$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab8f18ff-a2a3-3247-8fee-9dab912df216.roa File: ab8f18ff-a2a3-3247-8fee-9dab912df216.roa (raw, json) Hash identifier: ptHZZXez9j0dkV76xFJM98AlpKvHlHBeftreM3kBlXo= Subject key identifier: 90:5A:31:3B:86:39:8E:AF:9B:F7:44:0E:6B:11:29:A2:3A:72:69:2C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810C766B9C5DD1BD98BD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab8f18ff-a2a3-3247-8fee-9dab912df216.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0c:76:6b:9c:5d:d1:bd:98:bd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d591ca99-a431-4fe9-9e05-1dee43a5e82c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:28:30:e7:bc:51:10:78:bb:32:3a:d0:0f:19: 87:4c:52:e5:a2:f5:bd:4c:25:54:c1:86:38:93:49: f2:1a:51:61:21:96:1e:c5:c1:8d:98:70:c5:fc:72: bd:70:cf:6c:9c:fd:75:6d:ed:bd:8c:80:04:c4:5d: ab:a6:81:20:d2:38:6d:1a:d2:18:56:8c:c5:fa:54: 1e:74:20:76:18:b0:51:41:30:22:85:4c:83:8f:e7: 78:41:84:4f:75:5d:22:6f:bb:18:32:f6:52:92:cc: 59:f3:60:1c:17:dc:83:ce:30:98:4c:f2:e7:0c:4b: 1b:4d:6a:4c:7b:55:6d:02:74:62:c2:07:51:ec:c0: 1b:6e:06:6c:9f:13:70:75:98:55:06:5f:c0:93:ad: 19:c2:c2:6d:2a:67:c6:35:81:82:fe:6d:ec:c1:0f: 10:e5:de:b3:be:3c:21:7a:5a:3a:26:b0:7d:45:63: 67:90:59:0b:3e:5d:46:cb:7b:0e:ca:f6:e8:49:cb: 7d:1e:0d:6b:3f:50:4a:6b:08:9b:0f:b0:d3:ff:d3: 86:55:88:93:8b:ba:7d:09:ea:6d:6b:90:48:f1:cf: 1a:16:40:16:f4:bc:41:6c:23:26:95:ce:a4:8d:91: 06:ec:3f:83:ff:93:bd:f7:8e:d4:f0:d5:26:4b:3b: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5A:31:3B:86:39:8E:AF:9B:F7:44:0E:6B:11:29:A2:3A:72:69:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ab8f18ff-a2a3-3247-8fee-9dab912df216.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:e3:fa:dc:85:cc:a8:00:96:08:6d:da:f9:92:8c:b6:0d:38: 8c:90:49:af:93:ab:6f:ed:71:a6:6e:b0:d4:13:0c:ce:5e:52: 1c:5a:06:3a:0c:68:84:f4:40:6b:21:87:f7:bc:9c:68:3d:da: e9:1f:cb:a7:05:4c:d9:f6:fe:b5:ef:bf:14:56:b5:97:8a:8f: 62:2b:2f:c2:4c:f1:6e:dc:9d:57:29:fe:75:8e:7b:bb:9b:7d: ac:86:7d:7c:0f:72:5b:ea:0a:14:a7:86:68:38:30:16:06:ae: 6f:61:d8:45:79:3d:c2:17:a9:af:8b:98:af:d5:43:cf:27:ef: 81:e9:ab:2e:ce:03:31:0e:25:c4:6a:5f:53:78:fe:f8:26:03: 94:21:37:57:67:25:45:3a:62:b7:f5:36:fb:8c:d6:ce:b0:d7: e8:9d:53:88:fd:80:16:8c:4f:54:7d:70:88:65:ca:73:02:c5: 22:77:b1:58:12:d2:b1:a1:a3:0d:49:5d:a3:71:66:78:7a:13: c0:d1:99:a6:08:1a:9e:e1:cc:20:0f:05:18:c5:b4:ac:8c:71: d0:40:2f:ee:31:a5:23:79:4b:e7:7c:3a:78:87:3a:c4:80:97: 7d:a9:fd:97:e9:9d:6b:fb:27:f5:55:24:74:9c:a4:9f:0c:5d: 9d:58:68:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQx2a5xd0b2YvYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDU5MWNhOTktYTQzMS00ZmU5LTllMDUtMWRlZTQzYTVlODJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCgw57xREHi7MjrQDxmHTFLlovW9TCVUwYY4 k0nyGlFhIZYexcGNmHDF/HK9cM9snP11be29jIAExF2rpoEg0jhtGtIYVozF+lQe dCB2GLBRQTAihUyDj+d4QYRPdV0ib7sYMvZSksxZ82AcF9yDzjCYTPLnDEsbTWpM e1VtAnRiwgdR7MAbbgZsnxNwdZhVBl/Ak60ZwsJtKmfGNYGC/m3swQ8Q5d6zvjwh elo6JrB9RWNnkFkLPl1Gy3sOyvboSct9Hg1rP1BKawibD7DT/9OGVYiTi7p9Cept a5BI8c8aFkAW9LxBbCMmlc6kjZEG7D+D/5O9947U8NUmSztO4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJBaMTuGOY6vm/dEDmsRKaI6cmksMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWI4ZjE4ZmYtYTJhMy0z MjQ3LThmZWUtOWRhYjkxMmRmMjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFfj+tyFzKgAlght2vmSjLYNOIyQSa+Tq2/tcaZusNQTDM5eUhxaBjoM aIT0QGshh/e8nGg92ukfy6cFTNn2/rXvvxRWtZeKj2IrL8JM8W7cnVcp/nWOe7ub fayGfXwPclvqChSnhmg4MBYGrm9h2EV5PcIXqa+LmK/VQ88n74Hpqy7OAzEOJcRq X1N4/vgmA5QhN1dnJUU6Yrf1NvuM1s6w1+idU4j9gBaMT1R9cIhlynMCxSJ3sVgS 0rGhow1JXaNxZnh6E8DRmaYIGp7hzCAPBRjFtKyMcdBAL+4xpSN5S+d8OniHOsSA l32p/ZfpnWv7J/VVJHScpJ8MXZ1YaAs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:19:16 2025 by rpki-client