$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa File: 1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa (raw, json) Hash identifier: eXy8bIsCXuyPfpJgpe/u892Oxjcm9hwSgdUGy8xotMQ= Subject key identifier: CF:A2:C9:39:EE:CC:63:BE:C7:77:D6:10:A8:18:96:F1:49:0C:43:E3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581A2A3AC46B605EE71C480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:a2:a3:ac:46:b6:05:ee:71:c4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=385e401e-4a83-424b-8870-1532673d61cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:17:fb:e2:f6:ca:ba:48:d8:2b:a4:11:0b:2c: ed:cf:35:13:8a:b6:48:73:dc:35:9c:28:97:9e:ae: 75:ae:2e:1d:4c:99:a9:b3:63:0e:0e:63:92:3c:a2: 64:ce:41:24:39:67:b3:50:68:41:e4:25:08:93:fe: 21:d1:d2:11:71:79:60:f7:7d:45:fb:ce:fd:a7:83: 53:62:4c:5b:d8:2e:d0:8a:73:32:86:54:2d:b6:e6: 39:d7:18:7f:7b:93:a2:54:c8:03:ee:38:99:37:24: 3e:40:cf:80:bc:cc:b7:93:78:18:6b:45:61:c1:c3: 98:6f:37:fd:bb:a6:17:23:4b:63:b4:a8:6e:0f:25: 16:a7:ca:cc:0d:f4:68:67:e4:36:d9:9d:de:58:d5: ad:04:c6:6d:32:eb:f0:04:75:c3:34:b8:33:b5:37: eb:de:f2:71:5e:15:89:d3:9a:f3:e1:f8:2c:cf:2d: 20:ec:b8:54:03:78:58:38:b1:ee:3e:45:0c:1a:03: ac:15:0c:ba:3f:c8:c0:d5:e3:38:a3:fc:9f:43:21: 44:b3:9c:6e:e9:e3:5e:93:4f:ce:95:4c:06:2e:75: b6:56:b4:6e:c5:de:f9:56:e9:fc:c4:ef:d7:f4:29: 17:eb:bd:28:a5:5a:42:1f:3c:be:80:4b:bb:b4:ce: 3e:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A2:C9:39:EE:CC:63:BE:C7:77:D6:10:A8:18:96:F1:49:0C:43:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:03:2f:2a:ec:09:d7:13:61:2c:a4:78:aa:cf:3a:7d:f5:86: d5:5a:08:2e:14:f3:57:26:d1:d5:21:ad:92:f8:b4:dd:b8:ef: 39:0f:8c:d5:17:c1:96:d4:cf:55:97:50:b1:ff:66:6b:58:67: cc:07:07:73:f4:42:46:7c:16:57:b2:1d:24:53:91:83:d3:d4: 40:6b:7b:99:0e:d4:14:9e:4b:e6:65:74:b3:dc:cc:28:48:e3: 8e:c6:a9:e6:f2:98:55:30:0b:46:de:5f:5a:c8:e6:78:a2:10: 6f:4a:6b:17:55:7d:2a:85:0d:c5:9f:5c:93:e9:88:c1:b1:8d: cf:5c:e7:16:6b:58:50:54:10:6d:08:37:5a:03:61:cd:dd:a6: cc:8d:88:50:5a:fe:93:5d:e2:c2:51:cc:25:f7:bc:94:6c:8b: d8:85:09:89:98:99:20:f4:69:dc:1c:f1:89:6e:49:cf:25:1f: 30:d3:c6:e4:80:1c:95:83:aa:f2:ed:13:46:0b:a7:a3:75:ba: a0:ea:b0:18:6f:70:02:53:68:9e:8e:56:1d:4b:4b:77:cc:0e: fa:ac:b1:cb:1a:73:b1:04:8a:59:1e:8e:2e:17:c7:74:09:3b: f0:33:95:a4:19:24:4e:f6:3d:6f:a1:10:77:c6:8e:47:b1:d6: dd:6b:c0:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaKjrEa2Be5xxIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Mzg1ZTQwMWUtNGE4My00MjRiLTg4NzAtMTUzMjY3M2Q2MWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgxf74vbKukjYK6QRCyztzzUTirZIc9w1nCiX nq51ri4dTJmps2MODmOSPKJkzkEkOWezUGhB5CUIk/4h0dIRcXlg931F+879p4NT Ykxb2C7QinMyhlQttuY51xh/e5OiVMgD7jiZNyQ+QM+AvMy3k3gYa0VhwcOYbzf9 u6YXI0tjtKhuDyUWp8rMDfRoZ+Q22Z3eWNWtBMZtMuvwBHXDNLgztTfr3vJxXhWJ 05rz4fgszy0g7LhUA3hYOLHuPkUMGgOsFQy6P8jA1eM4o/yfQyFEs5xu6eNek0/O lUwGLnW2VrRuxd75Vun8xO/X9CkX670opVpCHzy+gEu7tM4+AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+iyTnuzGO+x3fWEKgYlvFJDEPjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWQ1OWEzYTUtNzcxZC0z ZGEzLTg2ZGQtZTZmMGI4Y2Q1NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMYDLyrsCdcTYSykeKrPOn31htVaCC4U81cm0dUhrZL4tN247zkPjNUX wZbUz1WXULH/ZmtYZ8wHB3P0QkZ8FleyHSRTkYPT1EBre5kO1BSeS+ZldLPczChI 447GqebymFUwC0beX1rI5niiEG9KaxdVfSqFDcWfXJPpiMGxjc9c5xZrWFBUEG0I N1oDYc3dpsyNiFBa/pNd4sJRzCX3vJRsi9iFCYmYmSD0adwc8YluSc8lHzDTxuSA HJWDqvLtE0YLp6N1uqDqsBhvcAJTaJ6OVh1LS3fMDvqsscsac7EEilkeji4Xx3QJ O/AzlaQZJE72PW+hEHfGjkex1t1rwHI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:16 2025 by rpki-client