$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa File: 6a6c47b1-6914-3f93-9257-6c771815d8d7.roa (raw, json) Hash identifier: Dgw1vM9OtTcsP6212p7N3DErQ4jEbbBSRMgorHPNArg= Subject key identifier: 15:8F:2D:F9:AA:CE:27:84:82:63:D9:DB:52:4C:F9:07:CF:4D:A1:EF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810D3B35DB9239ED2F4A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0d:3b:35:db:92:39:ed:2f:4a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=2cac4c3f-e913-40f1-b5d8-2bcb381b1321 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:33:f5:19:9c:8a:94:53:e6:83:a9:70:c2: 85:20:16:8c:c4:5f:8a:d9:0f:f8:88:90:f7:5d:dd: 48:15:75:38:23:4e:18:7a:40:0b:0a:fd:51:b9:26: db:5d:c3:43:8a:c9:b3:69:18:ab:c2:fe:9a:29:d9: dd:77:82:d3:83:f4:e4:29:e6:09:fc:68:12:51:ff: 24:45:13:cc:b8:90:56:b9:de:14:bb:74:c0:cc:34: b4:19:3b:ec:c5:ad:c6:24:aa:ed:32:0f:b8:d5:63: 45:f5:d9:d1:6f:b3:c0:c8:c2:10:d7:64:a9:64:f4: 1d:04:29:92:0d:61:e4:38:3f:6d:20:57:3c:70:95: c2:ec:01:56:97:4b:99:3e:62:6f:34:d0:26:bc:f9: 56:5e:bc:86:09:4d:b8:ad:a9:85:ae:fb:5d:33:8a: b7:14:5c:9b:ba:11:39:05:aa:02:e0:29:00:30:16: 1d:53:45:1b:b1:05:7e:78:d1:8c:bf:6d:d7:05:96: 79:15:ed:66:bc:96:14:57:4f:54:90:4a:f6:7a:0f: 0b:c0:46:46:f2:68:bd:a1:34:98:77:07:68:90:37: 2c:86:e6:c5:6f:e3:e7:7e:61:62:57:74:7e:92:1e: ae:ed:07:26:3d:3b:3a:43:6a:e0:cb:29:6d:a9:07: 02:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:8F:2D:F9:AA:CE:27:84:82:63:D9:DB:52:4C:F9:07:CF:4D:A1:EF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a6c47b1-6914-3f93-9257-6c771815d8d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:67:8e:c1:07:2b:e3:49:3d:a3:be:e6:ff:f7:06:57:34:d4: 78:72:e8:de:f5:96:68:83:35:2b:ad:91:c4:3b:89:c2:65:1d: 09:da:0c:7a:74:b5:28:16:c4:1b:4d:86:d0:fe:54:df:3b:af: 2d:6c:98:1f:26:aa:24:38:20:f6:6c:71:64:54:65:29:19:43: 3d:36:7f:dd:ce:9e:81:37:9a:e7:ad:13:c2:15:c1:70:b4:d0: 42:46:da:37:b9:ff:43:03:2d:92:09:1f:d3:45:d6:87:51:77: 04:67:c2:d7:25:4d:22:bf:03:26:14:f6:a5:5a:49:25:09:4c: 05:2c:05:dd:c3:c9:6f:ac:7b:35:d4:fc:b3:04:cd:ba:62:5b: c1:e7:9e:b9:22:37:04:03:a1:aa:09:65:31:0d:67:92:df:d4: 5f:e8:18:f8:72:c5:cc:59:66:f6:37:86:7c:a9:1b:76:c9:3b: 77:7b:45:da:46:17:3d:df:5d:20:d0:94:40:fa:e1:c3:fc:82: 26:38:81:d5:fb:9e:49:79:cf:e3:1e:5c:19:f6:8b:ee:e6:ae: 60:50:7a:fb:20:27:7f:f0:19:47:1e:14:4d:9d:01:5a:e2:e6: 23:3e:f8:2f:a8:59:18:5a:56:c8:45:d9:2f:42:5c:84:b5:3b: d0:89:b7:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ07NduSOe0vSgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MmNhYzRjM2YtZTkxMy00MGYxLWI1ZDgtMmJjYjM4MWIxMzIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf0z9RmcipRT5oOpcMKFIBaMxF+K2Q/4iJD3 Xd1IFXU4I04YekALCv1RuSbbXcNDismzaRirwv6aKdndd4LTg/TkKeYJ/GgSUf8k RRPMuJBWud4Uu3TAzDS0GTvsxa3GJKrtMg+41WNF9dnRb7PAyMIQ12SpZPQdBCmS DWHkOD9tIFc8cJXC7AFWl0uZPmJvNNAmvPlWXryGCU24ramFrvtdM4q3FFybuhE5 BaoC4CkAMBYdU0UbsQV+eNGMv23XBZZ5Fe1mvJYUV09UkEr2eg8LwEZG8mi9oTSY dwdokDcshubFb+PnfmFiV3R+kh6u7QcmPTs6Q2rgyyltqQcCswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBWPLfmqzieEgmPZ21JM+QfPTaHvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmE2YzQ3YjEtNjkxNC0z ZjkzLTkyNTctNmM3NzE4MTVkOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK04MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMhnjsEHK+NJPaO+5v/3Blc01Hhy6N71lmiDNSutkcQ7icJlHQnaDHp0 tSgWxBtNhtD+VN87ry1smB8mqiQ4IPZscWRUZSkZQz02f93OnoE3muetE8IVwXC0 0EJG2je5/0MDLZIJH9NF1odRdwRnwtclTSK/AyYU9qVaSSUJTAUsBd3DyW+sezXU /LMEzbpiW8HnnrkiNwQDoaoJZTENZ5Lf1F/oGPhyxcxZZvY3hnypG3bJO3d7RdpG Fz3fXSDQlED64cP8giY4gdX7nkl5z+MeXBn2i+7mrmBQevsgJ3/wGUceFE2dAVri 5iM++C+oWRhaVshF2S9CXIS1O9CJt4I= -----END CERTIFICATE-----Generated at Sun Feb 16 15:17:23 2025 by rpki-client