$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa File: c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa (raw, json) Hash identifier: UJpTpUA9oRPV3S+BHyQNK5dAYkOHrgqJ6TqjtIuLHtk= Subject key identifier: B4:1E:93:21:71:CD:3D:75:31:17:2D:10:51:A9:F2:E9:47:87:65:FC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581100972F3F3320D793780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:10:09:72:f3:f3:32:0d:79:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=39f12cac-b7b0-4189-b93e-4a7051720a94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:76:a6:8b:f9:e3:d4:5a:c8:e2:98:a0:7a:3d: ac:6e:06:f3:63:63:70:9e:58:65:77:b5:41:b7:63: 83:52:c0:48:f7:77:92:ff:7e:23:66:98:1d:a0:17: 09:7b:c1:c6:32:9a:bb:b1:71:51:8b:5a:70:62:3a: 0f:ef:02:0c:e5:4f:65:6e:3a:7a:d3:ae:fb:a3:44: 9f:9d:ed:5c:a9:aa:0a:58:7c:09:1b:a1:56:20:4e: 5a:99:ae:ee:35:a2:af:58:17:f3:bc:ce:78:c3:90: 8d:fe:30:45:ec:4f:45:f8:6b:0c:6d:d8:6a:33:9b: 47:a3:40:37:64:ba:1a:d1:9c:4c:47:5d:9d:f3:5d: 1c:ef:52:bc:8f:3c:bf:1c:60:28:51:e4:94:11:0e: c9:bc:12:f5:8a:9e:60:9f:c2:ab:9f:b6:f1:ad:fc: f5:c2:9d:f6:44:f2:52:9b:92:60:b8:94:78:50:33: bd:ef:94:ca:81:af:0d:72:9a:f9:ce:95:95:38:a8: ac:3e:d1:16:c3:20:b4:67:80:cf:e6:3c:91:40:1f: 42:57:22:06:14:10:76:71:5f:01:26:f5:0c:22:c8: 47:81:21:d5:23:c7:f6:14:d6:06:50:ef:a5:52:a9: 9f:db:65:ee:5d:b2:33:6a:be:1d:62:cc:47:ee:dd: 33:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1E:93:21:71:CD:3D:75:31:17:2D:10:51:A9:F2:E9:47:87:65:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:fc:a9:1b:00:f5:d3:fc:a6:86:95:a3:35:3e:13:8b:7d:be: 9c:2f:00:00:40:10:08:4c:87:af:14:02:48:f7:af:38:4b:d6: 32:c9:65:ee:f7:4a:14:8c:a9:7f:1e:38:1c:f6:b8:3f:98:f4: e6:61:e4:f2:f5:e2:14:fb:b3:d0:7f:3f:26:ef:a0:4f:bf:55: 4d:de:df:5b:92:d6:f4:db:01:d5:b4:df:8c:cb:b5:86:75:05: a1:d0:62:b6:1b:7b:b7:c9:94:68:de:30:4a:87:1c:31:16:07: e9:1d:3a:2e:fe:44:b3:d6:8d:cb:1e:58:4b:d9:d3:5a:e9:1c: e0:49:b5:b1:ba:b5:78:b8:ac:12:ae:e8:71:72:46:49:2d:2b: 3d:bd:ea:d9:91:d1:20:5d:33:75:53:62:84:a1:c5:7b:5c:c1: c0:09:ab:cd:bd:83:14:a8:ab:63:a5:6a:f9:b0:ef:88:3f:73: b0:b0:95:f3:e3:34:91:54:e7:15:18:2e:0e:d7:26:ad:aa:ee: 83:6e:32:33:af:85:c7:68:64:91:00:75:12:98:80:e8:5d:5c: dc:05:e0:ed:5b:50:91:57:86:1a:09:b9:45:a8:86:ca:f0:44: 6c:c6:e2:b4:38:c8:2d:cc:eb:1d:aa:26:db:2b:33:c5:ef:cf: 9e:54:3e:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRAJcvPzMg15N4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzlmMTJjYWMtYjdiMC00MTg5LWI5M2UtNGE3MDUxNzIwYTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgnami/nj1FrI4pigej2sbgbzY2Nwnlhld7VB t2ODUsBI93eS/34jZpgdoBcJe8HGMpq7sXFRi1pwYjoP7wIM5U9lbjp60677o0Sf ne1cqaoKWHwJG6FWIE5ama7uNaKvWBfzvM54w5CN/jBF7E9F+GsMbdhqM5tHo0A3 ZLoa0ZxMR12d810c71K8jzy/HGAoUeSUEQ7JvBL1ip5gn8Krn7bxrfz1wp32RPJS m5JguJR4UDO975TKga8Ncpr5zpWVOKisPtEWwyC0Z4DP5jyRQB9CVyIGFBB2cV8B JvUMIshHgSHVI8f2FNYGUO+lUqmf22XuXbIzar4dYsxH7t0zXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQekyFxzT11MRctEFGp8ulHh2X8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhYTNkZWUtYmMzMS0z MmEyLThiODEtOTYwNDc5OGU3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG38qRsA9dP8poaVozU+E4t9vpwvAABAEAhMh68UAkj3rzhL1jLJZe73 ShSMqX8eOBz2uD+Y9OZh5PL14hT7s9B/PybvoE+/VU3e31uS1vTbAdW034zLtYZ1 BaHQYrYbe7fJlGjeMEqHHDEWB+kdOi7+RLPWjcseWEvZ01rpHOBJtbG6tXi4rBKu 6HFyRkktKz296tmR0SBdM3VTYoShxXtcwcAJq829gxSoq2Olavmw74g/c7CwlfPj NJFU5xUYLg7XJq2q7oNuMjOvhcdoZJEAdRKYgOhdXNwF4O1bUJFXhhoJuUWohsrw RGzG4rQ4yC3M6x2qJtsrM8Xvz55UPmk= -----END CERTIFICATE-----Generated at Fri Mar 14 11:12:26 2025 by rpki-client