$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa File: 9955a230-31b9-3682-979e-f08e04a1df4d.roa (raw, json) Hash identifier: Om7eG2JyvlQZjzJinQsmVU0Wev2V1vdP+CGVHPufYOs= Subject key identifier: CF:87:3B:55:DE:CD:CD:A6:D0:5B:01:35:75:71:D6:F4:DE:6F:7E:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819FECB06B752AC5B1DD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9f:ec:b0:6b:75:2a:c5:b1:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5938c4cd-003c-44ee-88c3-90d975b51194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:8a:b8:84:c9:1f:f3:58:5d:fe:ae:bf:8a:26: 60:e2:4d:d8:40:1d:f2:a3:c3:1b:b7:7c:23:89:a2: 6b:2d:14:5f:8e:1b:a3:64:aa:22:7b:ef:6f:73:6f: 03:4a:cf:e8:cb:31:f9:fa:30:d4:1b:78:ad:33:d0: 33:53:b7:4f:66:b0:8f:6c:b1:31:7a:1d:b0:18:8e: 84:89:b5:4d:59:71:72:ab:4c:fb:95:53:3a:c1:10: ab:77:5f:91:fb:ca:f9:ce:78:1f:0c:d1:0c:20:1a: 84:34:25:90:d6:ad:28:37:63:18:be:c4:5b:b8:a8: ee:0b:ee:8d:0c:6d:ca:e9:20:6b:4e:e1:03:89:2d: 76:25:71:e1:0f:b2:f9:31:4d:31:fa:26:39:26:26: 50:b4:f7:30:7b:0a:02:4d:65:a4:57:67:30:a4:5a: 0e:ea:22:f6:67:03:80:6a:ae:7c:1b:07:90:a4:e0: 63:cc:21:d6:b7:02:83:45:87:c8:9b:9c:8f:b9:c0: c4:ff:03:94:f6:cd:86:53:c5:15:bd:7b:95:b5:93: 08:24:75:7b:b6:46:4e:cc:ad:a8:99:ee:fc:ee:44: 32:48:16:48:e8:27:66:6c:6b:0f:70:82:65:0f:16: 40:ad:04:96:6f:7f:e3:99:36:f0:4e:f4:f5:78:a6: 34:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:87:3B:55:DE:CD:CD:A6:D0:5B:01:35:75:71:D6:F4:DE:6F:7E:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:bf:61:5e:7d:ec:db:fe:a6:01:a1:d4:b2:7f:c0:55:b0:26: 02:71:92:4f:09:05:21:f7:99:5d:98:61:09:43:db:84:74:ef: 95:83:4b:1e:31:2e:e6:2c:dc:5b:44:fe:3f:06:18:80:e9:3a: 3c:9f:f0:a8:5e:e1:d4:f3:66:39:99:5e:f3:28:92:12:ac:04: e6:4d:bc:d4:ff:35:c9:7b:51:a5:43:1b:2b:60:45:bd:40:99: 76:60:fc:fe:77:18:22:78:ca:06:ad:b8:b3:3a:7c:77:81:1a: 32:0d:44:50:5c:0d:d3:98:f7:cc:b2:93:82:59:5b:63:e8:23: ac:49:df:4b:c7:f2:1e:b0:15:3c:55:d8:22:3a:23:6c:b7:77: 82:78:1e:61:4f:62:23:3f:26:d8:7b:d4:56:b7:48:a1:a5:c0: d5:4f:cd:b6:15:f8:ad:a9:ac:56:c3:ab:d1:fe:bb:24:67:b1: 57:55:74:2f:87:6d:c9:ee:08:45:ef:89:d9:52:6e:49:23:81: cf:ca:e3:2e:e7:18:00:64:69:11:b7:20:f0:aa:27:f3:8a:e3: 5a:25:67:6a:b0:39:55:44:d4:7b:af:2c:cc:90:43:4c:12:57: 86:84:88:1b:92:d0:df:22:cf:f3:06:35:21:08:57:09:c3:e7: c0:80:de:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ/ssGt1KsWx3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTkzOGM0Y2QtMDAzYy00NGVlLTg4YzMtOTBkOTc1YjUxMTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oq4hMkf81hd/q6/iiZg4k3YQB3yo8Mbt3wj iaJrLRRfjhujZKoie+9vc28DSs/oyzH5+jDUG3itM9AzU7dPZrCPbLExeh2wGI6E ibVNWXFyq0z7lVM6wRCrd1+R+8r5zngfDNEMIBqENCWQ1q0oN2MYvsRbuKjuC+6N DG3K6SBrTuEDiS12JXHhD7L5MU0x+iY5JiZQtPcwewoCTWWkV2cwpFoO6iL2ZwOA aq58GweQpOBjzCHWtwKDRYfIm5yPucDE/wOU9s2GU8UVvXuVtZMIJHV7tkZOzK2o me787kQySBZI6CdmbGsPcIJlDxZArQSWb3/jmTbwTvT1eKY0CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+HO1Xezc2m0FsBNXVx1vTeb37LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTk1NWEyMzAtMzFiOS0z NjgyLTk3OWUtZjA4ZTA0YTFkZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKG/YV597Nv+pgGh1LJ/wFWwJgJxkk8JBSH3mV2YYQlD24R075WDSx4x LuYs3FtE/j8GGIDpOjyf8Khe4dTzZjmZXvMokhKsBOZNvNT/Ncl7UaVDGytgRb1A mXZg/P53GCJ4ygatuLM6fHeBGjINRFBcDdOY98yyk4JZW2PoI6xJ30vH8h6wFTxV 2CI6I2y3d4J4HmFPYiM/Jth71Fa3SKGlwNVPzbYV+K2prFbDq9H+uyRnsVdVdC+H bcnuCEXvidlSbkkjgc/K4y7nGABkaRG3IPCqJ/OK41olZ2qwOVVE1HuvLMyQQ0wS V4aEiBuS0N8iz/MGNSEIVwnD58CA3ms= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:44 2025 by rpki-client