$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931e25c1-a6fd-3dae-b6c6-af77c2204756.roa File: 931e25c1-a6fd-3dae-b6c6-af77c2204756.roa (raw, json) Hash identifier: NZViWNo5NiGxC3AdprM57gVu3ovqzZM9wP5LgGV326M= Subject key identifier: CA:8E:0F:54:08:BC:62:C4:2E:B4:77:17:D2:B6:1F:8A:CB:2A:9E:58 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581104517F9C518B2114BC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931e25c1-a6fd-3dae-b6c6-af77c2204756.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:10:45:17:f9:c5:18:b2:11:4b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=bf5044a6-e850-4a4d-bb76-632961d1a261 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a5:33:30:60:69:9f:b7:4b:26:ab:db:1f:ce: 08:3c:08:e1:ed:cf:95:ca:7d:11:f6:c9:34:23:60: c6:f6:f8:1c:21:6f:d3:b4:ac:74:6a:11:ed:4f:fa: c6:36:ea:bb:6a:53:be:4c:89:3c:77:92:1f:64:c4: a5:67:1b:a2:5c:87:b7:1d:a0:39:ab:89:07:8a:ce: f8:87:74:de:79:bf:ed:fc:a3:08:12:bc:2d:01:d8: 8f:cd:8d:41:d4:cf:63:71:4a:f2:31:b1:3c:9d:b1: 67:c6:ba:9d:4a:f6:fd:bc:54:de:bf:9f:ef:e1:b5: 5e:6d:cf:36:0d:fc:0e:2d:fc:f6:58:d2:36:0a:15: 44:4f:5a:14:7c:17:5f:2e:8b:c4:6d:4b:88:25:b2: ba:64:ca:0e:eb:82:cb:54:be:98:bb:20:15:bb:fe: d8:37:e4:53:47:ae:52:16:94:6b:33:c2:c9:c6:65: 82:34:88:98:7b:56:92:7d:7e:a1:fb:eb:07:3c:56: 8b:4b:b5:7d:b8:64:70:3a:52:69:f5:31:58:82:b1: d8:47:bf:4a:c1:cc:24:87:04:65:22:11:ce:a9:e3: 67:fb:99:0e:13:28:65:a3:7a:37:7e:7c:d8:0c:6c: 7c:cc:0b:f7:a0:c9:d9:67:a3:e3:61:99:b3:b0:87: 68:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:8E:0F:54:08:BC:62:C4:2E:B4:77:17:D2:B6:1F:8A:CB:2A:9E:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931e25c1-a6fd-3dae-b6c6-af77c2204756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:db:f6:1d:c9:d5:a9:34:26:72:7b:d1:9f:0a:ee:28:96:77: 7e:a7:07:aa:0a:01:5c:9d:e0:fb:25:01:00:b9:72:c0:4a:70: d9:3f:cf:f2:4e:5f:08:71:75:dc:f2:2a:c2:ee:b0:d5:9d:68: bd:1d:05:e5:9c:d3:22:07:1d:b5:34:f7:e8:79:85:91:3a:69: 2c:68:a9:43:30:d6:c8:62:5b:95:28:3c:61:f6:0b:4f:76:c0: 2c:de:90:a8:79:97:65:c8:b8:40:a9:3e:38:1a:6d:1e:b2:75: 1c:fa:be:7a:f5:bd:d4:8e:ac:6d:d0:3a:d6:58:c5:75:fd:ed: 81:f1:b7:bd:f1:80:7f:c3:3a:65:04:31:f0:66:ce:4f:01:15: 04:ae:06:94:6f:f3:1a:ee:6b:6e:5b:0e:29:08:fe:ed:ec:9a: f3:33:32:2c:9c:d7:42:df:82:28:b2:26:4a:ce:d1:e7:41:ab: b4:c3:04:55:d2:ba:38:3b:e2:66:48:46:78:2b:a0:5e:53:d1: 53:d0:e3:d7:5d:ad:0c:33:67:42:94:73:94:36:b3:7a:d9:c3: 08:a6:89:48:3c:24:b6:cf:30:59:6c:05:76:37:2c:8b:84:1b: b6:a6:a6:60:66:7b:b5:4c:53:b9:9d:d5:c2:b5:f0:36:d5:41: 53:57:be:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRBFF/nFGLIRS8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YmY1MDQ0YTYtZTg1MC00YTRkLWJiNzYtNjMyOTYxZDFhMjYxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1qUzMGBpn7dLJqvbH84IPAjh7c+Vyn0R9sk0 I2DG9vgcIW/TtKx0ahHtT/rGNuq7alO+TIk8d5IfZMSlZxuiXIe3HaA5q4kHis74 h3Teeb/t/KMIErwtAdiPzY1B1M9jcUryMbE8nbFnxrqdSvb9vFTev5/v4bVebc82 DfwOLfz2WNI2ChVET1oUfBdfLovEbUuIJbK6ZMoO64LLVL6YuyAVu/7YN+RTR65S FpRrM8LJxmWCNIiYe1aSfX6h++sHPFaLS7V9uGRwOlJp9TFYgrHYR79KwcwkhwRl IhHOqeNn+5kOEyhlo3o3fnzYDGx8zAv3oMnZZ6PjYZmzsIdoGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqOD1QIvGLELrR3F9K2H4rLKp5YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTMxZTI1YzEtYTZmZC0z ZGFlLWI2YzYtYWY3N2MyMjA0NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIXb9h3J1ak0JnJ70Z8K7iiWd36nB6oKAVyd4PslAQC5csBKcNk/z/JO XwhxddzyKsLusNWdaL0dBeWc0yIHHbU09+h5hZE6aSxoqUMw1shiW5UoPGH2C092 wCzekKh5l2XIuECpPjgabR6ydRz6vnr1vdSOrG3QOtZYxXX97YHxt73xgH/DOmUE MfBmzk8BFQSuBpRv8xrua25bDikI/u3smvMzMiyc10LfgiiyJkrO0edBq7TDBFXS ujg74mZIRngroF5T0VPQ49ddrQwzZ0KUc5Q2s3rZwwimiUg8JLbPMFlsBXY3LIuE G7ampmBme7VMU7md1cK18DbVQVNXvkM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:04 2025 by rpki-client