$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa File: a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa (raw, json) Hash identifier: Azhj0mxpE6Y8P4pVSkeAWmeaWMIpgHMq+ntZ9eiYpMc= Subject key identifier: 36:58:78:28:7F:4D:CB:12:DA:00:16:5E:85:3E:F1:25:F0:03:04:A1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C580FB15EEA6E5696B605280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 40306 IP address blocks: 72.173.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:80:fb:15:ee:a6:e5:69:6b:60:52:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d457b0e2-0e5a-40b5-89e9-c0aa1fd4888b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:86:3b:24:d5:b2:45:02:27:43:ad:6f:74:c9: 3e:cb:50:24:67:58:3c:53:26:18:39:6c:19:80:85: 6e:f9:a5:0e:ea:20:bb:52:c0:99:89:16:02:bf:79: bd:52:6d:30:d9:53:42:82:05:3e:2a:f1:45:7f:4d: c4:b6:0c:ad:57:d3:a6:c8:02:76:ab:01:05:a6:c4: 59:0f:35:02:c6:26:e7:87:b0:f2:1e:0b:e5:3d:f3: 9d:4b:68:14:fa:53:29:0b:3c:b9:0d:9e:44:28:89: 7f:f8:74:9a:6d:96:8d:73:65:4c:66:f8:af:6f:0c: a6:54:87:87:ce:d8:fa:51:30:c5:96:02:a5:ea:a4: a0:b1:41:de:dc:3f:34:65:b1:81:ee:56:82:fb:1d: 32:d0:e7:50:5a:7c:ea:73:51:48:eb:41:a3:1e:f7: fe:1e:4d:49:ad:d4:6c:0b:10:3e:ab:c2:2b:80:7d: 93:e8:93:c6:4e:93:ea:0e:3d:e6:97:1d:00:7e:41: 79:93:90:6f:94:4f:2c:a6:32:da:8d:5a:bf:86:7f: 6f:5e:a8:13:a1:c6:bb:eb:93:0b:e7:19:83:70:c4: 93:16:ac:00:2e:64:eb:59:d6:7e:70:57:c6:f5:1b: 71:a5:a7:81:03:e2:2d:3e:25:a7:d0:dd:b8:01:a8: ca:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:58:78:28:7F:4D:CB:12:DA:00:16:5E:85:3E:F1:25:F0:03:04:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:59:95:34:f0:2c:5a:9e:26:68:19:7d:62:03:da:3e:ab:d4: 5b:33:f4:51:a2:21:cc:f0:0e:95:1e:59:6a:1a:48:60:af:56: 04:e5:31:42:cb:6b:0c:cc:20:1c:65:5d:5d:0f:62:cf:34:d8: 61:86:43:6e:58:6c:56:0f:77:79:b6:70:11:7a:e7:a8:7f:1c: e1:a7:50:b6:44:61:dc:d3:a5:19:e5:f1:8d:7c:6c:c6:fa:b0: 94:be:93:cc:b7:b4:27:dd:a8:be:91:46:81:4b:c5:37:d3:97: b6:ad:51:25:e5:cf:a9:0b:dc:55:d4:74:4f:7e:04:86:89:cb: ef:61:9a:c7:74:90:52:e8:e9:77:d0:56:05:eb:94:7f:36:56: 6f:3c:3b:3c:47:b4:27:52:93:d2:78:84:5a:6a:39:c7:73:ce: 85:68:e9:45:f3:bf:18:27:85:80:7c:3f:b9:a5:11:57:6a:55: ea:59:76:79:9e:f3:1a:87:48:0b:7b:04:db:3e:1f:ff:e5:2c: 5e:65:72:ea:e0:6d:0e:ee:f7:fe:c7:6e:21:13:6e:ef:43:9a: 8b:78:db:59:28:98:6a:46:8a:25:89:9b:7a:10:c6:a4:b0:ff: 7b:de:13:54:bf:17:ff:ef:e8:21:f8:46:59:1f:fc:29:fe:96: b4:ae:0b:c0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgPsV7qblaWtgUoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDQ1N2IwZTItMGU1YS00MGI1LTg5ZTktYzBhYTFmZDQ4ODhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAooY7JNWyRQInQ61vdMk+y1AkZ1g8UyYYOWwZ gIVu+aUO6iC7UsCZiRYCv3m9Um0w2VNCggU+KvFFf03EtgytV9OmyAJ2qwEFpsRZ DzUCxibnh7DyHgvlPfOdS2gU+lMpCzy5DZ5EKIl/+HSabZaNc2VMZvivbwymVIeH ztj6UTDFlgKl6qSgsUHe3D80ZbGB7laC+x0y0OdQWnzqc1FI60GjHvf+Hk1JrdRs CxA+q8IrgH2T6JPGTpPqDj3mlx0AfkF5k5BvlE8spjLajVq/hn9vXqgToca765ML 5xmDcMSTFqwALmTrWdZ+cFfG9RtxpaeBA+ItPiWn0N24AajKcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZYeCh/TcsS2gAWXoU+8SXwAwShMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNkOWRlYWEtNGUyMC0z MTdjLTg1ZTktMmMyZWM4YmNiNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtZlTTwLFqeJmgZfWID2j6r1Fsz9FGiIczwDpUeWWoaSGCvVgTlMULL awzMIBxlXV0PYs802GGGQ25YbFYPd3m2cBF656h/HOGnULZEYdzTpRnl8Y18bMb6 sJS+k8y3tCfdqL6RRoFLxTfTl7atUSXlz6kL3FXUdE9+BIaJy+9hmsd0kFLo6XfQ VgXrlH82Vm88OzxHtCdSk9J4hFpqOcdzzoVo6UXzvxgnhYB8P7mlEVdqVepZdnme 8xqHSAt7BNs+H//lLF5lcurgbQ7u9/7HbiETbu9Dmot421komGpGiiWJm3oQxqSw /3veE1S/F//v6CH4Rlkf/Cn+lrSuC8A= -----END CERTIFICATE-----Generated at Fri Mar 14 10:46:06 2025 by rpki-client