$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa File: 7b7af8b3-c545-330b-b84b-68057ba6e480.roa (raw, json) Hash identifier: cUj1dgJSH1D+VH24TkpSxeW7D8oApXxyDrl/cxWpGcQ= Subject key identifier: 7E:96:B9:56:B1:79:32:6D:58:16:32:F4:64:C2:7E:DE:37:1C:B4:48 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819D1B271F964886013BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9d:1b:27:1f:96:48:86:01:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=58af6dde-2781-4404-b537-e3e8f9848ff9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c7:8a:8e:4f:30:df:29:da:77:5c:e2:c4:51: b5:a2:82:59:fc:4d:23:d8:f1:20:6d:0b:8d:6b:db: 2a:7b:5c:00:e2:07:95:45:3e:fe:1e:bd:47:11:c6: 81:7b:5c:37:21:36:0a:6b:96:81:2e:31:a7:6f:44: 00:a1:19:0d:15:71:d7:35:47:6b:64:58:20:60:67: a0:3a:fb:bc:17:8b:66:97:9b:7d:fc:50:59:72:27: 02:c1:2c:93:6a:89:91:2e:97:b8:fe:26:02:a2:a6: d5:14:8c:10:7a:86:2a:9a:7f:55:c5:9a:13:24:90: b0:85:7a:00:44:24:6f:f4:56:2a:11:5b:44:29:f8: cd:8f:05:26:b4:a8:82:77:ea:0a:ca:45:69:8e:f4: 9f:4b:f6:52:1b:bc:52:d2:44:60:79:d3:2b:fc:61: 10:71:00:a0:bf:19:1e:be:3a:20:df:09:80:53:2a: 81:b3:4e:71:bb:75:98:69:bd:d4:95:d6:1a:08:c5: be:62:80:ea:9c:e7:5e:9b:22:56:34:c8:ce:44:10: ca:4f:19:ca:f9:9a:05:24:66:f3:24:ed:51:8d:76: 73:69:4b:8e:a6:c9:76:f1:2f:9d:4a:8a:ed:00:8f: 5a:f3:33:c2:fe:87:57:fa:92:90:fc:03:3d:c7:29: b4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:96:B9:56:B1:79:32:6D:58:16:32:F4:64:C2:7E:DE:37:1C:B4:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:3c:7c:6e:de:f3:33:4e:52:6e:68:8c:a4:25:46:7c:a2:8b: 89:5f:43:81:d0:7f:18:25:b0:84:e0:e8:fe:81:af:57:ec:1c: ba:08:8c:64:b2:e1:6f:31:78:27:bb:65:be:9b:d8:75:07:ae: 3c:a2:af:21:d0:2a:cc:4d:af:d1:73:62:85:1c:a3:e7:7b:15: 8a:92:17:9c:bb:5e:71:c2:07:12:fb:36:a3:bb:ec:29:29:d1: 1f:8a:a3:ee:83:22:38:f8:5e:44:af:69:e2:83:39:a2:5d:c9: f6:a3:d0:3f:09:2f:1b:45:25:73:5b:55:59:8a:bf:ee:ea:ad: 15:23:20:96:37:24:6b:c8:28:f2:6b:c6:f0:45:c6:eb:93:44: d6:24:2c:31:81:c3:b8:8a:b5:91:cf:5b:f7:fb:c3:be:94:1a: b6:3e:68:65:3d:bf:7b:45:80:2d:f7:0c:8e:95:9e:68:6c:8c: 5e:de:ac:5b:54:e8:51:e7:23:94:23:39:40:0a:42:c2:3f:2f: 65:a7:cf:06:15:52:68:f0:e8:4a:10:07:6e:27:fe:a5:28:31: 65:73:b0:61:da:c5:d8:34:af:be:ad:12:9a:ba:06:d6:10:fc: 68:6c:2e:a9:cb:8a:d4:af:a3:08:82:86:8b:27:a3:86:3f:b7: 47:9d:04:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ0bJx+WSIYBO8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NThhZjZkZGUtMjc4MS00NDA0LWI1MzctZTNlOGY5ODQ4ZmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMeKjk8w3ynad1zixFG1ooJZ/E0j2PEgbQuN a9sqe1wA4geVRT7+Hr1HEcaBe1w3ITYKa5aBLjGnb0QAoRkNFXHXNUdrZFggYGeg Ovu8F4tml5t9/FBZcicCwSyTaomRLpe4/iYCoqbVFIwQeoYqmn9VxZoTJJCwhXoA RCRv9FYqEVtEKfjNjwUmtKiCd+oKykVpjvSfS/ZSG7xS0kRgedMr/GEQcQCgvxke vjog3wmAUyqBs05xu3WYab3UldYaCMW+YoDqnOdemyJWNMjORBDKTxnK+ZoFJGbz JO1RjXZzaUuOpsl28S+dSortAI9a8zPC/odX+pKQ/AM9xym0UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6WuVaxeTJtWBYy9GTCft43HLRIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2I3YWY4YjMtYzU0NS0z MzBiLWI4NGItNjgwNTdiYTZlNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHg8fG7e8zNOUm5ojKQlRnyii4lfQ4HQfxglsITg6P6Br1fsHLoIjGSy 4W8xeCe7Zb6b2HUHrjyiryHQKsxNr9FzYoUco+d7FYqSF5y7XnHCBxL7NqO77Ckp 0R+Ko+6DIjj4XkSvaeKDOaJdyfaj0D8JLxtFJXNbVVmKv+7qrRUjIJY3JGvIKPJr xvBFxuuTRNYkLDGBw7iKtZHPW/f7w76UGrY+aGU9v3tFgC33DI6VnmhsjF7erFtU 6FHnI5QjOUAKQsI/L2WnzwYVUmjw6EoQB24n/qUoMWVzsGHaxdg0r76tEpq6BtYQ /GhsLqnLitSvowiChosno4Y/t0edBPs= -----END CERTIFICATE-----Generated at Sun Apr 20 05:00:04 2025 by rpki-client