$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa File: 237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa (raw, json) Hash identifier: Wm7b3dyREysKViSHvog1SQ2ImpoK92wFYdIRCRwLgN0= Subject key identifier: AF:C0:48:9A:78:27:28:03:A4:50:5D:9D:E2:BF:62:5C:B4:6E:B5:28 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819FBCFBAF5A62D66F0C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9f:bc:fb:af:5a:62:d6:6f:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=93dcdd32-8878-47d3-a881-a3bcea80bb54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:43:46:f0:3d:6c:55:31:20:c8:db:b3:c8:5b: 4b:75:be:eb:00:86:c9:78:d0:d8:52:46:29:a9:a3: fb:84:73:b3:17:26:5d:a3:ba:ab:ff:fe:74:5a:94: ff:8c:d4:93:80:75:86:e5:59:3e:44:a7:2f:c8:f4: 6a:d6:e8:92:5c:e2:5a:ed:0b:0f:be:72:9a:ae:09: d1:c0:d5:72:91:c9:87:00:c3:ac:ae:cb:38:af:5e: c7:bb:d4:3f:72:88:64:f5:85:de:99:d1:1f:c0:57: 90:d8:59:68:38:f7:cc:5e:83:31:a5:57:f1:a0:b2: 1f:0b:e9:34:c5:55:f3:53:47:e2:a4:6f:66:28:94: db:0b:a8:e2:2b:5f:9f:99:65:bb:c4:78:c0:27:7b: ae:55:33:cd:36:e1:6e:43:05:70:b9:ce:5e:42:e8: df:e8:8f:21:b7:9e:f5:c5:1a:b6:0d:8a:75:f3:19: ca:c9:a3:8a:da:6b:d2:8c:92:f7:98:7d:c7:54:d7: 5f:5e:1d:f4:05:d5:bc:40:08:84:14:63:94:a1:c4: 78:42:63:1b:6e:90:ae:d8:f4:8c:6b:ec:0d:af:0a: 02:34:99:ee:d3:55:02:7e:81:4f:76:5d:5d:eb:b6: 57:f4:a5:6a:2a:e2:5b:83:19:d4:52:3b:8f:50:8e: 6c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:C0:48:9A:78:27:28:03:A4:50:5D:9D:E2:BF:62:5C:B4:6E:B5:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237f15f7-e95e-3243-b7aa-5dee7c209c7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:0a:1a:73:1b:8b:52:1c:fa:dd:be:34:63:3f:96:93:f7:56: d1:f4:23:ab:31:83:2f:65:f9:98:7e:9d:ef:74:e2:5c:69:9f: d7:ca:a9:7a:7f:f4:1c:74:c8:ca:88:b1:71:4b:ef:2f:7e:a3: 2a:c2:9e:18:cd:0a:b5:46:a7:8e:83:3c:75:8d:64:8c:84:a5: cf:b4:46:08:5c:8f:2b:5f:a3:9a:79:8c:51:d8:7a:86:e6:10: 5c:52:24:f3:de:d5:0a:e8:d6:46:71:bd:f0:cf:77:37:e8:95: e0:fe:7c:60:09:85:34:78:a0:d3:c4:39:7d:4b:42:51:a7:88: 5d:2d:54:a3:c0:2a:cc:bf:0a:3f:26:dd:84:cf:35:30:31:87: 68:a1:f2:f8:0e:1a:da:d4:b2:54:4c:d6:04:44:ea:df:f9:db: 82:13:77:54:4e:ac:ba:f6:71:b6:b5:f7:b2:12:7c:8d:4d:f2: 07:8a:1c:02:3d:f1:da:d4:12:99:fb:24:b2:56:3d:d8:f9:8d: f7:1e:fa:02:b9:0b:8e:ce:97:70:83:ad:29:da:8d:29:5a:29: fc:a5:a9:8e:11:e3:5f:5b:d0:be:72:90:d4:18:01:29:f6:db: ad:61:94:35:4c:7f:ef:6e:df:f4:bd:5b:c9:f9:56:7a:63:92: fa:e8:34:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ+8+69aYtZvDIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTNkY2RkMzItODg3OC00N2QzLWE4ODEtYTNiY2VhODBiYjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ENG8D1sVTEgyNuzyFtLdb7rAIbJeNDYUkYp qaP7hHOzFyZdo7qr//50WpT/jNSTgHWG5Vk+RKcvyPRq1uiSXOJa7QsPvnKargnR wNVykcmHAMOsrss4r17Hu9Q/cohk9YXemdEfwFeQ2FloOPfMXoMxpVfxoLIfC+k0 xVXzU0fipG9mKJTbC6jiK1+fmWW7xHjAJ3uuVTPNNuFuQwVwuc5eQujf6I8ht571 xRq2DYp18xnKyaOK2mvSjJL3mH3HVNdfXh30BdW8QAiEFGOUocR4QmMbbpCu2PSM a+wNrwoCNJnu01UCfoFPdl1d67ZX9KVqKuJbgxnUUjuPUI5s9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/ASJp4JygDpFBdneK/Yly0brUoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM3ZjE1ZjctZTk1ZS0z MjQzLWI3YWEtNWRlZTdjMjA5YzdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkKGnMbi1Ic+t2+NGM/lpP3VtH0I6sxgy9l+Zh+ne904lxpn9fKqXp/ 9Bx0yMqIsXFL7y9+oyrCnhjNCrVGp46DPHWNZIyEpc+0Rghcjytfo5p5jFHYeobm EFxSJPPe1Qro1kZxvfDPdzfoleD+fGAJhTR4oNPEOX1LQlGniF0tVKPAKsy/Cj8m 3YTPNTAxh2ih8vgOGtrUslRM1gRE6t/524ITd1ROrLr2cba197ISfI1N8geKHAI9 8drUEpn7JLJWPdj5jfce+gK5C47Ol3CDrSnajSlaKfylqY4R419b0L5ykNQYASn2 261hlDVMf+9u3/S9W8n5VnpjkvroNHw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:24 2025 by rpki-client