$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59f79d8a-390c-3e39-b486-15f3601ac1d3.roa File: 59f79d8a-390c-3e39-b486-15f3601ac1d3.roa (raw, json) Hash identifier: VTnpgiM9nIRbOW2y5HwiRjcJdVtT+26XuhynmaOLoTU= Subject key identifier: F8:44:42:2F:BB:89:05:EF:8C:B2:80:9D:5F:BC:26:D2:F4:28:30:1F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819E466CF3FD021FCF6980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59f79d8a-390c-3e39-b486-15f3601ac1d3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 17 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9e:46:6c:f3:fd:02:1f:cf:69:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d80273d1-d162-4fb6-813f-83386966ccb1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:4d:6a:92:f1:46:ed:31:55:71:b6:a7:fd:71: 2c:c4:88:ad:d1:b1:5f:54:56:70:e2:89:be:2f:ec: 2b:62:b0:d0:b2:f8:0f:b4:ed:c3:b2:8b:4a:6d:99: 44:e5:9d:17:5b:c8:44:db:e7:54:26:51:b5:d2:a4: 52:cf:da:ae:0a:0d:bc:9e:54:4d:d1:be:a5:a5:3d: a0:13:8a:ab:58:75:97:08:1f:97:1f:c1:cc:e6:bf: c9:c0:d6:72:44:c0:cc:7f:dd:ce:75:da:42:62:23: 53:1b:f3:53:83:24:31:44:1e:8f:29:7f:ef:14:a1: 09:85:b4:53:f7:27:94:f9:4e:3c:09:75:46:12:8e: 10:88:a5:df:ac:9c:64:e6:ce:88:53:50:9f:fd:0b: 68:a0:84:d1:ed:76:d6:49:e3:80:09:7c:f6:98:e2: ed:72:9d:ae:bd:41:2e:d6:07:02:da:7d:21:e4:19: 2d:11:5b:8d:dc:5d:44:f0:a4:00:bf:38:6d:1f:92: b7:ac:c0:5e:98:a4:52:fc:ac:b1:95:42:92:d9:c4: be:a5:58:96:e5:45:c3:63:ec:c0:38:24:dc:60:4a: ba:fd:8d:e9:9b:85:07:33:50:63:35:72:8b:e7:51: c7:0b:92:14:a3:37:c3:a4:43:43:1d:29:40:b7:bc: d5:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:44:42:2F:BB:89:05:EF:8C:B2:80:9D:5F:BC:26:D2:F4:28:30:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/59f79d8a-390c-3e39-b486-15f3601ac1d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:31:79:80:b6:24:1c:4b:37:ad:4a:ee:1f:b1:63:2e:09:f1: c2:9d:d8:ce:64:22:21:0a:bb:23:0d:89:14:2f:8b:5d:1a:4d: 45:9e:62:67:44:ca:94:34:d9:92:7a:75:d5:53:98:c0:58:e1: cf:2e:01:07:96:89:fb:6a:e0:1b:15:e1:8d:2b:65:75:00:76: 9c:62:55:8e:7f:5c:ec:84:00:5c:34:64:48:4c:e5:e1:fa:d7: 57:cc:90:6d:f1:65:60:11:a4:50:3d:dd:c2:0d:46:99:e9:ea: ff:e8:a7:f3:77:c9:28:97:b2:cb:78:2f:49:38:ca:bd:7d:05: d5:91:65:18:d0:d7:77:ec:a7:dd:72:a0:e5:ba:31:68:89:b9: 8e:c2:07:80:d7:db:59:c9:8c:ef:82:f6:45:01:5a:32:a1:50: 70:cf:be:91:20:a8:86:86:4f:0b:5d:9a:79:a4:f4:72:c9:d1: 09:67:6b:82:d7:95:83:d4:06:02:d9:7f:61:ce:7e:4b:d2:4a: 6d:0c:19:d6:9b:5a:41:8e:8d:c7:ed:ed:c6:d8:b9:dd:b0:fb: 84:f9:92:a6:ab:cf:86:39:a3:dc:52:11:f8:d5:9a:e6:11:07: 13:90:f4:3a:ab:48:50:3f:8d:c6:19:a7:cb:22:02:95:4f:ab: 2b:7c:08:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ5GbPP9Ah/PaYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDgwMjczZDEtZDE2Mi00ZmI2LTgxM2YtODMzODY5NjZjY2IxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk1qkvFG7TFVcban/XEsxIit0bFfVFZw4om+ L+wrYrDQsvgPtO3DsotKbZlE5Z0XW8hE2+dUJlG10qRSz9quCg28nlRN0b6lpT2g E4qrWHWXCB+XH8HM5r/JwNZyRMDMf93OddpCYiNTG/NTgyQxRB6PKX/vFKEJhbRT 9yeU+U48CXVGEo4QiKXfrJxk5s6IU1Cf/QtooITR7XbWSeOACXz2mOLtcp2uvUEu 1gcC2n0h5BktEVuN3F1E8KQAvzhtH5K3rMBemKRS/KyxlUKS2cS+pViW5UXDY+zA OCTcYEq6/Y3pm4UHM1BjNXKL51HHC5IUozfDpENDHSlAt7zVBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhEQi+7iQXvjLKAnV+8JtL0KDAfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTlmNzlkOGEtMzkwYy0z ZTM5LWI0ODYtMTVmMzYwMWFjMWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACExeYC2JBxLN61K7h+xYy4J8cKd2M5kIiEKuyMNiRQvi10aTUWeYmdE ypQ02ZJ6ddVTmMBY4c8uAQeWiftq4BsV4Y0rZXUAdpxiVY5/XOyEAFw0ZEhM5eH6 11fMkG3xZWARpFA93cINRpnp6v/op/N3ySiXsst4L0k4yr19BdWRZRjQ13fsp91y oOW6MWiJuY7CB4DX21nJjO+C9kUBWjKhUHDPvpEgqIaGTwtdmnmk9HLJ0Qlna4LX lYPUBgLZf2HOfkvSSm0MGdabWkGOjcft7cbYud2w+4T5kqarz4Y5o9xSEfjVmuYR BxOQ9DqrSFA/jcYZp8siApVPqyt8CIU= -----END CERTIFICATE-----Generated at Tue Apr 15 18:37:55 2025 by rpki-client