$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa File: 2f3ad59c-eada-3be0-952f-428ebee1b82d.roa (raw, json) Hash identifier: yzZXmLe2q89Skh88h6LMrrFALn26hVLrTZxYbTJdrsk= Subject key identifier: C8:FF:09:B9:E3:27:BE:E3:16:59:97:D0:19:0A:CD:33:DB:1D:03:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810C83EE4FDD35382044B8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0c:83:ee:4f:dd:35:38:20:44:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=577dfe7d-8ffb-47aa-9d5f-77ac00f518c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:a6:0b:2e:d2:7a:a6:e2:3d:a2:c4:38:44:5e: eb:63:8f:3c:c1:eb:07:a3:e7:63:2c:73:bf:11:72: 60:c6:69:a9:c7:3b:8b:a9:1d:5d:4b:a1:99:4a:99: cc:c8:9c:b2:c6:31:7f:a3:ab:ab:3d:f0:ff:48:1e: 84:88:be:53:ac:50:77:30:7a:e0:d8:ac:6c:b6:7e: e9:09:26:45:7c:79:d1:17:15:be:8a:87:a1:81:46: b7:1b:f6:e2:75:c2:9e:d4:86:a6:23:38:b6:09:cf: 89:73:56:68:52:cc:9a:f6:26:aa:89:6e:7f:34:99: 09:dd:54:25:bb:a4:ce:01:f2:a1:07:7b:35:d8:7a: a5:42:c3:78:7c:c2:b0:12:25:54:56:5f:b3:62:3a: a9:ce:27:5f:67:e0:67:8b:1a:8c:40:c1:fc:9f:3f: 37:8e:21:8e:62:38:b3:46:a8:dd:22:d7:64:4f:9a: 67:27:8a:c0:c7:a9:ec:99:a6:e6:34:af:8c:53:f3: 80:77:ab:48:b3:0f:70:d9:30:a5:6c:89:93:2a:ab: f6:0e:d3:b5:57:e4:6b:ab:5a:ac:9b:70:db:03:72: 3d:fe:7c:55:ec:f5:4b:5c:e0:79:3a:dd:ef:42:4e: 8a:c2:29:bd:b4:61:fa:22:85:aa:9d:83:af:00:85: 61:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:FF:09:B9:E3:27:BE:E3:16:59:97:D0:19:0A:CD:33:DB:1D:03:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:37:68:16:43:a4:48:b3:fa:4a:3d:cd:00:0c:ab:c8:01:26: c9:32:98:db:50:64:ff:e1:85:aa:04:78:b7:ab:22:2b:a4:44: b2:0d:54:69:0a:55:81:df:65:51:0b:bb:f7:f9:f4:2d:53:74: fb:5a:41:e3:d1:cd:a0:0d:be:b4:cb:36:25:d1:e9:b5:50:6f: 9d:f0:b7:ed:95:1d:8c:41:69:56:e2:20:53:44:6b:4c:93:54: 00:5c:9d:f2:aa:b7:d3:a6:6a:ff:52:2e:5a:17:1b:78:22:1b: fe:d5:a4:c7:5c:6e:50:8a:0a:8c:7a:89:b8:d2:08:9c:40:e5: 4c:89:9f:b4:af:1a:e0:4d:31:ee:d8:7d:35:36:c8:02:59:9a: 8d:0c:db:d5:3a:a8:02:d1:d2:b0:86:69:e3:1a:71:6b:93:72: 6f:b0:db:c6:16:bb:a2:08:d3:ef:e3:19:5f:3e:60:09:b0:ae: 8f:86:29:52:58:5f:18:96:fa:08:0c:69:f3:66:d4:fc:0c:7a: 20:13:e9:97:1c:6d:de:dd:de:80:21:4d:00:55:53:f2:68:8e: 47:76:ed:d2:40:7d:99:9b:a6:46:65:0d:44:94:1c:1e:51:3d: 92:8a:cd:3b:33:47:3e:2b:35:e3:08:af:97:db:57:27:42:c9: 25:3f:77:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQyD7k/dNTggRLgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTc3ZGZlN2QtOGZmYi00N2FhLTlkNWYtNzdhYzAwZjUxOGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6YLLtJ6puI9osQ4RF7rY488wesHo+djLHO/ EXJgxmmpxzuLqR1dS6GZSpnMyJyyxjF/o6urPfD/SB6EiL5TrFB3MHrg2Kxstn7p CSZFfHnRFxW+ioehgUa3G/bidcKe1IamIzi2Cc+Jc1ZoUsya9iaqiW5/NJkJ3VQl u6TOAfKhB3s12HqlQsN4fMKwEiVUVl+zYjqpzidfZ+BnixqMQMH8nz83jiGOYjiz RqjdItdkT5pnJ4rAx6nsmabmNK+MU/OAd6tIsw9w2TClbImTKqv2DtO1V+Rrq1qs m3DbA3I9/nxV7PVLXOB5Ot3vQk6Kwim9tGH6IoWqnYOvAIVhBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMj/CbnjJ77jFlmX0BkKzTPbHQMBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmYzYWQ1OWMtZWFkYS0z YmUwLTk1MmYtNDI4ZWJlZTFiODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAw3aBZDpEiz+ko9zQAMq8gBJskymNtQZP/hhaoEeLerIiukRLINVGkK VYHfZVELu/f59C1TdPtaQePRzaANvrTLNiXR6bVQb53wt+2VHYxBaVbiIFNEa0yT VABcnfKqt9Omav9SLloXG3giG/7VpMdcblCKCox6ibjSCJxA5UyJn7SvGuBNMe7Y fTU2yAJZmo0M29U6qALR0rCGaeMacWuTcm+w28YWu6II0+/jGV8+YAmwro+GKVJY XxiW+ggMafNm1PwMeiAT6Zccbd7d3oAhTQBVU/Jojkd27dJAfZmbpkZlDUSUHB5R PZKKzTszRz4rNeMIr5fbVydCySU/d88= -----END CERTIFICATE-----Generated at Sun Feb 16 15:36:52 2025 by rpki-client