$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa File: b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa (raw, json) Hash identifier: 8guLhorgPRYza5ZfkOqSatmjPW8013U5Xwnb3K6Y3+g= Subject key identifier: 4C:38:E5:B0:C2:2F:57:C6:28:61:1E:50:8B:8D:96:E7:73:C5:7F:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819F568F91FB1771117080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9f:56:8f:91:fb:17:71:11:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a3d4edc8-8ac5-4c9a-89db-1ec1a899ea17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:94:45:45:a5:c9:df:a2:b4:7e:0b:de:01:d1: ab:45:d7:e3:4a:26:55:fe:2e:6e:a9:e9:b4:d1:5a: 54:33:fe:0d:fa:48:a1:3f:76:d1:52:a5:00:d3:96: 2f:1c:23:0d:5a:7e:87:34:e8:d2:4c:f6:29:66:8d: d2:e1:eb:79:57:a4:cf:8d:5e:b2:39:3d:22:ca:e7: fc:e8:51:ea:f0:3e:e4:f0:71:b6:09:32:cf:cc:6e: 42:9f:23:c2:2c:02:0b:22:3a:b3:f4:7b:04:65:63: 98:8e:37:46:80:e5:f9:aa:bd:3a:34:4a:b2:d0:a5: 09:a4:e1:4b:69:16:3c:32:9e:cf:fb:e5:e6:2c:50: 2b:d9:68:11:13:b5:56:09:9e:74:e8:96:67:8f:e6: d2:7b:54:9d:29:ec:5a:a2:e3:60:1d:bc:d9:d9:83: ee:68:9a:17:65:3a:0c:e4:3f:f6:ee:94:c0:b4:6e: dc:84:3c:ab:8d:17:74:ba:e7:1b:5d:41:95:a4:72: 70:b2:88:85:f8:8b:dc:1e:a2:21:04:a1:15:9f:4a: 86:1b:06:e1:cf:5c:c5:8f:bb:63:67:4a:2d:22:b6: e2:7d:73:d1:a4:d6:e8:8f:f1:13:8e:fa:f3:30:da: 4d:a8:bc:54:d8:aa:81:9a:1b:fc:52:47:34:9d:75: d3:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:38:E5:B0:C2:2F:57:C6:28:61:1E:50:8B:8D:96:E7:73:C5:7F:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4149e4a-3ff1-3c3b-a812-0884bd5a4e7f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:d4:8e:7d:66:ab:71:37:63:ac:52:1d:4a:32:04:89:90:49: ff:fe:a7:a6:83:fa:bc:f6:c8:65:94:ed:6c:3e:b0:0a:ec:be: f0:29:3c:2f:b4:28:99:4a:5f:4b:91:72:b3:d4:54:05:15:26: a9:a5:b5:68:f4:5f:05:32:74:23:fb:a0:2e:1c:3d:bb:f8:2f: 2c:f0:fe:b3:f9:f7:d1:f9:d9:d3:eb:3f:ff:4e:06:da:e5:a1: f4:0d:fb:e5:b3:f1:3e:60:43:2c:26:b1:3d:b7:c5:15:ce:c6: f6:1c:ac:f3:52:8a:99:4d:6a:a7:70:24:ac:6a:02:5d:10:03: 08:74:b4:b1:87:9c:e3:90:1c:c6:c5:a5:2a:4c:85:29:9b:08: 17:13:ef:b9:d9:79:b2:c3:c3:01:6d:b7:3b:7b:f7:01:7b:56: cf:28:4a:cb:d8:a5:a9:2d:98:d8:28:16:a2:0b:30:14:ca:6a: c4:54:38:fa:79:74:ab:85:d1:b8:da:d6:73:61:26:c9:7b:ae: 96:71:98:69:a8:45:b0:54:ed:34:30:dc:34:ad:c3:6a:f6:46: 96:ac:90:5f:dd:e9:45:e5:98:e1:19:68:2f:9a:50:51:94:b9: f2:41:b3:9d:bc:ef:ee:5c:e0:5d:ec:8d:83:69:7c:69:ae:64: 89:be:30:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ9Wj5H7F3ERcIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTNkNGVkYzgtOGFjNS00YzlhLTg5ZGItMWVjMWE4OTllYTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwJRFRaXJ36K0fgveAdGrRdfjSiZV/i5uqem0 0VpUM/4N+kihP3bRUqUA05YvHCMNWn6HNOjSTPYpZo3S4et5V6TPjV6yOT0iyuf8 6FHq8D7k8HG2CTLPzG5CnyPCLAILIjqz9HsEZWOYjjdGgOX5qr06NEqy0KUJpOFL aRY8Mp7P++XmLFAr2WgRE7VWCZ506JZnj+bSe1SdKexaouNgHbzZ2YPuaJoXZToM 5D/27pTAtG7chDyrjRd0uucbXUGVpHJwsoiF+IvcHqIhBKEVn0qGGwbhz1zFj7tj Z0otIrbifXPRpNboj/ETjvrzMNpNqLxU2KqBmhv8Ukc0nXXTmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEw45bDCL1fGKGEeUIuNludzxX/IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjQxNDllNGEtM2ZmMS0z YzNiLWE4MTItMDg4NGJkNWE0ZTdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLUjn1mq3E3Y6xSHUoyBImQSf/+p6aD+rz2yGWU7Ww+sArsvvApPC+0 KJlKX0uRcrPUVAUVJqmltWj0XwUydCP7oC4cPbv4Lyzw/rP599H52dPrP/9OBtrl ofQN++Wz8T5gQywmsT23xRXOxvYcrPNSiplNaqdwJKxqAl0QAwh0tLGHnOOQHMbF pSpMhSmbCBcT77nZebLDwwFttzt79wF7Vs8oSsvYpaktmNgoFqILMBTKasRUOPp5 dKuF0bja1nNhJsl7rpZxmGmoRbBU7TQw3DStw2r2RpaskF/d6UXlmOEZaC+aUFGU ufJBs5287+5c4F3sjYNpfGmuZIm+MIE= -----END CERTIFICATE-----Generated at Sat Apr 12 02:12:00 2025 by rpki-client