$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cec60dc8-9d70-3eaa-ada9-601b95751123.roa File: cec60dc8-9d70-3eaa-ada9-601b95751123.roa (raw, json) Hash identifier: d4+D2uybM1IxowxQOpBNI80SI497TpCDm8qt7fsbweQ= Subject key identifier: 9E:45:0E:81:B0:46:0D:D4:B5:CC:79:E1:77:65:28:33:FE:DC:8A:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819E8F0BB84A11A25FB600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cec60dc8-9d70-3eaa-ada9-601b95751123.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9e:8f:0b:b8:4a:11:a2:5f:b6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=0a445caf-5941-457a-bf74-5db2936fbda7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:98:69:43:67:79:80:17:00:47:40:c3:44:4d: 32:d8:8c:3f:9d:e3:ab:e9:99:79:59:ea:ff:79:be: eb:48:88:76:60:08:a1:df:4a:f4:23:e0:cf:e4:2e: db:4e:5d:63:a3:4e:ee:da:d0:eb:1c:f3:bd:72:7c: e0:20:18:1d:f2:ac:95:66:79:a5:9d:15:7e:3a:d3: 85:76:dc:1a:e0:1a:8a:ba:b3:9c:7d:52:53:f9:bd: 4d:2c:bb:4d:56:c9:0a:f1:88:7e:65:91:fd:00:35: 55:4d:cc:76:be:b8:e6:2f:f6:3e:0d:02:6c:2d:4b: 84:73:78:ad:c6:a9:ac:c2:a7:77:8d:48:b8:6d:7a: 78:68:e7:fb:7f:46:8d:78:5c:c3:e1:d4:07:bd:ef: 58:0e:dc:1a:7f:e2:70:f7:eb:30:cf:9f:a2:a9:03: 99:28:b3:c9:8b:da:d3:4c:2b:e2:5a:35:3b:d6:86: db:b9:b9:6d:28:13:61:34:87:e4:c6:3d:b4:7d:34: ac:18:90:4a:42:f8:77:29:9a:5a:4f:7e:59:7b:51: d5:b8:1a:9e:ef:7e:5a:32:6a:ac:1d:db:a3:58:fd: 6e:dd:17:6e:26:7d:de:7b:cd:06:3f:ba:6f:cb:86: 04:b2:ce:b6:92:18:4f:52:f8:75:16:08:d3:9a:a4: 6d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:45:0E:81:B0:46:0D:D4:B5:CC:79:E1:77:65:28:33:FE:DC:8A:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cec60dc8-9d70-3eaa-ada9-601b95751123.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:2d:2e:0d:ad:bf:0c:f0:8e:4b:f9:e4:ba:cd:23:87:56:12: 15:9d:44:df:d2:88:d4:04:18:6e:21:39:3a:37:24:11:33:e8: 7f:f7:b5:be:b5:f2:2f:e3:d9:26:65:e0:95:e7:b2:e2:e3:07: c8:bc:f5:f8:e6:38:94:36:e8:3c:26:5c:69:0d:28:48:62:ad: 70:16:26:33:d2:1f:46:c6:b3:88:f2:e9:15:1c:68:cc:f2:b1: 85:3b:6a:8d:46:17:c2:ef:d1:dd:27:32:73:a7:31:fa:d6:41: 42:d0:45:54:7a:5f:dd:d8:83:06:4f:c2:c1:7a:7a:7f:11:de: 35:07:f3:38:e4:16:65:25:05:ea:1a:6d:20:f9:45:ec:c5:8e: 40:dd:b6:5e:99:b6:3c:b7:53:84:38:67:1a:22:22:75:ea:d3: 8d:8e:d7:db:73:1c:00:b8:eb:f3:f3:ca:c3:6f:56:69:6e:73: 34:2a:f8:44:4b:7e:c4:f3:62:27:4c:1b:d9:30:0a:5d:73:64: 54:54:2d:7a:cc:5f:82:35:91:b5:9c:6f:7f:cd:86:cf:d1:c5: 18:d7:b7:d6:16:69:65:f5:80:d8:01:d2:9f:a0:57:af:6f:21: 5c:94:9d:8f:96:ef:97:e8:d8:cf:f7:e0:82:a3:76:95:97:22: 21:a6:15:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ6PC7hKEaJftgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MGE0NDVjYWYtNTk0MS00NTdhLWJmNzQtNWRiMjkzNmZiZGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhpQ2d5gBcAR0DDRE0y2Iw/neOr6Zl5Wer/ eb7rSIh2YAih30r0I+DP5C7bTl1jo07u2tDrHPO9cnzgIBgd8qyVZnmlnRV+OtOF dtwa4BqKurOcfVJT+b1NLLtNVskK8Yh+ZZH9ADVVTcx2vrjmL/Y+DQJsLUuEc3it xqmswqd3jUi4bXp4aOf7f0aNeFzD4dQHve9YDtwaf+Jw9+swz5+iqQOZKLPJi9rT TCviWjU71obbubltKBNhNIfkxj20fTSsGJBKQvh3KZpaT35Ze1HVuBqe735aMmqs HdujWP1u3RduJn3ee80GP7pvy4YEss62khhPUvh1FgjTmqRt7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ5FDoGwRg3Utcx54XdlKDP+3IqvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2VjNjBkYzgtOWQ3MC0z ZWFhLWFkYTktNjAxYjk1NzUxMTIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1SMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKItLg2tvwzwjkv55LrNI4dWEhWdRN/SiNQEGG4hOTo3JBEz6H/3tb61 8i/j2SZl4JXnsuLjB8i89fjmOJQ26DwmXGkNKEhirXAWJjPSH0bGs4jy6RUcaMzy sYU7ao1GF8Lv0d0nMnOnMfrWQULQRVR6X93YgwZPwsF6en8R3jUH8zjkFmUlBeoa bSD5RezFjkDdtl6Ztjy3U4Q4ZxoiInXq042O19tzHAC46/PzysNvVmluczQq+ERL fsTzYidMG9kwCl1zZFRULXrMX4I1kbWcb3/Nhs/RxRjXt9YWaWX1gNgB0p+gV69v IVyUnY+W75fo2M/34IKjdpWXIiGmFdE= -----END CERTIFICATE-----Generated at Fri Apr 11 23:43:25 2025 by rpki-client