$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa File: 691bed57-da0a-3baf-ad9d-45ddf8c78439.roa (raw, json) Hash identifier: yMYi/ucPVeWoI8N0i+jPvNzZ2/IDp/xmUntgtdu85FA= Subject key identifier: 9A:C0:2D:5B:9F:65:02:DD:C3:89:04:E5:F1:33:55:24:B7:5E:1C:7C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58112E9A2558EEEA8918BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:12:e9:a2:55:8e:ee:a8:91:8b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=e61e5f34-b020-4555-be8e-26d57861c5d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:db:6a:c1:44:48:af:84:1e:7f:6d:47:b5:8f: 85:a9:ad:bc:02:72:29:03:01:4d:af:98:fc:cd:86: 49:d9:2e:54:fd:10:27:1a:0d:a0:86:d2:c1:2e:31: df:c2:58:46:98:22:db:99:95:13:83:63:0e:f1:c1: 1d:50:b1:c1:f8:61:48:7a:bb:51:be:84:12:17:f9: 16:39:f8:b6:65:3c:c7:dc:af:3e:1f:88:87:13:7f: 4b:0d:74:20:22:dc:7c:8b:99:d0:cc:47:45:d3:9a: a1:d0:24:79:70:48:b0:aa:24:4a:4f:4f:8d:18:6e: 99:a8:9e:2a:c3:34:c6:60:61:d7:d7:7b:0a:1f:19: 18:97:5f:bd:36:16:ed:72:9d:44:d7:5a:0f:ab:9f: 7a:20:e6:7d:29:23:84:85:79:c2:c9:e7:d5:0a:6f: 59:71:e8:36:79:93:d6:d8:09:ec:53:e3:9b:98:1c: c0:15:42:7b:a4:5e:07:47:07:f6:1e:9f:c9:5e:54: 0c:7b:a1:83:a7:9f:db:b0:49:e8:ec:51:e0:a3:0f: 45:ba:c2:c3:60:4d:f2:9b:38:ed:16:dc:16:6f:39: a4:d0:2f:b8:0e:3d:27:45:40:55:55:b0:62:4f:d4: c2:72:1b:9b:bf:c1:a7:a9:f0:83:96:e4:6a:18:44: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C0:2D:5B:9F:65:02:DD:C3:89:04:E5:F1:33:55:24:B7:5E:1C:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:ee:80:8d:88:a4:5b:47:7a:dd:2e:21:e1:b5:35:f5:cf:07: 28:72:1e:2b:83:eb:b8:8c:a1:03:1f:df:6d:16:99:75:f9:fe: b1:1d:a7:b5:e6:51:69:86:f3:1f:70:b2:64:75:68:6a:cf:2e: 35:6a:35:ae:1b:58:77:53:d1:77:8a:5a:01:e7:6d:41:ae:97: 69:af:41:4f:9f:f0:7c:ee:67:8c:d2:7c:8a:a4:7e:57:01:81: 69:ac:96:99:66:83:73:6f:96:8b:05:57:e0:e0:ef:d2:a0:66: bf:9c:84:49:b6:1d:0b:49:a1:18:c5:43:6a:9f:b1:6a:77:2b: a5:49:78:28:0b:a4:d5:45:cc:33:b3:81:18:68:52:3d:cf:62: b7:9b:ae:7e:44:5a:4f:0e:62:72:05:98:19:9f:ff:01:5a:20: ca:d3:f5:22:e0:2d:3f:a2:fa:7c:45:63:6e:35:a0:60:62:b2: db:28:e3:6c:4b:4b:36:65:46:2b:66:ec:3c:d6:25:f3:d2:a4: 5a:a0:d5:75:3f:48:60:fd:ff:17:21:ca:2f:ba:06:81:5e:24: 6d:1f:c5:94:77:95:1b:05:8f:ab:b4:53:78:9f:3e:c7:bd:6b: f2:df:cb:33:80:21:3e:b7:9f:1d:1b:f6:90:a1:44:ce:f9:4a: d2:cc:3d:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRLpolWO7qiRi8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZTYxZTVmMzQtYjAyMC00NTU1LWJlOGUtMjZkNTc4NjFjNWQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNtqwURIr4Qef21HtY+Fqa28AnIpAwFNr5j8 zYZJ2S5U/RAnGg2ghtLBLjHfwlhGmCLbmZUTg2MO8cEdULHB+GFIertRvoQSF/kW Ofi2ZTzH3K8+H4iHE39LDXQgItx8i5nQzEdF05qh0CR5cEiwqiRKT0+NGG6ZqJ4q wzTGYGHX13sKHxkYl1+9Nhbtcp1E11oPq596IOZ9KSOEhXnCyefVCm9Zceg2eZPW 2AnsU+ObmBzAFUJ7pF4HRwf2Hp/JXlQMe6GDp5/bsEno7FHgow9FusLDYE3ymzjt FtwWbzmk0C+4Dj0nRUBVVbBiT9TCchubv8GnqfCDluRqGEQrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrALVufZQLdw4kE5fEzVSS3Xhx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjkxYmVkNTctZGEwYS0z YmFmLWFkOWQtNDVkZGY4Yzc4NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH/ugI2IpFtHet0uIeG1NfXPByhyHiuD67iMoQMf320WmXX5/rEdp7Xm UWmG8x9wsmR1aGrPLjVqNa4bWHdT0XeKWgHnbUGul2mvQU+f8HzuZ4zSfIqkflcB gWmslplmg3NvlosFV+Dg79KgZr+chEm2HQtJoRjFQ2qfsWp3K6VJeCgLpNVFzDOz gRhoUj3PYrebrn5EWk8OYnIFmBmf/wFaIMrT9SLgLT+i+nxFY241oGBistso42xL SzZlRitm7DzWJfPSpFqg1XU/SGD9/xchyi+6BoFeJG0fxZR3lRsFj6u0U3ifPse9 a/LfyzOAIT63nx0b9pChRM75StLMPbY= -----END CERTIFICATE-----Generated at Fri Apr 11 23:07:40 2025 by rpki-client