$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/267e1ea7-b892-3312-89cf-96a2ce4bea6f.roa File: 267e1ea7-b892-3312-89cf-96a2ce4bea6f.roa (raw, json) Hash identifier: 97OsqigY65BMtcpXwfp8DVohDBnyLrFrqUhgaYCeBi4= Subject key identifier: 97:5C:B5:3F:FD:5B:51:C7:B8:32:58:32:01:A9:7E:3F:3E:49:0C:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819F275DA8D9C015B58AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/267e1ea7-b892-3312-89cf-96a2ce4bea6f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9f:27:5d:a8:d9:c0:15:b5:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=f41c44a0-c384-4d44-9b80-830cff765c5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:73:6c:ce:09:c6:56:b7:7c:1f:31:4f:82:e5: 80:51:53:44:a7:da:f0:ca:26:be:ae:2c:e2:94:29: 5b:a8:12:e2:66:51:55:dc:08:da:aa:0b:1d:b6:26: ac:e0:91:39:c1:8b:f8:30:55:28:87:0c:5f:39:4e: de:6e:7f:ae:a2:26:27:87:58:14:df:24:f6:f3:d8: ed:d4:96:65:d3:54:e8:1b:81:e3:86:2b:46:8c:b5: be:d1:55:57:87:4f:4e:5b:3b:08:22:9c:ea:09:dd: c2:2b:30:6d:7f:57:97:c3:f0:0f:dc:e4:1e:bf:47: 75:35:d0:34:2a:b7:1c:15:40:7d:8b:23:b5:03:47: 58:c6:b0:c8:88:8b:04:13:cc:f2:62:13:8f:d6:41: d8:3d:65:63:7a:65:ff:ac:47:8b:87:6f:c6:d7:5f: ab:4a:2a:85:4a:65:a9:d2:6e:25:c4:6a:d8:da:6b: f6:30:41:86:b6:66:22:f7:dd:cd:fb:f5:2d:0e:8a: c9:02:80:30:ee:7d:8d:00:fb:30:65:fa:5f:27:c6: 49:30:a6:d0:c5:01:c4:fd:4d:31:4c:16:df:ee:5d: 17:8f:49:70:dc:2a:64:81:91:b6:91:42:39:27:29: aa:7d:51:d4:2a:98:e1:0f:7b:73:54:3d:7f:8e:c0: ab:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:B5:3F:FD:5B:51:C7:B8:32:58:32:01:A9:7E:3F:3E:49:0C:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/267e1ea7-b892-3312-89cf-96a2ce4bea6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:64:bd:f7:26:b6:9c:ce:b7:9f:d7:4f:a8:b3:ac:e5:90:e1: 57:8f:89:93:21:e0:c5:e4:26:60:97:e7:e7:13:0c:74:88:ca: 20:9a:2b:0a:b7:bd:21:d5:f7:44:30:95:e5:36:b2:ea:bb:da: 9c:98:0b:7c:b2:63:4a:48:32:1f:18:2b:cf:5d:32:6c:76:3c: e5:36:aa:8e:8b:8a:11:db:fb:4a:07:2b:fd:b7:07:71:61:1e: bc:39:90:aa:6e:b0:61:2a:f4:0c:79:d7:38:62:b5:a8:64:08: 5c:55:ae:10:e4:8e:58:eb:1f:95:7a:b1:97:18:ab:b5:5f:ea: 6a:83:77:f7:64:dd:b4:b5:8b:c9:a3:aa:80:b3:d8:34:c9:33: dd:b6:b5:09:33:e9:10:99:53:c2:3d:25:6b:67:04:8a:69:06: 66:03:3d:10:c3:bc:f3:4c:89:d6:6d:e2:bc:fd:0a:86:68:fa: e6:4a:74:68:09:54:9c:90:f9:70:21:ac:31:e8:be:a4:72:ce: 52:e3:97:40:91:be:9d:6a:22:ab:49:4e:26:aa:24:2d:ce:ab: 9f:de:a0:3a:29:e7:ab:32:92:8a:04:6c:7c:ae:2e:96:cb:15: 57:37:dd:28:30:b6:ff:e1:7b:50:5b:b5:9d:f3:74:fc:7f:27: a2:fd:2b:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ8nXajZwBW1isAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZjQxYzQ0YTAtYzM4NC00ZDQ0LTliODAtODMwY2ZmNzY1YzVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHNszgnGVrd8HzFPguWAUVNEp9rwyia+rizi lClbqBLiZlFV3Ajaqgsdtias4JE5wYv4MFUohwxfOU7ebn+uoiYnh1gU3yT289jt 1JZl01ToG4HjhitGjLW+0VVXh09OWzsIIpzqCd3CKzBtf1eXw/AP3OQev0d1NdA0 KrccFUB9iyO1A0dYxrDIiIsEE8zyYhOP1kHYPWVjemX/rEeLh2/G11+rSiqFSmWp 0m4lxGrY2mv2MEGGtmYi993N+/UtDorJAoAw7n2NAPswZfpfJ8ZJMKbQxQHE/U0x TBbf7l0Xj0lw3CpkgZG2kUI5JymqfVHUKpjhD3tzVD1/jsCrIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdctT/9W1HHuDJYMgGpfj8+SQwIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjY3ZTFlYTctYjg5Mi0z MzEyLTg5Y2YtOTZhMmNlNGJlYTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK13MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZkvfcmtpzOt5/XT6izrOWQ4VePiZMh4MXkJmCX5+cTDHSIyiCaKwq3 vSHV90QwleU2suq72pyYC3yyY0pIMh8YK89dMmx2POU2qo6LihHb+0oHK/23B3Fh Hrw5kKpusGEq9Ax51zhitahkCFxVrhDkjljrH5V6sZcYq7Vf6mqDd/dk3bS1i8mj qoCz2DTJM922tQkz6RCZU8I9JWtnBIppBmYDPRDDvPNMidZt4rz9CoZo+uZKdGgJ VJyQ+XAhrDHovqRyzlLjl0CRvp1qIqtJTiaqJC3Oq5/eoDop56sykooEbHyuLpbL FVc33Sgwtv/he1BbtZ3zdPx/J6L9Kwk= -----END CERTIFICATE-----Generated at Sun Feb 16 15:26:56 2025 by rpki-client