$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa File: 494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa (raw, json) Hash identifier: hlhGHJLmlJPwlPy8xt2SjTOlU0iiNEB1QJqpP4gP/g0= Subject key identifier: 35:2B:19:15:0D:A6:66:A0:37:71:81:F8:2B:04:5C:A0:0A:13:97:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819CE69410EF952A0202C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9c:e6:94:10:ef:95:2a:02:02:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d3f1fc37-eaea-4e5f-b54b-788b41acf6d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:01:a0:a8:ea:49:56:81:40:96:ee:c3:ae:e9: 53:4d:fd:54:b2:c0:18:e7:4f:36:89:0b:a9:f2:df: 06:65:5f:f3:11:b0:25:40:c4:44:4e:0c:7f:c4:9e: bc:73:e9:6d:95:f7:e8:c5:8b:2a:bc:a2:97:9f:2f: d0:5b:e1:b0:66:25:c1:c9:0b:e9:cd:81:23:3d:df: 30:9f:88:08:90:7a:84:38:d0:3d:1b:d2:97:80:f6: 24:6c:80:35:5d:40:bb:b2:34:8a:b4:fa:7f:fc:81: b3:cb:cb:ab:28:f1:58:c0:d7:96:d2:49:cb:8d:f0: e3:0c:73:e8:e3:aa:9f:42:a2:ef:76:b8:74:34:d9: 6c:8d:f7:4d:f1:b4:b7:dc:b6:c4:5c:ea:8a:a6:d5: e4:75:f1:fb:67:41:41:f7:a9:8d:7b:d2:0c:19:8f: 6d:39:b5:85:7d:4c:ca:ee:db:18:99:67:39:0e:21: 1c:d2:22:a7:01:86:6d:e1:83:47:cf:12:57:4f:92: 60:0c:57:fa:28:a0:b4:a2:6e:64:98:5e:d1:8f:12: 38:d4:21:b3:83:68:ee:0d:f9:4d:6e:00:80:d7:9b: 65:26:b5:22:82:fc:3b:89:fa:7f:04:41:9e:80:fd: b7:13:88:09:10:5f:2b:fa:5a:5f:a5:93:6e:38:ef: 18:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:2B:19:15:0D:A6:66:A0:37:71:81:F8:2B:04:5C:A0:0A:13:97:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:bc:b8:4f:07:d1:d1:75:5a:49:23:6a:d9:c1:cc:c1:54:2d: e9:b9:a0:54:7c:81:4d:8f:ba:08:4a:b1:78:7b:b5:91:07:3d: 7a:d5:f9:11:17:fc:60:7e:96:59:4e:7b:25:e1:d8:60:7f:68: f6:24:30:ca:b2:68:d1:33:51:01:dd:91:b0:10:56:57:f5:71: d7:7c:47:4c:b4:78:84:50:38:c4:59:ff:58:48:b3:53:1e:f0: dd:10:33:75:34:89:63:c0:bd:98:62:af:52:01:63:8d:57:1a: 17:72:59:f4:2f:2a:94:b7:c5:90:8d:bb:88:20:36:12:e9:4f: 28:05:c0:ef:46:44:51:9d:b3:70:90:bb:c4:87:24:bf:4a:d9: f6:3e:ae:2d:27:28:a0:90:ee:b5:a4:c5:98:9c:90:62:5e:d7: 6a:b7:e9:6e:40:5b:47:7e:96:dc:93:53:63:c8:74:64:33:3e: a2:bd:e1:cc:ec:2d:7d:89:20:1e:cc:1c:e5:70:a6:f4:83:33: 88:15:b5:aa:43:a4:36:84:0b:89:95:2e:d1:a1:25:a1:f0:93: 4a:f8:a7:88:4f:fd:86:ea:f3:c9:f1:4f:c5:c6:7e:0a:ac:20: eb:b4:3b:aa:a0:60:65:aa:5c:8a:9d:ce:cc:4d:9a:fe:fb:cd: 28:84:cc:a6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZzmlBDvlSoCAsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDNmMWZjMzctZWFlYS00ZTVmLWI1NGItNzg4YjQxYWNmNmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAGgqOpJVoFAlu7DrulTTf1UssAY5082iQup 8t8GZV/zEbAlQMRETgx/xJ68c+ltlffoxYsqvKKXny/QW+GwZiXByQvpzYEjPd8w n4gIkHqEONA9G9KXgPYkbIA1XUC7sjSKtPp//IGzy8urKPFYwNeW0knLjfDjDHPo 46qfQqLvdrh0NNlsjfdN8bS33LbEXOqKptXkdfH7Z0FB96mNe9IMGY9tObWFfUzK 7tsYmWc5DiEc0iKnAYZt4YNHzxJXT5JgDFf6KKC0om5kmF7RjxI41CGzg2juDflN bgCA15tlJrUigvw7ifp/BEGegP23E4gJEF8r+lpfpZNuOO8Y8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUrGRUNpmagN3GB+CsEXKAKE5eVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDk0ZDVmYTMtMzA5YS0z Zjg1LThlYjQtYTFiNTlmZmM2YzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADi8uE8H0dF1WkkjatnBzMFULem5oFR8gU2PughKsXh7tZEHPXrV+REX /GB+lllOeyXh2GB/aPYkMMqyaNEzUQHdkbAQVlf1cdd8R0y0eIRQOMRZ/1hIs1Me 8N0QM3U0iWPAvZhir1IBY41XGhdyWfQvKpS3xZCNu4ggNhLpTygFwO9GRFGds3CQ u8SHJL9K2fY+ri0nKKCQ7rWkxZickGJe12q36W5AW0d+ltyTU2PIdGQzPqK94czs LX2JIB7MHOVwpvSDM4gVtapDpDaEC4mVLtGhJaHwk0r4p4hP/Ybq88nxT8XGfgqs IOu0O6qgYGWqXIqdzsxNmv77zSiEzKY= -----END CERTIFICATE-----Generated at Fri Mar 14 11:06:37 2025 by rpki-client