$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa File: 5ee095b8-59da-3921-8e77-c6e3de85af8b.roa (raw, json) Hash identifier: 6T2ucOtLD0aC/tgxycoBPmBEYRuh+CeK3xxrwvK5zlQ= Subject key identifier: DA:A2:C7:62:BC:C2:04:C1:7A:63:00:58:DD:A4:78:F9:06:5D:1E:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5811060C4D90BE41B3CE600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:10:60:c4:d9:0b:e4:1b:3c:e6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=3a1a6fa3-a088-42a1-9f61-653a440f63dc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:89:31:e7:7f:ef:1d:d1:77:a8:bf:ca:b3:21: 14:b8:d1:94:ca:1d:e9:8b:5a:1d:f6:08:0d:cc:01: 5c:14:51:79:1f:ea:34:31:9d:a8:3a:51:49:34:59: 68:32:22:ad:d1:ce:9e:0b:b0:a9:33:a8:31:b8:16: 40:f0:2f:d1:d6:f1:23:a0:70:e1:e9:29:b2:da:90: 6e:2c:ee:15:4e:8a:78:85:61:79:c1:02:f5:35:75: 10:e6:92:16:c9:54:d6:e1:b9:b3:26:8d:48:d7:b8: 57:e4:d0:d5:fd:e3:06:c1:3d:ea:bf:c0:91:fd:43: 82:f1:09:c8:43:36:24:a7:90:4d:fe:67:24:88:83: 59:f2:2a:05:7d:b1:7b:e3:75:fa:be:69:05:38:5d: 73:0d:fb:bf:6a:fb:81:6b:46:6e:93:9d:4d:59:a4: cd:35:89:77:d7:b4:83:2f:ab:fa:0e:b8:cd:69:a5: b9:c7:55:20:bb:e7:56:b2:12:3a:11:63:d0:07:d6: 7a:c7:c2:76:9e:eb:9f:cc:a7:37:26:57:7e:34:58: 3e:91:cf:7d:60:6e:39:67:06:f1:dd:ba:b7:4c:d7: da:2d:a7:4b:e8:45:74:6d:cd:f5:37:b8:97:39:a9: 2a:fd:b4:f3:57:d6:38:36:2f:c7:95:41:04:d2:26: 6f:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:A2:C7:62:BC:C2:04:C1:7A:63:00:58:DD:A4:78:F9:06:5D:1E:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:04:69:40:c8:f2:87:82:52:5b:ee:8c:a3:14:1c:fc:9f:69: 54:e1:58:6b:17:bb:b1:ec:62:d0:5d:3e:bf:6b:3a:31:26:11: 4c:11:cd:4f:81:d8:0d:78:5e:10:a6:db:1e:c0:b2:3a:70:47: 31:ab:81:b0:f0:e5:6b:f9:2b:99:77:5d:7b:2f:0d:7f:20:85: 5d:38:20:bc:24:01:d7:b9:5a:21:63:24:92:80:f1:27:ba:b8: 1d:f2:db:3b:64:27:97:27:c3:4e:84:fb:af:11:95:3b:39:b2: be:eb:55:b7:b2:a5:24:52:56:fe:f8:77:0f:63:de:65:40:a4: 45:00:3d:4b:56:ba:b0:e6:cf:f2:fe:40:bc:8b:56:a9:cb:f4: da:83:58:cf:dd:10:35:ea:f0:7a:58:7a:46:ec:01:2a:6e:62: 31:04:64:fa:ba:27:11:35:c8:e6:8f:eb:d3:36:bf:54:7a:24: 83:9c:50:0f:ec:6a:d5:06:c6:5c:2d:5b:f8:b7:33:af:df:fa: 70:7e:2f:a5:a7:11:2b:cf:33:5f:c5:dd:96:5c:ef:62:51:aa: 60:c9:62:ca:63:91:4b:01:33:d3:f0:5f:00:50:11:48:42:95: 16:77:65:2b:5e:3a:7e:c7:b0:18:77:42:da:29:5e:35:13:a5: 35:d1:62:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRBgxNkL5Bs85gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk M2ExYTZmYTMtYTA4OC00MmExLTlmNjEtNjUzYTQ0MGY2M2RjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwokx53/vHdF3qL/KsyEUuNGUyh3pi1od9ggN zAFcFFF5H+o0MZ2oOlFJNFloMiKt0c6eC7CpM6gxuBZA8C/R1vEjoHDh6Smy2pBu LO4VTop4hWF5wQL1NXUQ5pIWyVTW4bmzJo1I17hX5NDV/eMGwT3qv8CR/UOC8QnI QzYkp5BN/mckiINZ8ioFfbF743X6vmkFOF1zDfu/avuBa0Zuk51NWaTNNYl317SD L6v6DrjNaaW5x1Ugu+dWshI6EWPQB9Z6x8J2nuufzKc3Jld+NFg+kc99YG45Zwbx 3bq3TNfaLadL6EV0bc31N7iXOakq/bTzV9Y4Ni/HlUEE0iZv2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNqix2K8wgTBemMAWN2kePkGXR5xMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWVlMDk1YjgtNTlkYS0z OTIxLThlNzctYzZlM2RlODVhZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4EaUDI8oeCUlvujKMUHPyfaVThWGsXu7HsYtBdPr9rOjEmEUwRzU+B 2A14XhCm2x7AsjpwRzGrgbDw5Wv5K5l3XXsvDX8ghV04ILwkAde5WiFjJJKA8Se6 uB3y2ztkJ5cnw06E+68RlTs5sr7rVbeypSRSVv74dw9j3mVApEUAPUtWurDmz/L+ QLyLVqnL9NqDWM/dEDXq8HpYekbsASpuYjEEZPq6JxE1yOaP69M2v1R6JIOcUA/s atUGxlwtW/i3M6/f+nB+L6WnESvPM1/F3ZZc72JRqmDJYspjkUsBM9PwXwBQEUhC lRZ3ZSteOn7HsBh3QtopXjUTpTXRYrc= -----END CERTIFICATE-----Generated at Sun Feb 16 15:32:20 2025 by rpki-client