$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa File: b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa (raw, json) Hash identifier: Xlpaz+4p08nLjR+UTHR7xbnxtI2BiXVbU7Vt4vl0XO8= Subject key identifier: 33:8F:C9:BC:4B:B2:F4:A4:ED:CB:28:62:E0:CE:36:D1:A7:C6:8E:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819F78296426DF83EBEE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9f:78:29:64:26:df:83:eb:ee:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=89c54202-1010-48e5-812a-f1e4d393d309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:8f:f7:f3:91:f8:c4:52:da:29:c0:eb:00:49: f7:e9:f1:32:49:be:65:e8:c3:7d:38:33:10:1b:60: a2:f7:1b:b2:d0:d6:cf:02:5f:ec:8f:64:af:07:da: d7:1e:23:96:07:99:0d:2d:9c:17:d0:7b:57:82:65: ec:c0:32:bc:1c:f1:52:01:ed:56:75:92:15:d8:2b: 22:91:c0:29:5f:d2:48:ba:30:1e:12:3d:f5:1d:24: d4:c5:df:f5:ec:75:01:a0:cf:49:a2:70:d9:d2:45: a3:9d:f9:ad:a2:ef:d6:34:9e:c8:ec:51:f2:e5:18: cd:d5:7b:19:1d:7e:63:46:08:9d:7f:7f:bb:ed:e3: da:31:7e:79:68:b8:ea:99:16:38:56:a3:9f:36:17: 78:e9:85:f4:24:1d:7a:a0:67:6e:fa:73:e8:da:81: fa:1a:23:76:12:bf:f7:fd:ef:40:46:08:bf:ac:fa: 1a:9d:9b:20:06:20:2f:3c:91:c2:ad:e5:1f:94:5a: 15:cd:4a:7a:3f:51:ac:78:ea:d1:8e:04:bf:0f:b6: 12:e8:28:01:16:21:72:45:24:d0:53:4a:d0:24:e2: f3:e2:8c:cd:51:06:1e:72:6f:91:05:4e:62:d4:5e: bd:54:68:8c:c5:f8:e0:c3:74:0f:0d:79:de:51:08: 3d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:8F:C9:BC:4B:B2:F4:A4:ED:CB:28:62:E0:CE:36:D1:A7:C6:8E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:1f:1d:78:60:cf:9c:7b:ef:f4:3b:5a:b3:bc:7c:0f:38:00: a5:bd:20:7b:81:d3:5c:2d:f4:a3:e0:09:55:9d:6c:03:df:76: 1e:c4:42:8a:6c:18:aa:2a:2a:32:9c:cb:5c:52:ef:a9:4c:a8: fe:6c:07:92:2a:42:40:91:5c:82:eb:f2:a1:88:b0:8b:92:d4: 9f:4c:3c:0c:31:3c:53:d1:71:0d:0e:f1:ba:3e:16:58:7f:33: 02:7a:81:7a:2d:b9:81:28:66:ab:0d:4e:8e:4b:f9:c3:5c:9d: 0e:2f:14:05:8c:24:e1:8a:37:08:11:ae:8a:b2:56:83:a6:dd: 5b:cc:de:f8:7f:da:d7:27:8b:6d:d8:de:7f:10:70:e9:ca:dd: e8:00:46:e1:a7:18:20:eb:7f:3d:35:97:00:0c:7d:d7:8d:1f: 26:cb:a4:d1:0c:94:83:e7:d1:2d:63:04:a5:59:b6:8c:fb:dd: e7:55:8a:f8:65:8e:dc:d9:a6:de:2f:db:0b:d5:4e:d4:72:38: 94:39:a1:39:3e:47:95:64:21:d8:e7:8d:75:84:a0:96:19:02: ee:00:18:1f:d6:bf:41:a3:e3:86:e7:68:59:07:79:cc:dd:81: 17:6f:2d:5f:f5:1c:65:40:5d:55:8d:db:a0:f3:15:5a:a6:0a: cd:0a:63:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ94KWQm34Pr7oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODljNTQyMDItMTAxMC00OGU1LTgxMmEtZjFlNGQzOTNkMzA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4/385H4xFLaKcDrAEn36fEySb5l6MN9ODMQ G2Ci9xuy0NbPAl/sj2SvB9rXHiOWB5kNLZwX0HtXgmXswDK8HPFSAe1WdZIV2Csi kcApX9JIujAeEj31HSTUxd/17HUBoM9JonDZ0kWjnfmtou/WNJ7I7FHy5RjN1XsZ HX5jRgidf3+77ePaMX55aLjqmRY4VqOfNhd46YX0JB16oGdu+nPo2oH6GiN2Er/3 /e9ARgi/rPoanZsgBiAvPJHCreUflFoVzUp6P1GseOrRjgS/D7YS6CgBFiFyRSTQ U0rQJOLz4ozNUQYecm+RBU5i1F69VGiMxfjgw3QPDXneUQg9DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOPybxLsvSk7csoYuDONtGnxo6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdiZDQ1YzYtMDA1OC0z ODMyLTllMjEtZWU3YmJhNWYzNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMsfHXhgz5x77/Q7WrO8fA84AKW9IHuB01wt9KPgCVWdbAPfdh7EQops GKoqKjKcy1xS76lMqP5sB5IqQkCRXILr8qGIsIuS1J9MPAwxPFPRcQ0O8bo+Flh/ MwJ6gXotuYEoZqsNTo5L+cNcnQ4vFAWMJOGKNwgRroqyVoOm3VvM3vh/2tcni23Y 3n8QcOnK3egARuGnGCDrfz01lwAMfdeNHybLpNEMlIPn0S1jBKVZtoz73edVivhl jtzZpt4v2wvVTtRyOJQ5oTk+R5VkIdjnjXWEoJYZAu4AGB/Wv0Gj44bnaFkHeczd gRdvLV/1HGVAXVWN26DzFVqmCs0KY/Q= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:05 2025 by rpki-client