$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa File: ba88815a-de9e-372f-8a24-3232cbdebebd.roa (raw, json) Hash identifier: bQYMiINCF67gjrragCGwHfVyRDSdZz8MvvSXZCj6QVU= Subject key identifier: E7:C7:E7:C4:84:A1:26:DC:3F:44:83:0F:25:92:87:31:5D:F8:85:C1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810D82BE8EEDC4478A2F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0d:82:be:8e:ed:c4:47:8a:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=d6b076ec-6a0b-4155-bec4-9913d1e29574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:81:db:14:e2:2a:89:eb:1f:11:48:a5:84: 1d:70:0e:ad:ef:8a:e1:c4:17:69:78:4f:20:4f:ac: db:12:02:7b:46:b5:01:25:7a:e9:3b:6f:ed:ad:1c: 91:e1:c3:6f:7a:30:fd:ec:61:1f:d1:c5:82:d6:f9: 0f:2b:c8:b5:4b:06:c3:72:ef:39:b8:92:1d:dd:5d: c8:fc:16:93:e7:88:0e:1f:12:f9:f6:46:94:17:e1: 5f:ea:d9:d1:21:17:a7:5b:41:88:e3:52:b1:18:2e: e4:97:56:50:37:f9:61:db:be:d2:5e:40:7c:19:c3: 3c:ce:8c:9b:dd:0e:b3:75:77:9f:f6:32:c2:eb:0d: 27:34:62:33:e7:af:99:cc:e4:aa:b3:e0:0e:42:ef: a2:95:ce:e8:b8:10:e1:41:00:9f:f8:dd:28:a7:e4: 8d:60:fe:de:3c:34:47:52:ea:6b:af:cc:39:ae:ac: da:93:4b:ce:39:87:32:66:de:1b:99:0a:55:95:5f: 82:bf:64:ac:2a:39:ae:87:70:54:7e:d5:f3:a1:35: 77:32:4d:2a:c5:ac:6e:ff:8a:68:2e:8d:bb:cf:d6: 58:b9:49:6c:31:95:0c:c7:db:da:fc:42:94:cf:ad: 00:c1:74:98:26:01:7b:f3:bc:13:3f:ce:d2:f4:24: 81:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:C7:E7:C4:84:A1:26:DC:3F:44:83:0F:25:92:87:31:5D:F8:85:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ba88815a-de9e-372f-8a24-3232cbdebebd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:ab:cd:64:46:c4:d6:7c:01:9d:20:93:a5:a9:0c:72:c0:c1: 27:73:8a:81:ae:2c:81:dd:b0:90:49:13:c3:dd:34:69:2e:29: f4:a9:90:82:e6:61:68:7c:19:46:50:af:0f:ec:a2:a8:ed:e3: 00:a9:af:6b:f5:65:bf:51:67:81:e5:1a:a2:d0:71:cc:98:bd: b7:40:11:bc:ba:d4:37:ee:3d:95:f9:64:1e:07:a4:ee:c8:10: 7b:b5:35:9f:e9:6f:bb:43:ca:57:3a:6b:58:45:a7:e7:36:fc: 13:af:7e:3b:ba:ce:81:d7:dc:49:cd:b0:ae:55:9f:f8:2f:ca: 05:42:a2:01:87:a6:a9:86:06:c8:c4:af:63:38:9c:91:6f:a6: 68:44:16:b5:15:01:9a:45:c5:bd:7b:b8:21:95:0b:79:f8:88: d3:fd:f3:92:a3:2d:5b:3e:21:dc:5d:e8:88:b4:a3:08:05:75: dd:78:bf:d3:6c:1b:cc:cb:fb:62:f9:f9:16:88:70:82:28:1d: 0b:ea:a4:b6:ee:7c:ed:2f:fd:09:3b:75:51:a7:08:a1:b4:8d: 43:86:67:f9:6c:a1:13:4b:ad:9a:21:d7:7a:05:aa:a4:de:2c: eb:05:85:14:5d:52:88:8d:d3:c9:42:38:ab:c2:c3:41:ba:a1: 2e:3b:c6:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ2Cvo7txEeKL0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ZDZiMDc2ZWMtNmEwYi00MTU1LWJlYzQtOTkxM2QxZTI5NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoOB2xTiKonrHxFIpYQdcA6t74rhxBdpeE8g T6zbEgJ7RrUBJXrpO2/trRyR4cNvejD97GEf0cWC1vkPK8i1SwbDcu85uJId3V3I /BaT54gOHxL59kaUF+Ff6tnRIRenW0GI41KxGC7kl1ZQN/lh277SXkB8GcM8zoyb 3Q6zdXef9jLC6w0nNGIz56+ZzOSqs+AOQu+ilc7ouBDhQQCf+N0op+SNYP7ePDRH Uuprr8w5rqzak0vOOYcyZt4bmQpVlV+Cv2SsKjmuh3BUftXzoTV3Mk0qxaxu/4po Lo27z9ZYuUlsMZUMx9va/EKUz60AwXSYJgF787wTP87S9CSBRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOfH58SEoSbcP0SDDyWShzFd+IXBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmE4ODgxNWEtZGU5ZS0z NzJmLThhMjQtMzIzMmNiZGViZWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK09MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmrzWRGxNZ8AZ0gk6WpDHLAwSdzioGuLIHdsJBJE8PdNGkuKfSpkILm YWh8GUZQrw/soqjt4wCpr2v1Zb9RZ4HlGqLQccyYvbdAEby61DfuPZX5ZB4HpO7I EHu1NZ/pb7tDylc6a1hFp+c2/BOvfju6zoHX3EnNsK5Vn/gvygVCogGHpqmGBsjE r2M4nJFvpmhEFrUVAZpFxb17uCGVC3n4iNP985KjLVs+Idxd6Ii0owgFdd14v9Ns G8zL+2L5+RaIcIIoHQvqpLbufO0v/Qk7dVGnCKG0jUOGZ/lsoRNLrZoh13oFqqTe LOsFhRRdUoiN08lCOKvCw0G6oS47xqs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:50 2025 by rpki-client