$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65ab1203-e86b-3353-a7ea-2ee805a2c1aa.roa File: 65ab1203-e86b-3353-a7ea-2ee805a2c1aa.roa (raw, json) Hash identifier: 0JS5fBbmmGODbZS927tbu9GFYF7KuAyqtUr8nLPdeAk= Subject key identifier: BB:9F:9C:3E:1C:2F:78:69:A6:2F:3B:C0:DF:7D:96:F5:1F:E0:95:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810C0035BADA3670939140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65ab1203-e86b-3353-a7ea-2ee805a2c1aa.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0c:00:35:ba:da:36:70:93:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=529eb98c-268b-4353-bf6c-fec335f8749b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:19:38:d0:80:38:b7:bd:b0:a4:3b:e9:50:df: e4:40:e1:d3:f8:a4:c8:7f:07:93:54:d0:f3:ce:7d: ce:a8:5c:90:00:11:55:cd:e2:3c:2c:3d:bd:d9:9b: c4:34:6f:af:5c:b4:b3:87:63:02:41:d4:78:27:3f: b3:b4:9a:56:8c:9b:f0:01:03:98:56:c0:7e:1a:49: d8:15:88:a8:05:c0:cc:b9:2f:e7:dd:f1:16:f1:d3: 5c:ab:92:22:ec:0a:0c:b7:46:e1:fd:7e:2e:df:0f: 74:f5:7a:8f:27:49:29:a7:86:38:a9:84:6c:c1:bc: fd:af:33:df:5f:3b:b7:c9:23:3e:4a:b1:6f:3e:23: 91:1b:0b:fc:5e:bd:28:25:8d:21:06:62:b3:60:97: 7c:1a:8b:7e:b4:5d:48:2d:6c:31:f9:33:e5:b7:65: 73:a2:ed:60:a4:a8:2a:fe:17:c5:18:06:2a:af:a9: 69:c4:30:40:6f:39:82:3b:04:e9:86:ff:0e:3f:ad: a9:6a:03:8b:aa:76:78:46:73:c8:93:4d:3a:72:20: cb:b7:0a:f2:12:28:ad:f0:22:d4:82:23:e6:ce:08: 1f:bd:a7:dd:b2:08:10:aa:42:b7:31:dd:64:32:ab: a5:e5:85:e3:21:9d:c8:d4:95:40:3a:62:8f:af:d0: 01:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9F:9C:3E:1C:2F:78:69:A6:2F:3B:C0:DF:7D:96:F5:1F:E0:95:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65ab1203-e86b-3353-a7ea-2ee805a2c1aa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:96:ca:d0:40:d4:99:c6:75:9d:5b:b1:49:1e:43:1a:a9:67: 65:b2:26:4c:91:81:08:81:4f:0e:45:8f:d6:9e:e7:c7:b6:fd: 2e:23:8c:ac:6a:6d:76:57:e4:91:19:9b:18:30:7d:5f:bd:fa: e7:07:32:ee:92:76:d5:d6:77:7e:95:12:10:85:d7:95:84:36: 93:e5:56:4e:7d:f9:c0:02:af:1c:5c:80:df:dd:0f:3e:e3:57: eb:f9:1a:f2:d3:fe:b9:51:66:14:66:72:7c:a8:5f:50:a2:6f: 2f:bb:cf:c2:c6:52:bb:11:06:5d:ed:67:61:c9:2b:17:44:19: 26:c2:2b:1b:96:b3:59:5f:3e:b5:c1:8d:aa:8c:6d:b7:76:6d: db:73:ab:49:2d:e0:a6:3a:32:28:37:e8:8a:7a:e4:53:bd:6e: 74:2e:ff:32:cf:47:05:aa:ce:a5:17:c2:8d:87:4e:64:c1:af: 08:5b:27:f0:22:57:0f:c9:55:af:8d:c0:e9:2e:67:e1:51:ca: 4d:b5:74:6e:d2:b2:e4:67:84:33:6b:ca:2e:e7:0f:36:71:da: d4:83:d2:9d:8e:fe:eb:43:4a:07:86:ae:b5:53:e0:a9:0e:c2: 87:33:a5:6c:94:7e:0e:a0:5e:ff:1c:50:f9:23:fc:ad:2d:b5: 21:0a:33:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQwANbraNnCTkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTI5ZWI5OGMtMjY4Yi00MzUzLWJmNmMtZmVjMzM1Zjg3NDliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1xk40IA4t72wpDvpUN/kQOHT+KTIfweTVNDz zn3OqFyQABFVzeI8LD292ZvENG+vXLSzh2MCQdR4Jz+ztJpWjJvwAQOYVsB+GknY FYioBcDMuS/n3fEW8dNcq5Ii7AoMt0bh/X4u3w909XqPJ0kpp4Y4qYRswbz9rzPf Xzu3ySM+SrFvPiORGwv8Xr0oJY0hBmKzYJd8Got+tF1ILWwx+TPlt2Vzou1gpKgq /hfFGAYqr6lpxDBAbzmCOwTphv8OP62pagOLqnZ4RnPIk006ciDLtwryEiit8CLU giPmzggfvafdsggQqkK3Md1kMqul5YXjIZ3I1JVAOmKPr9AB4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLufnD4cL3hppi87wN99lvUf4JWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjVhYjEyMDMtZTg2Yi0z MzUzLWE3ZWEtMmVlODA1YTJjMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIaWytBA1JnGdZ1bsUkeQxqpZ2WyJkyRgQiBTw5Fj9ae58e2/S4jjKxq bXZX5JEZmxgwfV+9+ucHMu6SdtXWd36VEhCF15WENpPlVk59+cACrxxcgN/dDz7j V+v5GvLT/rlRZhRmcnyoX1Ciby+7z8LGUrsRBl3tZ2HJKxdEGSbCKxuWs1lfPrXB jaqMbbd2bdtzq0kt4KY6Mig36Ip65FO9bnQu/zLPRwWqzqUXwo2HTmTBrwhbJ/Ai Vw/JVa+NwOkuZ+FRyk21dG7SsuRnhDNryi7nDzZx2tSD0p2O/utDSgeGrrVT4KkO woczpWyUfg6gXv8cUPkj/K0ttSEKMxs= -----END CERTIFICATE-----Generated at Sat Apr 12 01:14:57 2025 by rpki-client