c-87f1-dbe0db37af4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:16:76:0d:c9:d6:ec:e2:e0:d0:e0:02:1f:76: 82:94:47:b3:80:cb:b2:56:30:25:6a:4d:81:31:d4: 43:0a:aa:83:12:b1:02:e1:b1:7f:72:24:29:2a:cf: 41:1c:a3:0f:ea:79:74:19:0a:c4:ae:8a:0b:56:58: 77:bf:1b:83:23:9c:0a:5f:15:ab:aa:27:25:6a:6d: 9b:63:91:72:c6:00:78:7c:20:da:56:a2:a9:ff:a5: 4d:45:36:19:c2:c5:a0:8f:a4:c5:a2:ce:8e:d8:6f: f3:f5:d3:b1:44:06:30:df:37:30:1c:3e:b0:db:61: f9:3a:eb:72:5a:d8:de:44:f5:b7:fe:be:4b:70:db: ee:b2:f3:1c:e4:2f:ad:39:6e:24:36:0a:58:6c:95: 53:45:7e:d1:bf:32:07:fa:03:f5:66:e0:ad:b6:0a: b9:d7:74:f9:4f:91:8a:b9:17:36:58:a8:66:3a:68: 12:b8:b1:4e:7b:bf:e8:4f:a8:d6:d5:9f:ee:f4:18: 34:c7:ca:71:2c:d8:dd:24:1f:2e:05:ce:3c:4f:99: 3e:33:94:a6:13:40:d4:95:44:20:73:26:db:d6:97: 19:b8:26:03:14:09:c6:69:fb:39:c8:1e:ff:f7:bc: 41:7b:0e:b8:f4:c7:ae:c5:33:1a:d8:3e:2e:96:f0: fb:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:E6:7A:9D:1D:00:78:10:17:99:69:C3:22:B4:90:BD:9F:89:2D:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:ac:9e:66:d7:25:0c:e5:80:7a:6f:5c:93:93:85:3d:52:d0: 84:96:4e:24:60:a1:ab:d2:ae:ee:79:5a:f7:8a:07:34:a4:3c: c6:04:b5:00:ee:88:c3:15:ff:3f:4c:ea:ab:40:aa:c2:7f:2e: 38:73:1c:51:fb:05:57:b3:6b:82:bf:4c:bb:43:bc:d6:81:3f: 23:41:45:fa:0a:2a:93:44:2f:07:d5:8a:1b:ed:0f:11:f1:63: e2:7b:65:55:28:36:c4:fc:bf:91:35:09:66:66:07:96:3d:4d: 10:67:91:64:1f:21:9a:9c:ac:92:f3:3f:aa:f5:59:de:90:22: 01:7c:88:3b:6b:d5:88:32:cc:bd:9f:bd:c4:93:ae:52:1e:a6: b8:88:77:c0:a7:71:ea:32:bb:22:35:8a:5a:84:85:8e:a8:8c: 3c:39:30:0d:15:b0:2d:24:3c:d1:b5:f9:28:cc:c1:77:a4:41: 5d:c6:9d:0a:c8:0b:98:46:ae:e5:11:b7:0a:0d:f3:8f:5a:57: 60:e5:68:4c:ff:22:6e:20:80:13:94:7e:bc:f5:fb:6c:fb:e8: d6:4f:28:0e:aa:f1:52:85:57:83:64:80:a3:30:57:10:b3:8e: 2d:a4:fb:a5:9f:fb:7d:b1:8f:21:4e:9d:23:60:3d:89:9d:c3: 9b:6a:d4:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ4Oj1CnlCX6OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTM0M2JiMTctMjNmNS00YjBjLTg3ZjEtZGJlMGRiMzdhZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxxZ2DcnW7OLg0OACH3aClEezgMuyVjAlak2B MdRDCqqDErEC4bF/ciQpKs9BHKMP6nl0GQrErooLVlh3vxuDI5wKXxWrqiclam2b Y5FyxgB4fCDaVqKp/6VNRTYZwsWgj6TFos6O2G/z9dOxRAYw3zcwHD6w22H5Outy WtjeRPW3/r5LcNvusvMc5C+tOW4kNgpYbJVTRX7RvzIH+gP1ZuCttgq513T5T5GK uRc2WKhmOmgSuLFOe7/oT6jW1Z/u9Bg0x8pxLNjdJB8uBc48T5k+M5SmE0DUlUQg cybb1pcZuCYDFAnGafs5yB7/97xBew649MeuxTMa2D4ulvD7xwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjmep0dAHgQF5lpwyK0kL2fiS0+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTI5ZGNhNDgtZGI2MC0z NGQyLTgwMWUtMGQ3YzgyZGMwZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADmsnmbXJQzlgHpvXJOThT1S0ISWTiRgoavSru55WveKBzSkPMYEtQDu iMMV/z9M6qtAqsJ/LjhzHFH7BVeza4K/TLtDvNaBPyNBRfoKKpNELwfVihvtDxHx Y+J7ZVUoNsT8v5E1CWZmB5Y9TRBnkWQfIZqcrJLzP6r1Wd6QIgF8iDtr1YgyzL2f vcSTrlIepriId8CnceoyuyI1ilqEhY6ojDw5MA0VsC0kPNG1+SjMwXekQV3GnQrI C5hGruURtwoN849aV2DlaEz/Im4ggBOUfrz1+2z76NZPKA6q8VKFV4NkgKMwVxCz ji2k+6Wf+32xjyFOnSNgPYmdw5tq1CM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:45 2025 by rpki-client