$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36a3ec8c-cf23-346f-b193-20257b3b98ba.roa File: 36a3ec8c-cf23-346f-b193-20257b3b98ba.roa (raw, json) Hash identifier: 4B4DUg/PPsJtKShzTle2c42Trh5ADfPdTfRHVocZv8I= Subject key identifier: E7:43:B5:FF:35:48:E9:22:9E:37:0C:CD:83:CC:9D:9F:0E:6F:78:31 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810D527DC0D857A77ECF40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36a3ec8c-cf23-346f-b193-20257b3b98ba.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0d:52:7d:c0:d8:57:a7:7e:cf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=18ce501f-6cb1-4512-8105-2812f39eab5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:19:94:8b:c3:f3:29:7c:8f:ef:bd:8b:4a:49: b5:1e:3c:18:54:6f:59:e2:0c:96:d5:71:88:83:85: d8:f2:e8:5a:cb:88:32:b4:42:cc:f3:8e:60:c5:95: ec:f9:1d:e4:31:47:d0:24:75:cb:33:a5:f2:5a:d5: fd:c8:0b:b1:61:92:6f:db:f5:83:0f:98:e3:fe:07: 21:5d:bd:c3:4e:83:58:52:85:24:74:d7:0c:03:31: 70:cb:b2:28:71:d6:60:7c:aa:90:6f:71:1b:72:ec: 5c:0c:d6:61:7f:ef:0c:76:a8:de:bc:93:91:40:30: 44:84:4f:03:d6:d9:02:b6:11:29:bb:4c:65:77:6e: b5:eb:e0:ce:b4:9a:bd:da:6c:d8:62:71:c2:4c:4c: 14:d0:c7:3c:9b:51:73:ed:ef:6a:da:09:da:4e:51: 06:72:91:a9:e0:e6:24:cb:8d:eb:82:b5:61:66:97: 20:d0:1a:dd:d4:86:40:44:b3:4f:f8:ae:db:e9:d2: 00:b8:65:b9:4e:0a:7f:2d:9c:61:ad:ea:36:a0:bf: 24:6e:e0:0d:73:ba:00:20:4d:99:c9:42:3c:c9:e8: b6:b5:b6:49:3a:e7:ce:32:46:c6:f7:c7:f8:76:7a: 43:b0:d5:7e:ab:d3:75:90:ca:cf:bd:4b:4b:f9:74: 13:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:43:B5:FF:35:48:E9:22:9E:37:0C:CD:83:CC:9D:9F:0E:6F:78:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36a3ec8c-cf23-346f-b193-20257b3b98ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:92:88:ec:59:10:47:7e:25:1d:13:67:59:23:d6:12:26:79: 02:c6:bb:fa:08:a2:e7:51:f5:0b:32:b2:02:ea:91:84:18:a4: 31:0d:a5:fd:a4:c3:85:10:f9:37:f2:ee:8c:12:77:c0:6c:1e: c2:65:96:60:5a:cf:1e:e8:23:bd:e2:ff:97:d5:ae:a4:53:f3: 13:49:2c:87:46:80:a0:1a:b8:19:30:be:d2:21:57:71:3b:72: 6e:e6:7d:0c:81:b3:60:5d:4a:28:df:90:92:aa:7d:a7:23:7e: 15:39:20:d6:19:88:36:df:9a:25:45:7b:3b:0f:b7:02:fa:07: b1:c7:bd:0d:fd:90:ef:1e:26:2b:5c:4f:3d:42:8d:9f:a4:e2: 90:34:88:82:1e:cc:67:c1:0f:75:7d:1b:f0:ec:a9:7f:b1:ef: 40:52:d0:26:f2:62:15:95:01:5f:fb:ae:07:e0:78:6f:e9:cc: 78:2a:3b:f3:01:69:79:75:db:2a:15:46:cc:9e:75:1d:af:f4: bd:cb:94:e4:bc:f5:5a:01:cf:69:e1:b1:3a:6e:fc:b4:a3:88: 5c:4b:b3:0a:fd:78:5f:f7:84:3a:b4:a2:de:55:24:c2:04:a3: 3f:5a:97:3b:24:bd:9b:65:71:2d:ba:a8:77:55:f2:32:ba:23: 13:13:33:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ1SfcDYV6d+z0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MThjZTUwMWYtNmNiMS00NTEyLTgxMDUtMjgxMmYzOWVhYjVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBmUi8PzKXyP772LSkm1HjwYVG9Z4gyW1XGI g4XY8uhay4gytELM845gxZXs+R3kMUfQJHXLM6XyWtX9yAuxYZJv2/WDD5jj/gch Xb3DToNYUoUkdNcMAzFwy7IocdZgfKqQb3EbcuxcDNZhf+8MdqjevJORQDBEhE8D 1tkCthEpu0xld2616+DOtJq92mzYYnHCTEwU0Mc8m1Fz7e9q2gnaTlEGcpGp4OYk y43rgrVhZpcg0Brd1IZARLNP+K7b6dIAuGW5Tgp/LZxhreo2oL8kbuANc7oAIE2Z yUI8yei2tbZJOufOMkbG98f4dnpDsNV+q9N1kMrPvUtL+XQTxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOdDtf81SOkinjcMzYPMnZ8Ob3gxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzZhM2VjOGMtY2YyMy0z NDZmLWIxOTMtMjAyNTdiM2I5OGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK05MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJmSiOxZEEd+JR0TZ1kj1hImeQLGu/oIoudR9QsysgLqkYQYpDENpf2k w4UQ+Tfy7owSd8BsHsJllmBazx7oI73i/5fVrqRT8xNJLIdGgKAauBkwvtIhV3E7 cm7mfQyBs2BdSijfkJKqfacjfhU5INYZiDbfmiVFezsPtwL6B7HHvQ39kO8eJitc Tz1CjZ+k4pA0iIIezGfBD3V9G/DsqX+x70BS0CbyYhWVAV/7rgfgeG/pzHgqO/MB aXl12yoVRsyedR2v9L3LlOS89VoBz2nhsTpu/LSjiFxLswr9eF/3hDq0ot5VJMIE oz9alzskvZtlcS26qHdV8jK6IxMTMyA= -----END CERTIFICATE-----Generated at Fri Apr 11 23:54:27 2025 by rpki-client