$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa File: 4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa (raw, json) Hash identifier: wfVE+W+c+/Yax8Qab0XBnDMLsm5P/2XRZg73rAyEPzY= Subject key identifier: 93:79:41:5B:BF:31:D3:4B:3A:E2:BD:B6:55:18:46:47:84:32:B6:0E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581A1C1180A01C59A99BA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:a1:c1:18:0a:01:c5:9a:99:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0a53399d-fd04-41e6-89c2-0df943b59e15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1a:85:1b:f0:5e:cb:34:0b:df:30:85:d7:83: 4e:99:8a:c1:d2:11:0b:6a:00:cf:ce:e6:09:5e:79: ea:0f:03:92:55:3d:d9:b7:64:94:6e:f8:c9:d7:41: 81:e1:ca:23:dd:20:65:90:d7:b6:4b:56:07:93:4d: 8f:fc:9c:6c:ab:72:3b:89:60:8b:e1:1e:1a:21:1c: 56:14:ad:62:19:b6:ed:ef:ba:1f:00:4b:8e:4b:96: 45:18:36:3a:0f:aa:99:d7:5b:fc:07:72:cb:43:f0: 51:1d:a5:f0:57:fb:36:2d:ca:f3:b2:dc:90:78:b1: d8:76:2f:ad:97:1c:56:72:d3:6f:de:b7:e1:67:24: 1f:fe:5b:b8:ac:ff:92:4e:ce:84:71:17:df:fc:10: c6:f9:b2:76:da:85:50:05:89:d4:ff:8f:86:ab:2a: 5e:fd:5c:b0:1b:98:5f:e8:53:97:93:69:d8:8d:c8: 78:63:73:b6:02:94:1f:ed:1d:67:c9:15:6b:80:b1: e4:2f:2e:4f:71:a7:81:a2:50:34:be:90:c7:a6:d8: 20:3a:d3:55:a6:91:1f:a0:27:a4:a4:15:cf:fc:04: 8a:66:19:b2:1f:8c:47:27:a3:8e:8d:75:19:77:ae: 2f:18:9c:c4:88:97:07:93:d1:36:33:d7:31:5c:7c: 39:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:79:41:5B:BF:31:D3:4B:3A:E2:BD:B6:55:18:46:47:84:32:B6:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4b96b65f-cfe1-33f1-ad1b-617582e4b31d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:95:cc:8c:99:b4:5d:99:6f:09:66:84:50:30:a0:0a:2f:99: 3a:6e:fc:89:6e:0c:b7:96:33:a4:dd:81:3e:a5:0e:77:6f:e6: 59:0c:6d:16:cb:f6:3e:5f:cf:06:0b:d9:52:1d:2f:ec:15:fa: f2:0e:76:b5:78:31:bd:6e:57:69:48:00:ee:d1:5b:8f:56:90: d4:81:d2:9e:92:cf:c1:a0:2b:bb:55:7f:0e:c9:47:23:de:f6: a5:fe:b8:45:01:4b:b7:b1:ae:fa:ba:69:1f:aa:82:10:87:22: 57:1e:a5:af:97:b4:30:9e:07:3b:3d:2f:eb:e8:3e:3a:0e:87: ef:5c:53:f0:37:21:b8:c3:69:5e:29:ac:a8:48:5f:f7:cd:38: 2f:09:19:97:be:b3:b4:c7:0e:45:65:68:c6:67:5f:c7:6f:7b: be:10:c4:9e:1b:d8:c2:88:9a:38:20:63:79:b7:11:db:f7:dc: 5f:a3:ba:0f:22:69:91:e8:17:82:0b:f2:ff:18:62:22:e5:fd: 43:0f:ec:59:8f:18:32:ea:e1:e5:6a:3c:81:47:41:b3:5c:ca: 04:53:bf:a0:c6:5a:dc:74:1f:2a:85:d3:ac:c0:d7:41:5f:ed: ec:18:91:b7:4f:62:8a:c1:66:7c:57:65:4a:6d:7f:bf:f5:ee: 26:35:19:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaHBGAoBxZqZugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGE1MzM5OWQtZmQwNC00MWU2LTg5YzItMGRmOTQzYjU5ZTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihqFG/BeyzQL3zCF14NOmYrB0hELagDPzuYJ XnnqDwOSVT3Zt2SUbvjJ10GB4coj3SBlkNe2S1YHk02P/Jxsq3I7iWCL4R4aIRxW FK1iGbbt77ofAEuOS5ZFGDY6D6qZ11v8B3LLQ/BRHaXwV/s2LcrzstyQeLHYdi+t lxxWctNv3rfhZyQf/lu4rP+STs6EcRff/BDG+bJ22oVQBYnU/4+Gqype/VywG5hf 6FOXk2nYjch4Y3O2ApQf7R1nyRVrgLHkLy5PcaeBolA0vpDHptggOtNVppEfoCek pBXP/ASKZhmyH4xHJ6OOjXUZd64vGJzEiJcHk9E2M9cxXHw5swIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJN5QVu/MdNLOuK9tlUYRkeEMrYOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGI5NmI2NWYtY2ZlMS0z M2YxLWFkMWItNjE3NTgyZTRiMzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2VzIyZtF2ZbwlmhFAwoAovmTpu/IluDLeWM6TdgT6lDndv5lkMbRbL 9j5fzwYL2VIdL+wV+vIOdrV4Mb1uV2lIAO7RW49WkNSB0p6Sz8GgK7tVfw7JRyPe 9qX+uEUBS7exrvq6aR+qghCHIlcepa+XtDCeBzs9L+voPjoOh+9cU/A3IbjDaV4p rKhIX/fNOC8JGZe+s7THDkVlaMZnX8dve74QxJ4b2MKImjggY3m3Edv33F+jug8i aZHoF4IL8v8YYiLl/UMP7FmPGDLq4eVqPIFHQbNcygRTv6DGWtx0HyqF06zA10Ff 7ewYkbdPYorBZnxXZUptf7/17iY1GbE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:40:36 2025 by rpki-client