$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15d9da44-e979-3155-a7a6-3a071e5b5176.roa File: 15d9da44-e979-3155-a7a6-3a071e5b5176.roa (raw, json) Hash identifier: AFfpj9G3tP9reCFLjEquY0lH2ckxfS7lQ7JE89GclpU= Subject key identifier: 0D:86:1F:2F:53:05:47:19:63:0A:60:77:53:B4:A9:43:0D:38:FF:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810BA7DD96AA017F6BCD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15d9da44-e979-3155-a7a6-3a071e5b5176.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0b:a7:dd:96:aa:01:7f:6b:cd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f6519a02-8f36-465c-a448-273743caa8a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2f:14:f4:ba:c0:ab:6b:a1:78:64:df:d5:c6: 2b:b4:b5:1d:57:be:3b:ba:78:db:8a:d0:4e:02:31: d7:cb:eb:49:b4:f5:fa:f4:3f:24:2b:1e:8c:4c:c8: 73:e8:c7:a4:57:f5:c0:7c:f0:e5:28:c0:26:07:9e: 1a:12:d5:e8:5e:cf:eb:ad:4b:10:56:ff:4c:dd:e5: 94:ba:e8:b5:93:de:94:a7:b1:ef:47:cc:01:2a:36: fa:84:f6:71:68:7f:c1:b6:11:46:ab:ce:cd:0f:35: 59:af:b7:ef:9a:88:64:cc:61:75:98:17:f8:9e:b4: 3a:c6:ed:a5:c7:a7:bc:ae:90:0f:77:82:6f:c4:c2: c0:60:04:d9:62:41:6c:41:42:9f:fb:1f:14:ca:ed: 46:c8:26:ad:3c:fd:2f:95:c1:0a:70:bb:97:00:7e: 9e:88:44:95:41:57:03:55:e8:c8:de:42:29:c2:9e: 1b:16:36:2d:4a:f4:40:f3:67:75:2b:5b:79:4b:da: 9b:99:23:72:8e:68:8e:91:b8:35:49:af:82:2e:a7: 04:6c:d0:f1:03:ee:b1:01:c7:8e:d5:e4:9a:3b:7d: 2d:61:83:3f:0c:79:02:20:83:42:a5:45:67:0d:3c: 84:79:f9:6b:04:96:87:2c:66:ca:d3:8b:87:f7:2b: b5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:86:1F:2F:53:05:47:19:63:0A:60:77:53:B4:A9:43:0D:38:FF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15d9da44-e979-3155-a7a6-3a071e5b5176.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:1d:53:88:b1:9c:6c:40:ab:de:89:cc:85:74:49:ec:a8:45: 8a:7f:ca:ea:a6:d1:6f:62:70:98:bf:20:24:0f:01:4a:92:37: f9:9e:80:2f:a1:2c:05:05:ac:53:b7:37:47:a7:68:ed:24:0d: e7:f6:80:59:b4:3b:c9:5a:d3:07:46:39:06:d8:4e:55:a2:78: 75:55:8f:af:fb:f2:37:22:4e:33:e4:c2:3d:07:48:da:9f:70: df:0b:0e:5e:2b:a4:13:c8:d1:f9:41:14:80:ac:3d:ea:c9:17: ae:74:ca:59:3d:18:80:dd:c3:87:2f:73:c1:7d:59:fb:db:26: b9:c3:8b:7b:5a:b0:4a:fc:06:b6:fe:5a:07:df:1b:12:c8:a6: 71:b5:62:f0:da:14:9e:83:e3:df:f8:87:47:7a:5d:1a:c7:74: 2c:f2:14:84:33:55:c7:7d:a5:2f:e7:d3:9d:9d:f5:2c:a5:68: 55:34:48:43:c8:5a:5e:50:06:f8:c1:2c:22:96:c3:26:dc:54: 6c:65:70:e2:9e:21:91:01:b4:81:5e:a0:ee:3d:bf:89:b0:ed: 10:b0:b8:d0:2c:d8:0b:d7:cd:9b:91:e7:c9:e4:da:5a:0c:dc: f2:ea:7d:f0:16:0d:92:f6:7f:f1:ab:f0:0c:1c:c6:e7:e6:ff: 6e:9a:6a:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQun3ZaqAX9rzQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjY1MTlhMDItOGYzNi00NjVjLWE0NDgtMjczNzQzY2FhOGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS8U9LrAq2uheGTf1cYrtLUdV747unjbitBO AjHXy+tJtPX69D8kKx6MTMhz6MekV/XAfPDlKMAmB54aEtXoXs/rrUsQVv9M3eWU uui1k96Up7HvR8wBKjb6hPZxaH/BthFGq87NDzVZr7fvmohkzGF1mBf4nrQ6xu2l x6e8rpAPd4JvxMLAYATZYkFsQUKf+x8Uyu1GyCatPP0vlcEKcLuXAH6eiESVQVcD VejI3kIpwp4bFjYtSvRA82d1K1t5S9qbmSNyjmiOkbg1Sa+CLqcEbNDxA+6xAceO 1eSaO30tYYM/DHkCIINCpUVnDTyEeflrBJaHLGbK04uH9yu1XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA2GHy9TBUcZYwpgd1O0qUMNOP/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTVkOWRhNDQtZTk3OS0z MTU1LWE3YTYtM2EwNzFlNWI1MTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4dU4ixnGxAq96JzIV0SeyoRYp/yuqm0W9icJi/ICQPAUqSN/megC+h LAUFrFO3N0enaO0kDef2gFm0O8la0wdGOQbYTlWieHVVj6/78jciTjPkwj0HSNqf cN8LDl4rpBPI0flBFICsPerJF650ylk9GIDdw4cvc8F9WfvbJrnDi3tasEr8Brb+ WgffGxLIpnG1YvDaFJ6D49/4h0d6XRrHdCzyFIQzVcd9pS/n052d9SylaFU0SEPI Wl5QBvjBLCKWwybcVGxlcOKeIZEBtIFeoO49v4mw7RCwuNAs2AvXzZuR58nk2loM 3PLqffAWDZL2f/Gr8Awcxufm/26aahY= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:19 2025 by rpki-client