$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c865b22-7382-32fa-86c2-5265a6651fc7.roa File: 9c865b22-7382-32fa-86c2-5265a6651fc7.roa (raw, json) Hash identifier: Sc+eCbaaxAgdE5GrpKSJa9QOfyyr0BkaOGcjiVmh7oE= Subject key identifier: 98:6B:C7:4F:C1:5B:32:76:BE:26:D8:DB:7D:69:64:61:B2:AA:1C:74 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819E37C50302C5E0671200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c865b22-7382-32fa-86c2-5265a6651fc7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9e:37:c5:03:02:c5:e0:67:12:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=c13afbec-6583-4bf3-9fcc-21fa458fdb49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:8a:81:0b:60:6b:4d:68:83:c6:53:91:31:48: 93:72:58:57:b8:b1:90:c5:1d:75:0c:4f:69:53:b1: 95:5e:c1:1e:e2:c9:73:1d:ea:71:44:fe:e2:f7:11: de:c2:94:ad:ca:57:54:20:a9:55:f9:5d:ef:7c:74: ee:2d:66:13:d1:d6:56:b7:40:73:fe:43:bc:7a:77: 3e:50:35:2f:74:a5:8f:79:ea:9b:6b:88:52:51:4f: db:f3:1c:64:15:70:31:e4:0d:e4:0d:4a:2a:80:2d: e6:9c:56:64:25:3a:d1:4c:7a:f4:8e:2b:19:ed:18: 89:ec:5f:d2:8c:9c:68:03:0f:26:de:11:69:5a:f9: fb:c5:b5:d9:6c:90:25:9b:f4:f4:d6:14:89:6d:e4: f2:aa:6c:e2:10:0b:98:74:74:e7:d2:d8:e5:8b:d8: 8a:43:9e:8a:28:4b:54:eb:05:b8:16:fe:c2:35:61: 21:d7:3a:9a:7f:be:6b:47:89:fd:4a:a8:f2:12:ac: ee:a4:06:f1:5e:09:e1:d1:0c:90:f4:2a:b3:58:1d: c7:7e:c4:69:16:e9:8a:50:76:e6:c4:d1:46:39:2e: 03:3b:95:c5:1e:f6:3f:b8:22:2b:83:b4:e0:18:c7: 83:bb:1e:7d:e5:78:4f:ac:8c:47:b0:54:a6:be:02: 81:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:6B:C7:4F:C1:5B:32:76:BE:26:D8:DB:7D:69:64:61:B2:AA:1C:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c865b22-7382-32fa-86c2-5265a6651fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:86:8c:84:ad:43:8e:7e:02:04:05:b3:cf:ae:ec:ff:f0:c7: 1e:2f:64:85:27:6c:89:72:d7:32:fa:af:f5:77:8b:f5:6e:a3: 92:a9:69:5a:c2:d4:07:88:92:a0:d4:d4:d8:4b:b5:df:6e:ce: b9:7c:17:c3:06:8a:34:7e:3a:f4:0d:15:0a:35:a3:7c:6d:d4: 76:b9:a3:98:9a:e2:b1:b0:7c:7b:bc:d7:4e:f1:33:a1:b6:32: 5d:6f:90:3f:cb:f0:23:b0:c3:c0:f1:4e:b3:ad:e1:e6:0f:98: 3d:30:7c:61:0c:c4:fb:b5:e9:72:05:76:1d:04:89:69:1b:f5: ff:57:3a:be:da:a7:9a:db:f4:26:89:bc:a6:72:09:b1:09:39: 7a:2c:86:89:22:58:fc:f4:c4:ac:a2:01:05:53:74:66:69:8d: 6d:0b:af:bf:8a:e7:97:c8:0d:ef:64:a5:a6:ca:ed:97:01:99: 43:75:10:ca:71:23:55:43:ab:3d:2e:55:c2:68:9e:e2:2d:34: cd:76:53:86:e6:23:8b:e8:17:f9:19:2a:22:9f:7e:54:99:60: 36:44:47:c1:65:63:e7:9d:b6:d3:82:56:44:dd:3d:9e:f1:27: 3e:ce:ba:ef:75:70:fc:b6:66:8a:35:37:db:dc:80:56:27:a8: e0:f3:0b:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ43xQMCxeBnEgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YzEzYWZiZWMtNjU4My00YmYzLTlmY2MtMjFmYTQ1OGZkYjQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYqBC2BrTWiDxlORMUiTclhXuLGQxR11DE9p U7GVXsEe4slzHepxRP7i9xHewpStyldUIKlV+V3vfHTuLWYT0dZWt0Bz/kO8enc+ UDUvdKWPeeqba4hSUU/b8xxkFXAx5A3kDUoqgC3mnFZkJTrRTHr0jisZ7RiJ7F/S jJxoAw8m3hFpWvn7xbXZbJAlm/T01hSJbeTyqmziEAuYdHTn0tjli9iKQ56KKEtU 6wW4Fv7CNWEh1zqaf75rR4n9SqjyEqzupAbxXgnh0QyQ9CqzWB3HfsRpFumKUHbm xNFGOS4DO5XFHvY/uCIrg7TgGMeDux595XhPrIxHsFSmvgKB8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJhrx0/BWzJ2vibY231pZGGyqhx0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWM4NjViMjItNzM4Mi0z MmZhLTg2YzItNTI2NWE2NjUxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeGjIStQ45+AgQFs8+u7P/wxx4vZIUnbIly1zL6r/V3i/Vuo5KpaVrC 1AeIkqDU1NhLtd9uzrl8F8MGijR+OvQNFQo1o3xt1Ha5o5ia4rGwfHu8107xM6G2 Ml1vkD/L8COww8DxTrOt4eYPmD0wfGEMxPu16XIFdh0EiWkb9f9XOr7ap5rb9CaJ vKZyCbEJOXoshokiWPz0xKyiAQVTdGZpjW0Lr7+K55fIDe9kpabK7ZcBmUN1EMpx I1VDqz0uVcJonuItNM12U4bmI4voF/kZKiKfflSZYDZER8FlY+edttOCVkTdPZ7x Jz7Ouu91cPy2Zoo1N9vcgFYnqODzCyo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:43 2025 by rpki-client