$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3969b685-d1d4-3904-8f7b-307adcaa6d35.roa File: 3969b685-d1d4-3904-8f7b-307adcaa6d35.roa (raw, json) Hash identifier: n1lYWNsudSpCm0mFGtqO8OeBEpbUM7fcxbH3SOlZoRU= Subject key identifier: 5D:8D:35:9A:20:0A:8B:CC:15:24:4E:0B:A4:FA:6F:78:6E:66:DA:24 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581A057790A9BD95EE182A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3969b685-d1d4-3904-8f7b-307adcaa6d35.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:a0:57:79:0a:9b:d9:5e:e1:82:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=10c4ca3e-6dc7-462f-b4f3-0fd4ce206058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:d5:6d:f5:12:d3:85:b9:07:fe:c5:0e:86:22: 93:e3:c6:8c:12:9c:94:09:1d:18:35:6d:6a:e7:c6: 05:f5:c9:68:62:48:7e:9e:24:0e:3f:38:c6:07:f6: df:e1:7f:10:f3:de:98:8d:4d:fd:55:11:6b:a1:1f: 6f:ed:d5:db:33:9b:6f:8c:4e:2a:11:88:7c:8c:73: 01:00:9b:fa:62:1b:df:55:73:70:73:91:ff:e2:21: d0:53:a5:ec:29:79:75:09:09:ae:6b:47:30:37:21: b1:bc:a4:53:81:0c:1a:27:6b:6d:3a:8a:a9:5e:33: de:ff:ca:c8:8a:16:a3:fe:05:17:74:38:15:42:38: ec:45:5b:99:02:1d:92:05:a2:bf:f5:e7:2b:7a:8d: b0:3c:01:db:84:4e:8c:45:b9:f9:62:2e:99:42:d3: c4:77:d6:08:9e:50:ca:95:d0:ea:be:1c:4b:d6:f4: 32:b6:ff:cc:44:91:6f:69:1c:9b:6b:85:8d:b3:e2: e2:a8:2c:b8:f1:26:06:35:ab:d2:12:76:8e:96:50: 4d:b1:f7:9a:4c:52:4f:98:f0:61:2b:4b:c2:04:70: 26:36:a8:25:28:22:cf:38:8f:4b:88:c8:b0:3a:79: ff:2c:8c:90:0d:9a:ca:2b:b5:2c:d3:79:95:b2:67: 34:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:8D:35:9A:20:0A:8B:CC:15:24:4E:0B:A4:FA:6F:78:6E:66:DA:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3969b685-d1d4-3904-8f7b-307adcaa6d35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:26:10:3b:72:16:5c:d0:92:6c:23:3b:cd:ac:da:7a:e3:47: 13:be:3a:21:66:ec:17:93:0b:7c:ca:fe:e7:93:f3:ec:37:3e: fa:56:9f:02:59:03:aa:a7:81:d8:4c:e9:f5:9f:6d:7c:7a:dd: b5:a9:30:ca:04:90:fc:f9:f3:c6:c2:b9:8c:06:2a:ff:cf:52: 77:5a:85:00:41:13:ca:2a:4e:42:e3:fa:6c:96:b7:42:81:35: 2f:90:d5:e2:29:76:46:62:0f:68:8d:12:f4:28:e2:ff:36:0e: b3:3e:43:77:9d:7e:62:98:f8:b5:0b:bb:0c:e2:3e:ec:c8:38: a3:f2:de:78:d0:c9:d0:be:dd:8d:4e:f9:c7:40:f8:9b:e5:0b: 0c:51:3f:a9:8a:a8:87:d1:85:ed:e2:de:a0:cc:aa:a7:37:d9: 5b:46:98:d6:aa:63:7d:df:67:95:79:40:f7:76:19:9c:64:ac: cd:51:1e:0c:f9:d6:00:f9:79:86:35:d7:38:cd:79:dd:78:22: 2e:c6:7a:19:f7:cd:49:14:f9:01:f5:f8:9c:24:62:c7:6f:73: 60:13:5c:14:04:b7:67:ad:db:20:a5:34:d3:fc:ac:76:de:49: 31:4d:fd:b5:74:51:e6:ee:78:41:3d:03:77:21:92:b2:46:7b: c7:2a:7d:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaBXeQqb2V7hgqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTBjNGNhM2UtNmRjNy00NjJmLWI0ZjMtMGZkNGNlMjA2MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkdVt9RLThbkH/sUOhiKT48aMEpyUCR0YNW1q 58YF9cloYkh+niQOPzjGB/bf4X8Q896YjU39VRFroR9v7dXbM5tvjE4qEYh8jHMB AJv6YhvfVXNwc5H/4iHQU6XsKXl1CQmua0cwNyGxvKRTgQwaJ2ttOoqpXjPe/8rI ihaj/gUXdDgVQjjsRVuZAh2SBaK/9ecreo2wPAHbhE6MRbn5Yi6ZQtPEd9YInlDK ldDqvhxL1vQytv/MRJFvaRyba4WNs+LiqCy48SYGNavSEnaOllBNsfeaTFJPmPBh K0vCBHAmNqglKCLPOI9LiMiwOnn/LIyQDZrKK7Us03mVsmc0RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF2NNZogCovMFSROC6T6b3huZtokMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzk2OWI2ODUtZDFkNC0z OTA0LThmN2ItMzA3YWRjYWE2ZDM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAmEDtyFlzQkmwjO82s2nrjRxO+OiFm7BeTC3zK/ueT8+w3PvpWnwJZ A6qngdhM6fWfbXx63bWpMMoEkPz588bCuYwGKv/PUndahQBBE8oqTkLj+myWt0KB NS+Q1eIpdkZiD2iNEvQo4v82DrM+Q3edfmKY+LULuwziPuzIOKPy3njQydC+3Y1O +cdA+JvlCwxRP6mKqIfRhe3i3qDMqqc32VtGmNaqY33fZ5V5QPd2GZxkrM1RHgz5 1gD5eYY11zjNed14Ii7Gehn3zUkU+QH1+JwkYsdvc2ATXBQEt2et2yClNNP8rHbe STFN/bV0UebueEE9A3chkrJGe8cqfQ4= -----END CERTIFICATE-----Generated at Fri Mar 14 09:45:33 2025 by rpki-client