$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa File: ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa (raw, json) Hash identifier: tDfTnuGePvkYt4C43JhIi0cvIMDje6BVut0nNL6unH0= Subject key identifier: 71:27:F2:F6:A7:EA:00:F5:16:61:02:E7:2C:7C:F0:CA:9A:42:00:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58112B0B36B6DFD73E59F10 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:12:b0:b3:6b:6d:fd:73:e5:9f:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5bb38e6e-b256-49b6-8c09-16a1e4690f6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:cb:7b:d6:fa:b5:c4:68:d7:e4:52:7b:5f:ed: e5:83:7f:23:03:df:c5:10:00:bd:77:e0:64:68:f2: 55:fb:02:67:d8:6c:ec:c1:5a:10:10:a7:00:1e:04: af:83:4c:91:e1:01:a4:ed:a5:f1:6f:8d:86:8a:31: f1:f0:4c:7d:63:fc:56:07:28:f9:2c:57:f0:1e:e4: b3:d2:0b:31:7d:4b:95:fc:3e:98:8a:9b:23:0d:83: be:25:33:98:fa:7d:5c:fd:fe:ce:47:41:d7:32:85: 78:93:1a:6a:fe:07:8f:0f:bc:2f:9d:ef:5e:78:68: a2:e5:a6:4a:8a:04:01:b7:fb:92:01:24:cc:f8:aa: c2:20:0d:fd:05:20:36:18:c9:4b:eb:d1:73:0c:5a: 37:1d:b9:cc:cd:6e:be:a8:c7:88:58:5a:60:8b:91: 6f:f9:5e:28:e1:4a:5b:77:dd:90:63:8b:4b:f1:99: 97:f1:76:11:79:45:22:1d:a5:e6:53:c7:38:0b:ef: 11:4b:bc:04:44:e0:04:1b:db:2d:53:1e:aa:1b:e5: 37:59:21:d7:1c:3f:8d:53:32:47:1f:05:f1:95:47: 35:3f:2c:d0:d4:b5:2b:f7:77:98:13:4f:99:f4:8a: 54:f3:2b:2c:d6:4a:a2:4a:f5:16:cd:11:0b:52:46: bf:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:27:F2:F6:A7:EA:00:F5:16:61:02:E7:2C:7C:F0:CA:9A:42:00:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:6d:84:37:ec:6c:80:be:4f:e0:e0:96:5a:00:c8:be:36:df: c0:57:2b:a5:a0:fb:c5:53:3a:d5:ea:da:17:2c:98:d0:21:78: d6:13:cc:05:8f:b8:1e:cd:c3:b9:7f:09:c2:17:a7:e8:6c:a8: 6f:78:94:99:82:e1:9e:c2:eb:ff:a6:9f:0d:94:2a:24:64:75: a6:aa:d5:a7:a1:9e:67:59:88:d3:07:db:93:d5:c3:5e:6e:3f: 6a:49:2b:d8:0b:6d:fb:14:6d:c8:c1:09:b2:a0:2b:71:20:21: f7:a5:50:09:a6:89:41:08:31:c7:60:3e:25:6c:1f:21:75:28: 8a:d8:4f:d5:c3:e7:b0:7a:15:a2:22:ff:28:fd:ba:b9:ed:5f: 18:34:59:12:fe:e2:ef:6c:e8:9b:88:d8:67:42:1f:2e:92:ba: 6e:08:be:b4:c2:93:d8:ec:35:7b:3e:2c:19:50:5a:06:19:b9: bd:a8:ba:99:0d:72:3f:eb:39:e0:b5:f9:45:b2:36:f5:7b:3e: 81:ad:7f:2c:d0:1b:75:a3:45:21:3a:d9:b5:f6:07:bc:87:9a: 82:22:cc:b5:84:08:02:19:d3:5f:88:cf:49:4d:a5:62:4f:86: 35:ac:c1:c2:83:52:48:17:80:60:b1:61:57:65:09:38:82:91: 5f:d2:d5:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRKws2tt/XPlnxAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NWJiMzhlNmUtYjI1Ni00OWI2LThjMDktMTZhMWU0NjkwZjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMt71vq1xGjX5FJ7X+3lg38jA9/FEAC9d+Bk aPJV+wJn2GzswVoQEKcAHgSvg0yR4QGk7aXxb42GijHx8Ex9Y/xWByj5LFfwHuSz 0gsxfUuV/D6YipsjDYO+JTOY+n1c/f7OR0HXMoV4kxpq/gePD7wvne9eeGii5aZK igQBt/uSASTM+KrCIA39BSA2GMlL69FzDFo3HbnMzW6+qMeIWFpgi5Fv+V4o4Upb d92QY4tL8ZmX8XYReUUiHaXmU8c4C+8RS7wEROAEG9stUx6qG+U3WSHXHD+NUzJH HwXxlUc1PyzQ1LUr93eYE0+Z9IpU8yss1kqiSvUWzRELUka/tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHEn8van6gD1FmEC5yx88MqaQgANMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU0YmE4NjctYjA3Ny0z ZjU0LWE4YWYtOWZiMTJmZTdlOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFthDfsbIC+T+DglloAyL4238BXK6Wg+8VTOtXq2hcsmNAheNYTzAWP uB7Nw7l/CcIXp+hsqG94lJmC4Z7C6/+mnw2UKiRkdaaq1aehnmdZiNMH25PVw15u P2pJK9gLbfsUbcjBCbKgK3EgIfelUAmmiUEIMcdgPiVsHyF1KIrYT9XD57B6FaIi /yj9urntXxg0WRL+4u9s6JuI2GdCHy6Sum4IvrTCk9jsNXs+LBlQWgYZub2oupkN cj/rOeC1+UWyNvV7PoGtfyzQG3WjRSE62bX2B7yHmoIizLWECAIZ01+Iz0lNpWJP hjWswcKDUkgXgGCxYVdlCTiCkV/S1Vw= -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:40 2025 by rpki-client