$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa File: 694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa (raw, json) Hash identifier: GePIMc+SBE2uht5FL2dzfdN2p6umnOO9y/REFHUXYpk= Subject key identifier: 9F:A1:B4:DC:1B:DF:8C:44:5F:54:45:C9:DA:46:C0:8F:3C:95:61:AB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581A0ADAB3BC1208151E500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:a0:ad:ab:3b:c1:20:81:51:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=28a0627b-c32d-48bf-9ca1-2c8f49a51577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:5a:a6:79:1d:a9:9a:a4:cd:81:37:88:89:ab: 21:29:3e:77:54:06:50:2f:fe:69:a6:b1:a1:c8:17: ba:b4:cd:de:d6:3c:6d:8b:b4:df:4c:50:48:e8:13: 28:26:88:a9:46:95:db:89:2c:3a:cb:af:ea:c2:9f: 97:7c:5d:5a:af:6a:db:f8:a0:0f:86:7b:51:c4:3e: 53:24:88:1f:ed:a8:30:95:8c:80:44:aa:c9:d9:11: 7b:2a:bc:34:79:ad:a6:db:0d:42:68:2d:16:bd:1f: a1:3c:ac:f2:74:0d:af:03:bc:a3:1b:a0:64:22:e5: 09:04:76:ae:e5:13:fb:3b:8f:4c:28:e0:2c:2d:dd: 24:f3:a1:30:42:3d:d8:05:a5:cb:09:55:d0:2f:0f: e2:5f:97:74:13:58:e5:d1:6e:f7:2a:8e:62:7d:6a: df:32:cb:b4:58:d6:71:9e:3f:a3:a5:88:79:a9:4c: 22:46:59:e8:28:e2:4a:1c:5b:8c:32:9a:39:38:73: be:b7:9d:99:a8:54:4f:80:c2:8c:7d:92:6e:dd:2e: 98:52:37:ed:d3:4f:c8:02:f9:05:61:8b:57:4c:93: cc:a7:a5:94:ee:c9:21:21:c4:29:cf:c3:6b:c7:ab: e8:04:09:e9:ed:4a:aa:aa:9b:df:90:9f:7b:4d:03: c7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:A1:B4:DC:1B:DF:8C:44:5F:54:45:C9:DA:46:C0:8F:3C:95:61:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:40:10:ef:38:e5:ed:58:17:b5:03:0d:ff:15:ed:85:6a:24: 83:61:c0:e9:4b:cf:70:cf:14:d7:f8:ac:6f:a3:8b:87:c5:ae: 78:e7:5f:0c:e9:05:00:cd:66:cf:03:9c:ba:0b:21:d4:54:6f: 9b:ae:86:6d:73:4c:43:b5:c2:8b:4e:23:99:94:40:0a:af:2c: b0:33:a5:c2:4e:00:f6:1e:12:1c:e0:3b:9c:99:fa:21:3a:05: da:d7:07:2b:94:5e:2d:71:f6:90:47:a9:ba:ce:27:e4:f2:96: 19:d1:58:ac:c9:4f:7c:ac:27:27:49:70:be:54:eb:d4:16:4a: a3:d6:75:5d:da:8e:ea:6e:ff:0c:83:69:be:41:75:17:31:79: 16:30:1c:8e:89:fd:99:75:dd:c6:13:b3:2d:6b:21:c4:85:1c: 56:73:7c:e9:9f:7c:a5:1a:81:6f:b3:c6:25:62:95:51:d3:4b: 7f:24:98:bb:4e:32:08:71:f0:06:d8:7f:02:6c:e7:10:72:82: 43:27:39:f0:bd:39:00:e8:1d:15:bf:c5:1f:3f:3e:aa:13:6f: d0:61:13:90:a0:fb:d0:78:aa:70:fc:08:06:c9:76:01:fc:cf: 04:89:a3:b9:2f:2c:9d:dc:43:14:d5:db:46:28:f4:62:fc:d2: 7d:9f:04:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaCtqzvBIIFR5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MjhhMDYyN2ItYzMyZC00OGJmLTljYTEtMmM4ZjQ5YTUxNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFqmeR2pmqTNgTeIiashKT53VAZQL/5pprGh yBe6tM3e1jxti7TfTFBI6BMoJoipRpXbiSw6y6/qwp+XfF1ar2rb+KAPhntRxD5T JIgf7agwlYyARKrJ2RF7Krw0ea2m2w1CaC0WvR+hPKzydA2vA7yjG6BkIuUJBHau 5RP7O49MKOAsLd0k86EwQj3YBaXLCVXQLw/iX5d0E1jl0W73Ko5ifWrfMsu0WNZx nj+jpYh5qUwiRlnoKOJKHFuMMpo5OHO+t52ZqFRPgMKMfZJu3S6YUjft00/IAvkF YYtXTJPMp6WU7skhIcQpz8Nrx6voBAnp7UqqqpvfkJ97TQPH8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+htNwb34xEX1RFydpGwI88lWGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjk0ZTRiM2EtZDQ1MC0z YjI5LWFiODUtZWQxMzIzYWRhMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMZAEO845e1YF7UDDf8V7YVqJINhwOlLz3DPFNf4rG+ji4fFrnjnXwzp BQDNZs8DnLoLIdRUb5uuhm1zTEO1wotOI5mUQAqvLLAzpcJOAPYeEhzgO5yZ+iE6 BdrXByuUXi1x9pBHqbrOJ+TylhnRWKzJT3ysJydJcL5U69QWSqPWdV3ajupu/wyD ab5BdRcxeRYwHI6J/Zl13cYTsy1rIcSFHFZzfOmffKUagW+zxiVilVHTS38kmLtO Mghx8AbYfwJs5xBygkMnOfC9OQDoHRW/xR8/PqoTb9BhE5Cg+9B4qnD8CAbJdgH8 zwSJo7kvLJ3cQxTV20Yo9GL80n2fBDc= -----END CERTIFICATE-----Generated at Sat Apr 12 00:18:29 2025 by rpki-client