$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa File: 675039ce-cff0-376c-8b63-51645ec4d3ea.roa (raw, json) Hash identifier: r/9wYgp7TFXug8OihPxRi9cIN6CPCiT++DQD/KjqzCE= Subject key identifier: 5A:E5:E3:C3:CC:35:E9:FD:94:71:67:BB:B0:A2:C1:E5:6F:95:DB:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810C3FA8C565F28606BA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0c:3f:a8:c5:65:f2:86:06:ba:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=66a327c8-bd59-41dd-9147-8fe19e56021a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:da:df:3c:b1:7e:c8:00:0f:b8:49:48:62:23: 73:f9:1e:8d:73:c2:58:4a:2c:15:55:71:54:76:90: b5:a3:30:14:33:55:74:3d:ad:74:23:62:92:bc:1b: 7a:fc:e3:67:01:b6:de:3f:53:bb:00:6f:5b:ad:52: 01:ec:34:6b:d1:43:3f:2e:c0:58:2b:b5:b4:92:b1: a0:b2:bb:52:fd:4a:54:91:ea:b8:15:87:eb:d8:57: 6d:c0:bc:52:17:86:e3:41:dd:96:08:e7:48:d1:d4: e2:46:ba:d8:40:cd:ae:e3:d3:23:1a:4c:11:a9:9d: 85:86:c3:48:48:51:1a:7e:93:dc:8c:62:3e:ee:21: 69:ae:45:79:7a:bf:b7:64:8b:ae:da:8e:f0:e0:f5: 53:78:28:98:a2:81:2b:fd:74:89:ed:98:ea:10:c5: 83:07:f9:6c:3b:6e:d7:76:47:d8:90:c1:79:af:4f: 61:92:e4:2e:b8:4a:a2:cb:f9:34:ff:db:eb:bc:04: 02:75:c8:e3:bc:bd:6f:ff:a1:06:e5:81:92:1c:d4: 22:b2:36:bf:ed:47:2d:48:ed:74:c2:a1:86:05:1b: 11:89:13:11:7e:c7:13:6c:08:ec:4b:63:ae:30:ed: 91:0b:ab:25:86:5f:94:fa:63:11:1f:0d:bc:f3:fb: 7b:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E5:E3:C3:CC:35:E9:FD:94:71:67:BB:B0:A2:C1:E5:6F:95:DB:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/675039ce-cff0-376c-8b63-51645ec4d3ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:25:5e:87:f6:ac:46:88:ca:f5:1f:f0:3c:6f:f0:2b:a2:4d: 58:f2:b1:b5:83:35:6a:62:90:36:30:25:48:e5:c5:6e:0a:04: 70:66:7a:d0:45:98:72:93:98:94:cf:66:3d:1e:34:bc:ca:0a: 6a:84:58:ad:db:a7:cb:95:4f:3b:80:ad:e5:eb:16:a8:7c:0b: 1c:fd:5e:a5:83:d8:a2:54:c8:ce:18:85:ca:c9:ad:61:4a:0b: e7:8a:75:18:3c:1b:cc:7a:14:48:d7:ec:70:2a:c9:47:20:6a: eb:e5:be:63:3f:f7:5f:07:9f:56:aa:d5:ac:d5:6b:bd:07:b6: 34:ed:b4:0e:6c:18:f0:2e:b9:de:81:5a:3e:b6:31:16:0f:b2: ed:61:e3:1e:05:82:b0:f8:48:96:63:8b:74:60:3e:7c:57:ba: 8c:f3:29:d1:f1:e8:2e:56:f3:ed:ea:86:8c:de:bc:10:b0:f7: e5:14:07:a5:e9:4d:d3:c9:a1:7d:86:fe:fd:33:1c:7b:8b:97: fe:a4:7b:fd:d2:7c:d6:74:39:02:a3:e8:aa:3e:c7:c1:b1:16: af:2b:5e:1d:60:4f:a7:3f:27:2f:97:12:12:f9:bc:b3:1c:54: e0:41:2d:8f:05:d7:4a:87:23:de:45:58:bf:c9:92:6a:81:53: 45:38:c6:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQw/qMVl8oYGuoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NjZhMzI3YzgtYmQ1OS00MWRkLTkxNDctOGZlMTllNTYwMjFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79rfPLF+yAAPuElIYiNz+R6Nc8JYSiwVVXFU dpC1ozAUM1V0Pa10I2KSvBt6/ONnAbbeP1O7AG9brVIB7DRr0UM/LsBYK7W0krGg srtS/UpUkeq4FYfr2FdtwLxSF4bjQd2WCOdI0dTiRrrYQM2u49MjGkwRqZ2FhsNI SFEafpPcjGI+7iFprkV5er+3ZIuu2o7w4PVTeCiYooEr/XSJ7ZjqEMWDB/lsO27X dkfYkMF5r09hkuQuuEqiy/k0/9vrvAQCdcjjvL1v/6EG5YGSHNQisja/7UctSO10 wqGGBRsRiRMRfscTbAjsS2OuMO2RC6slhl+U+mMRHw288/t7oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFrl48PMNen9lHFnu7CiweVvldt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjc1MDM5Y2UtY2ZmMC0z NzZjLThiNjMtNTE2NDVlYzRkM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAlXof2rEaIyvUf8Dxv8CuiTVjysbWDNWpikDYwJUjlxW4KBHBmetBF mHKTmJTPZj0eNLzKCmqEWK3bp8uVTzuAreXrFqh8Cxz9XqWD2KJUyM4YhcrJrWFK C+eKdRg8G8x6FEjX7HAqyUcgauvlvmM/918Hn1aq1azVa70HtjTttA5sGPAuud6B Wj62MRYPsu1h4x4FgrD4SJZji3RgPnxXuozzKdHx6C5W8+3qhozevBCw9+UUB6Xp TdPJoX2G/v0zHHuLl/6ke/3SfNZ0OQKj6Ko+x8GxFq8rXh1gT6c/Jy+XEhL5vLMc VOBBLY8F10qHI95FWL/JkmqBU0U4xgA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:39:41 2025 by rpki-client