$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa File: 4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa (raw, json) Hash identifier: xu31Vw31irnNlBPUxp0Qr7cjBuzQLpOsNDJzzDI2NIU= Subject key identifier: BE:D6:5A:7E:5C:B5:CF:D1:5F:00:6D:66:A2:D5:A1:75:DB:6A:5E:F6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810E832E6697548C1ED100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0e:83:2e:66:97:54:8c:1e:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=93a78dda-ef4a-4458-aa2c-c2fed23acbdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:92:db:10:57:53:3f:61:86:c0:51:20:00:08: ca:5b:90:79:ff:02:de:bb:f7:8c:f6:33:96:bf:5b: f3:b2:dc:32:5c:b2:9e:54:a0:2a:1c:e5:d5:85:a3: f9:54:21:22:19:7e:d6:7a:f9:7f:b2:fc:85:66:a7: bf:85:cc:84:b6:40:e6:f7:c9:37:ef:13:a1:73:5d: 3d:37:bd:ff:13:5d:ed:93:cd:93:86:ed:ba:47:eb: 97:38:e6:2a:b7:95:4f:6f:72:99:b4:77:94:45:da: 52:72:2d:89:b1:c3:58:12:81:4a:7c:45:54:24:94: b4:b6:60:a1:5f:e8:f5:f6:4e:74:17:c1:f1:b0:0a: 63:63:d6:3f:c7:35:42:4e:5f:f0:d6:ce:76:bd:3b: fe:fe:f3:b0:f6:15:4e:60:73:47:21:ec:a0:0d:6a: 98:f2:4f:c5:70:ec:89:ca:79:cf:d0:c9:fe:83:a7: b5:d4:45:8b:08:a6:c7:40:1d:a7:56:b7:4b:10:8b: b4:65:5b:2b:42:85:b8:6b:44:b3:1b:9d:90:0b:4b: 07:ca:15:51:f5:a6:0e:d5:9c:4c:d5:53:08:8f:9e: 1f:07:ed:37:25:6f:29:c2:bc:64:f3:bf:b7:9e:0a: c8:e6:ae:21:31:a5:03:fb:43:4f:42:42:a3:a2:fb: 7d:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:D6:5A:7E:5C:B5:CF:D1:5F:00:6D:66:A2:D5:A1:75:DB:6A:5E:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:3b:a6:9f:2b:e1:9f:07:f3:0c:f7:97:a7:17:78:fe:dd:3a: ca:c3:25:80:6d:30:cf:a1:14:d7:54:16:d4:e7:cb:03:9a:da: 78:25:ae:7f:a4:03:69:3c:68:27:34:06:db:0c:03:a0:fb:64: e3:6e:df:c8:e6:86:f2:4e:2f:41:5d:51:a5:ab:21:df:a9:ec: 15:cd:55:9c:2a:40:0f:07:ba:28:31:95:95:85:0a:ad:f0:36: 81:63:cd:21:4d:18:c7:a9:00:c5:b6:34:0c:c5:21:d3:14:5e: d6:db:bc:45:ac:9c:4c:fc:69:6c:f5:cf:bf:a9:6a:49:76:4d: bb:a8:88:77:9f:e3:85:fa:15:17:2c:7f:29:c4:2d:90:d2:05: c9:ca:1b:e4:94:8a:7e:d0:86:0f:91:79:e1:e6:5b:fe:3d:3b: 88:ed:83:32:bb:15:a7:03:a5:4b:5c:7a:92:41:a5:88:e4:5d: c2:fe:8a:ba:43:15:9e:6c:b1:47:27:4d:e5:e6:f0:7c:b1:e5: ce:d6:69:3a:d1:47:be:8a:af:95:f8:73:d3:eb:da:4e:02:5a: c5:70:e6:19:65:ca:df:5b:35:56:d8:cc:f7:85:a6:83:c4:b4: 1b:11:64:35:eb:4a:55:24:e2:90:30:e8:3a:ee:8e:b3:89:ea: d0:5a:5e:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ6DLmaXVIwe0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OTNhNzhkZGEtZWY0YS00NDU4LWFhMmMtYzJmZWQyM2FjYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJLbEFdTP2GGwFEgAAjKW5B5/wLeu/eM9jOW v1vzstwyXLKeVKAqHOXVhaP5VCEiGX7Wevl/svyFZqe/hcyEtkDm98k37xOhc109 N73/E13tk82Thu26R+uXOOYqt5VPb3KZtHeURdpSci2JscNYEoFKfEVUJJS0tmCh X+j19k50F8HxsApjY9Y/xzVCTl/w1s52vTv+/vOw9hVOYHNHIeygDWqY8k/FcOyJ ynnP0Mn+g6e11EWLCKbHQB2nVrdLEIu0ZVsrQoW4a0SzG52QC0sHyhVR9aYO1ZxM 1VMIj54fB+03JW8pwrxk87+3ngrI5q4hMaUD+0NPQkKjovt9PwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL7WWn5ctc/RXwBtZqLVoXXbal72MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGMwYzY4NzgtZmM2MS0z MjkyLTk5NTAtZWE1YTYyY2M2YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC07pp8r4Z8H8wz3l6cXeP7dOsrDJYBtMM+hFNdUFtTnywOa2nglrn+k A2k8aCc0BtsMA6D7ZONu38jmhvJOL0FdUaWrId+p7BXNVZwqQA8HuigxlZWFCq3w NoFjzSFNGMepAMW2NAzFIdMUXtbbvEWsnEz8aWz1z7+pakl2TbuoiHef44X6FRcs fynELZDSBcnKG+SUin7Qhg+ReeHmW/49O4jtgzK7FacDpUtcepJBpYjkXcL+irpD FZ5ssUcnTeXm8Hyx5c7WaTrRR76Kr5X4c9Pr2k4CWsVw5hllyt9bNVbYzPeFpoPE tBsRZDXrSlUk4pAw6DrujrOJ6tBaXus= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:43 2025 by rpki-client