$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa File: 6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa (raw, json) Hash identifier: 0GB6EkIXuuReyvT6veNAeGfNnIucAaNhkmrCub1qOsQ= Subject key identifier: 17:22:84:D1:7B:21:80:EE:11:AA:A1:BB:34:63:C2:08:D6:6A:C4:37 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581A0850730F6B3BA23C7C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:a0:85:07:30:f6:b3:ba:23:c7:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=677a9443-f42c-4641-9eab-4c3858a46a97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:be:c3:16:32:d2:b3:32:e7:4d:4b:2e:09:26: cd:51:6e:74:68:d2:cc:bf:54:ce:d5:7b:84:67:0d: 98:e7:26:73:f8:8c:3e:8d:72:06:e5:2d:7c:bd:3e: 61:17:4c:6d:4f:eb:3b:db:c3:d3:53:62:71:a8:dd: 41:a4:d5:ed:a3:b8:cb:31:fe:ef:f0:7e:53:82:09: 7d:42:b6:e3:4a:19:e3:cd:93:21:69:09:be:c1:0d: e5:6b:4f:b7:43:90:67:2a:3d:1a:80:c1:6d:ba:06: 80:c9:49:e4:79:47:dc:4f:00:ab:4a:65:07:d6:73: 53:26:c2:d6:4e:ed:9d:62:ee:56:c2:6a:25:45:18: a8:7d:f5:bf:d5:e9:b1:73:f5:34:66:f1:00:6d:9f: 09:c3:51:a9:c1:ea:0f:4a:05:22:ae:e0:13:55:68: 23:66:2d:4c:28:05:11:31:c0:1f:43:fe:01:76:97: b7:67:fb:cf:d7:04:c4:01:91:cf:3e:a4:38:55:74: 46:40:31:b3:18:ee:68:33:44:71:96:f5:b9:0e:64: bd:a8:92:8d:01:87:fa:2a:46:ac:c1:3b:d5:f0:48: fc:dc:11:90:02:68:81:ad:5a:c2:41:98:74:55:f9: c2:27:2e:e9:30:b3:9b:78:0d:b8:87:51:75:9d:2c: 8e:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:22:84:D1:7B:21:80:EE:11:AA:A1:BB:34:63:C2:08:D6:6A:C4:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:57:c5:36:e5:4d:4e:3b:90:4b:05:f2:31:49:fb:fe:e9:18: 81:48:72:08:4c:50:1f:da:37:cf:83:7a:89:2b:d2:cd:8e:a4: 9a:82:59:9c:1e:95:52:f6:4a:68:51:b2:7c:39:5c:45:eb:ae: ac:4f:b0:c4:0c:91:db:bc:71:fe:33:f3:88:be:6c:c0:f0:60: c4:55:d7:6b:79:41:7b:36:70:39:89:01:f7:02:f0:fe:89:a5: 7d:8a:7f:02:85:ae:8b:fb:8f:d1:11:a5:66:b6:40:fb:91:30: 76:73:de:dd:b2:9b:ea:8e:be:12:8e:50:e0:ad:78:2c:11:60: 58:af:5a:a9:1a:24:b3:2d:71:bd:f4:ac:11:8d:dd:15:77:1d: b1:eb:27:89:05:b4:7e:e7:97:44:42:27:ea:af:6c:37:6f:7a: 71:5f:f3:52:b2:c9:77:45:c1:ee:e9:60:db:90:59:cb:5a:84: 8d:92:29:ce:41:d9:79:37:7c:54:82:a0:61:87:ae:57:28:80: 37:dd:75:6c:26:11:90:87:6d:eb:dc:01:f7:74:7c:c9:84:67: a2:ca:11:5a:1f:0f:15:ad:e2:83:80:00:97:d6:8c:cc:97:83: cb:54:1d:7e:e1:b9:78:99:65:50:bb:d0:d3:ca:96:68:09:70: 0d:d4:68:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaCFBzD2s7ojx8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk Njc3YTk0NDMtZjQyYy00NjQxLTllYWItNGMzODU4YTQ2YTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb7DFjLSszLnTUsuCSbNUW50aNLMv1TO1XuE Zw2Y5yZz+Iw+jXIG5S18vT5hF0xtT+s728PTU2JxqN1BpNXto7jLMf7v8H5Tggl9 QrbjShnjzZMhaQm+wQ3la0+3Q5BnKj0agMFtugaAyUnkeUfcTwCrSmUH1nNTJsLW Tu2dYu5WwmolRRioffW/1emxc/U0ZvEAbZ8Jw1GpweoPSgUiruATVWgjZi1MKAUR McAfQ/4Bdpe3Z/vP1wTEAZHPPqQ4VXRGQDGzGO5oM0RxlvW5DmS9qJKNAYf6Kkas wTvV8Ej83BGQAmiBrVrCQZh0VfnCJy7pMLObeA24h1F1nSyOOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBcihNF7IYDuEaqhuzRjwgjWasQ3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmZmMGEzZGItZTBmMi0z OWE2LTk0NjUtYmQ5YmQ1OTRiNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlXxTblTU47kEsF8jFJ+/7pGIFIcghMUB/aN8+Deokr0s2OpJqCWZwe lVL2SmhRsnw5XEXrrqxPsMQMkdu8cf4z84i+bMDwYMRV12t5QXs2cDmJAfcC8P6J pX2KfwKFrov7j9ERpWa2QPuRMHZz3t2ym+qOvhKOUOCteCwRYFivWqkaJLMtcb30 rBGN3RV3HbHrJ4kFtH7nl0RCJ+qvbDdvenFf81KyyXdFwe7pYNuQWctahI2SKc5B 2Xk3fFSCoGGHrlcogDfddWwmEZCHbevcAfd0fMmEZ6LKEVofDxWt4oOAAJfWjMyX g8tUHX7huXiZZVC70NPKlmgJcA3UaOc= -----END CERTIFICATE-----Generated at Fri Mar 14 10:23:27 2025 by rpki-client