$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03d7682-892e-3350-a876-c578d07ad8d7.roa File: a03d7682-892e-3350-a876-c578d07ad8d7.roa (raw, json) Hash identifier: yJIr0wYutJyHzuJhPv36WMJLzVLWKAxmjpYAfbEKARU= Subject key identifier: C5:6E:4D:6C:23:B1:B3:30:03:94:84:4E:57:AB:DB:F4:69:A9:2A:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819CF309AD3192F23433C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03d7682-892e-3350-a876-c578d07ad8d7.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9c:f3:09:ad:31:92:f2:34:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=463a4feb-781b-4b7d-bbef-7ea00a152bc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:44:e4:18:29:bf:2a:e7:08:64:f6:7d:d0:c1: 35:31:aa:c0:2f:98:58:46:69:28:a5:51:63:de:c2: 2e:7b:59:a1:4d:5a:d8:bf:4c:a1:82:64:49:7c:0f: 15:13:91:b4:e2:02:da:98:c7:82:cf:c6:31:bd:9c: 29:e7:ee:0f:6c:04:52:9e:10:40:35:46:ba:95:64: 0e:9e:b1:75:da:75:77:39:0f:08:8a:9a:af:46:1b: 5b:50:d9:b7:80:34:99:e3:02:c0:03:44:9f:39:ca: fd:a8:0c:c3:53:30:18:c2:98:21:b6:57:32:d9:89: 13:54:13:f9:1a:80:63:cf:71:56:6d:da:40:d0:e0: f3:77:85:01:49:11:ef:70:29:af:35:1c:d2:d1:bc: e4:f3:dd:af:9f:18:0b:7b:a9:0d:ae:8d:d3:e3:0d: b5:56:85:93:77:a1:a9:87:03:72:c7:d3:24:ef:74: 1b:f3:3f:f0:4c:57:af:07:9a:b1:f3:03:a1:ea:45: 37:8a:3a:48:59:77:da:b2:43:d5:97:51:cd:5b:09: 2d:62:d7:60:e0:2f:d6:8b:e9:5c:4f:c6:d3:5d:ec: a9:4f:af:1c:a9:ac:1b:8b:c7:30:9e:04:fb:fc:31: 12:fd:e5:8c:cc:43:1a:36:aa:79:ed:f3:a9:a7:43: d6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:6E:4D:6C:23:B1:B3:30:03:94:84:4E:57:AB:DB:F4:69:A9:2A:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a03d7682-892e-3350-a876-c578d07ad8d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:b9:38:55:b3:05:35:08:34:36:03:b1:ba:f9:6c:76:bc:9f: 1f:01:75:67:2a:ff:fa:7a:c4:50:a4:d7:d1:2d:01:62:0a:3f: 51:28:b5:fc:f8:3a:e3:9a:06:95:90:2f:1e:ed:07:c3:41:ba: b4:2d:71:ba:aa:48:ab:55:64:ea:15:4a:04:6f:3c:47:71:ef: a3:de:f3:85:61:ac:0b:1a:e9:d8:94:37:67:c1:23:41:d6:18: 73:48:e4:0f:96:7c:10:2b:d5:c3:85:a3:b6:9d:5d:46:b9:69: 40:29:ab:3e:de:55:6d:4b:fb:08:29:a7:84:1c:96:04:28:5c: 76:bb:3b:65:80:d6:38:ed:f9:81:65:01:17:23:99:54:61:c3: 9f:46:d6:dc:10:20:53:49:e8:6d:3f:28:ee:a7:d2:18:2f:71: 18:35:21:8a:30:b6:17:06:57:00:7d:35:6b:56:59:21:a2:15: 36:8c:82:7d:ae:7f:a7:be:43:0b:f6:4a:2f:2f:47:bb:b0:d8: 8d:63:10:a1:00:63:81:8a:33:fb:86:54:2b:92:58:6f:0f:88: 3e:97:44:d9:6c:a4:7c:09:a7:ea:da:4f:de:54:2b:95:c6:39: c1:c2:5b:a3:d9:07:c5:20:ca:44:a8:f7:e5:2c:9d:72:c2:a6: 65:1b:bf:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZzzCa0xkvI0M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NDYzYTRmZWItNzgxYi00YjdkLWJiZWYtN2VhMDBhMTUyYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlETkGCm/KucIZPZ90ME1MarAL5hYRmkopVFj 3sIue1mhTVrYv0yhgmRJfA8VE5G04gLamMeCz8YxvZwp5+4PbARSnhBANUa6lWQO nrF12nV3OQ8IipqvRhtbUNm3gDSZ4wLAA0SfOcr9qAzDUzAYwpghtlcy2YkTVBP5 GoBjz3FWbdpA0ODzd4UBSRHvcCmvNRzS0bzk892vnxgLe6kNro3T4w21VoWTd6Gp hwNyx9Mk73Qb8z/wTFevB5qx8wOh6kU3ijpIWXfaskPVl1HNWwktYtdg4C/Wi+lc T8bTXeypT68cqawbi8cwngT7/DES/eWMzEMaNqp57fOpp0PWCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVuTWwjsbMwA5SETler2/RpqSrIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTAzZDc2ODItODkyZS0z MzUwLWE4NzYtYzU3OGQwN2FkOGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0OMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH+5OFWzBTUINDYDsbr5bHa8nx8BdWcq//p6xFCk19EtAWIKP1Eotfz4 OuOaBpWQLx7tB8NBurQtcbqqSKtVZOoVSgRvPEdx76Pe84VhrAsa6diUN2fBI0HW GHNI5A+WfBAr1cOFo7adXUa5aUApqz7eVW1L+wgpp4QclgQoXHa7O2WA1jjt+YFl ARcjmVRhw59G1twQIFNJ6G0/KO6n0hgvcRg1IYowthcGVwB9NWtWWSGiFTaMgn2u f6e+Qwv2Si8vR7uw2I1jEKEAY4GKM/uGVCuSWG8PiD6XRNlspHwJp+raT95UK5XG OcHCW6PZB8UgykSo9+UsnXLCpmUbv0E= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:47 2025 by rpki-client