$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa File: cd00562d-c510-3278-bc5b-277689f9a48d.roa (raw, json) Hash identifier: O8TfZ0ovpFkg/sf5DCZ83jrn7O0kNqC4d6i7vvbCmnY= Subject key identifier: 74:55:F4:68:99:3C:7F:D4:50:74:B7:AB:03:4B:D9:2B:D9:97:F4:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C58110DF94CFB4233E21CC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:10:df:94:cf:b4:23:3e:21:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=308f113f-62ef-45ef-ad68-fcd26a19514a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:ff:a8:1c:01:de:d8:b7:57:8d:90:c9:31:5a: ae:6a:f2:ed:c2:14:37:68:ea:24:4b:97:27:ac:b9: b1:96:23:3e:6f:95:6d:1b:0a:2d:a7:f8:11:0a:f4: 4c:ee:08:c0:8e:1c:19:88:9f:66:7d:5d:61:b0:8c: 06:1b:bc:08:09:4a:ab:98:e6:21:30:a8:e4:f7:59: 66:ca:6a:52:33:10:36:07:1c:62:26:5d:93:85:c5: bc:67:40:90:84:01:4a:7a:b5:03:d0:26:84:ce:4c: 75:41:df:bd:f0:de:bd:85:01:a2:10:39:b9:8f:c6: c2:95:9c:49:17:a7:2d:a3:f6:00:7a:82:9f:ff:b5: c4:d3:20:df:9b:07:77:2e:31:f7:cf:99:42:6c:30: 64:26:8c:d8:40:2b:fc:96:50:c1:03:63:47:e3:bc: f6:a3:05:d1:af:43:e8:3a:3b:03:6b:54:9c:e9:b1: b2:ee:62:64:76:48:9c:70:26:61:cb:7b:dd:fe:eb: ed:17:a7:0a:0f:43:b3:25:10:d9:94:b2:61:db:00: 5e:e6:3c:7e:90:2a:d5:8a:97:45:55:ad:e3:b4:b0: e6:e2:53:8f:0e:02:36:97:a6:19:20:8c:4a:80:c9: 58:ce:9d:4e:1d:62:9e:33:a3:d9:fb:fc:76:66:ae: 0d:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:55:F4:68:99:3C:7F:D4:50:74:B7:AB:03:4B:D9:2B:D9:97:F4:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:17:25:c7:9b:16:5a:de:77:61:82:03:6f:d6:d3:d7:a8:b3: a5:f8:02:a8:60:d4:00:57:36:0a:67:6e:84:e4:ea:62:ca:2a: 1b:56:50:55:42:9a:70:67:da:95:65:fb:08:bb:2a:d6:09:56: 38:54:ec:f6:c7:55:60:03:b9:1d:24:ea:2e:02:77:cc:08:26: a1:03:8d:ed:a6:21:e1:7c:da:86:de:42:f1:28:de:59:3c:45: 82:1e:e9:6f:91:4c:cb:08:dd:48:3f:44:7b:a2:e5:b0:57:3c: 67:4d:99:de:b1:be:54:62:f1:99:91:44:47:f1:b0:e8:af:1f: 60:f7:ed:44:8a:65:bb:5f:c4:54:e8:90:68:e4:09:bd:a4:07: 40:e5:95:0b:aa:50:f9:51:e6:20:0b:30:ec:33:54:31:a3:2a: ab:14:48:44:f3:84:a0:f6:31:9b:6b:b5:01:f0:71:f7:cd:17: 52:45:73:a7:81:80:b2:87:b9:d4:72:cc:45:00:da:1e:bd:d9: a3:36:f1:d3:89:b9:57:0a:38:8e:20:5f:b1:ff:3d:4f:38:ff: e3:e9:57:64:e4:21:7b:ad:de:0c:2c:17:30:57:d2:ad:60:91: 28:01:ae:82:90:7a:82:8e:fb:c5:ca:20:b2:5e:dc:92:fe:51: 08:df:8a:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRDflM+0Iz4hzAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MzA4ZjExM2YtNjJlZi00NWVmLWFkNjgtZmNkMjZhMTk1MTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5f+oHAHe2LdXjZDJMVquavLtwhQ3aOokS5cn rLmxliM+b5VtGwotp/gRCvRM7gjAjhwZiJ9mfV1hsIwGG7wICUqrmOYhMKjk91lm ympSMxA2BxxiJl2ThcW8Z0CQhAFKerUD0CaEzkx1Qd+98N69hQGiEDm5j8bClZxJ F6cto/YAeoKf/7XE0yDfmwd3LjH3z5lCbDBkJozYQCv8llDBA2NH47z2owXRr0Po OjsDa1Sc6bGy7mJkdkiccCZhy3vd/uvtF6cKD0OzJRDZlLJh2wBe5jx+kCrVipdF Va3jtLDm4lOPDgI2l6YZIIxKgMlYzp1OHWKeM6PZ+/x2Zq4NQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRV9GiZPH/UUHS3qwNL2SvZl/SUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2QwMDU2MmQtYzUxMC0z Mjc4LWJjNWItMjc3Njg5ZjlhNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMQXJcebFlred2GCA2/W09eos6X4Aqhg1ABXNgpnboTk6mLKKhtWUFVC mnBn2pVl+wi7KtYJVjhU7PbHVWADuR0k6i4Cd8wIJqEDje2mIeF82obeQvEo3lk8 RYIe6W+RTMsI3Ug/RHui5bBXPGdNmd6xvlRi8ZmRREfxsOivH2D37USKZbtfxFTo kGjkCb2kB0DllQuqUPlR5iALMOwzVDGjKqsUSETzhKD2MZtrtQHwcffNF1JFc6eB gLKHudRyzEUA2h692aM28dOJuVcKOI4gX7H/PU84/+PpV2TkIXut3gwsFzBX0q1g kSgBroKQeoKO+8XKILJe3JL+UQjfitE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:45:45 2025 by rpki-client