$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa File: d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa (raw, json) Hash identifier: 3v0G7HXDRtpgK6j5qg7lEovurbzFqEgKIqTzL7lfmqo= Subject key identifier: 14:88:F2:AE:B1:1C:40:41:D7:6A:22:F3:4A:DD:1A:5C:01:A6:BE:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819DCB51BFF434C26488F0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9d:cb:51:bf:f4:34:c2:64:88:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=5539fb1d-912f-4229-8fa4-fac6e155e0f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:6e:7d:30:2c:34:8d:38:94:af:0f:15:44: 04:50:22:a2:e8:eb:d0:ea:ff:03:69:40:97:79:ab: bf:03:19:1d:24:82:56:a2:47:4d:bb:b2:41:c0:6d: 68:79:c5:2a:a9:ae:75:9d:a6:ab:bd:4b:f2:55:eb: c4:7a:4e:02:91:56:ac:1d:0b:32:58:2e:d0:18:19: 28:3a:6d:70:66:9b:15:5c:dd:2f:c8:5d:7a:d0:b1: f6:ec:8d:2f:0b:3b:d1:f3:07:e3:64:dc:2c:75:2c: 6a:5d:69:71:4d:6a:85:f4:09:37:d8:ad:d5:db:e8: 8d:c4:f1:bb:21:de:35:b6:5f:11:ec:2a:a7:c8:08: eb:d2:84:56:e1:46:3c:93:81:45:95:32:f4:f5:f7: 8b:49:c9:30:59:05:7c:74:3e:59:ee:08:78:4a:37: 49:ee:d0:6d:fc:9c:b1:c6:6c:f8:bd:64:a9:ab:a6: ae:44:f0:ea:b1:d2:e7:bf:d8:6e:aa:23:da:cd:3e: 4f:50:8e:5b:95:16:ef:33:da:87:a6:bc:28:38:c6: 67:70:de:48:83:24:b0:3d:9a:b8:31:1c:7c:f4:42: 56:2e:48:5d:38:97:55:a5:e6:82:64:5d:9d:d9:aa: a5:cc:08:5d:ea:fe:73:cb:5c:74:b8:1e:d8:83:87: 28:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:88:F2:AE:B1:1C:40:41:D7:6A:22:F3:4A:DD:1A:5C:01:A6:BE:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:3d:9b:87:69:b0:31:3b:40:0f:23:47:37:26:44:78:3f:a5: f5:42:fa:4d:d7:fc:ed:2f:cb:79:d3:a8:67:71:09:41:e4:f4: 1f:78:0b:51:3b:e4:79:b0:f7:57:12:b2:98:b8:7b:4e:9e:8d: a8:02:ab:34:ae:41:fb:89:9e:eb:52:51:29:ef:b0:62:4f:a7: 2c:d9:49:0b:83:2f:f6:59:31:18:45:2f:fa:4a:21:13:00:de: ce:ba:68:7e:3f:f6:b8:91:b9:00:d6:06:16:7d:8e:3f:5c:9b: 81:52:b9:ac:8a:3b:a0:11:ce:19:52:66:8c:68:13:35:b5:48: c9:c0:1d:91:b1:b6:a8:03:95:56:bc:b6:80:c7:55:2b:ac:e0: 20:c0:21:de:a1:5f:98:d9:55:4a:0d:26:72:2b:1d:b4:c7:b1: 10:ed:5d:cb:2c:ec:14:44:89:d4:07:d7:88:ff:e5:a3:0e:6d: f8:ae:0b:0d:98:37:2b:d9:c3:b9:2a:1e:6e:5c:3c:06:a1:a0: e9:42:51:ea:f0:69:e6:20:65:d0:6f:65:7f:f3:d7:7c:20:6f: 31:cf:d6:8a:a1:89:ad:2b:35:ba:76:62:ea:86:fd:ff:d1:68: 34:3d:7b:60:30:8d:99:fe:28:fd:1a:79:8c:ce:21:5b:1c:07: 37:0e:b5:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ3LUb/0NMJkiPAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk NTUzOWZiMWQtOTEyZi00MjI5LThmYTQtZmFjNmUxNTVlMGYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ1ufTAsNI04lK8PFUQEUCKi6OvQ6v8DaUCX eau/AxkdJIJWokdNu7JBwG1oecUqqa51naarvUvyVevEek4CkVasHQsyWC7QGBko Om1wZpsVXN0vyF160LH27I0vCzvR8wfjZNwsdSxqXWlxTWqF9Ak32K3V2+iNxPG7 Id41tl8R7CqnyAjr0oRW4UY8k4FFlTL09feLSckwWQV8dD5Z7gh4SjdJ7tBt/Jyx xmz4vWSpq6auRPDqsdLnv9huqiPazT5PUI5blRbvM9qHprwoOMZncN5IgySwPZq4 MRx89EJWLkhdOJdVpeaCZF2d2aqlzAhd6v5zy1x0uB7Yg4coLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBSI8q6xHEBB12oi80rdGlwBpr4JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDIwMDQ3ZTctMmE2MC0z M2ZkLTg2YjgtY2IwMGJkNTk1MWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADg9m4dpsDE7QA8jRzcmRHg/pfVC+k3X/O0vy3nTqGdxCUHk9B94C1E7 5Hmw91cSspi4e06ejagCqzSuQfuJnutSUSnvsGJPpyzZSQuDL/ZZMRhFL/pKIRMA 3s66aH4/9riRuQDWBhZ9jj9cm4FSuayKO6ARzhlSZoxoEzW1SMnAHZGxtqgDlVa8 toDHVSus4CDAId6hX5jZVUoNJnIrHbTHsRDtXcss7BREidQH14j/5aMObfiuCw2Y NyvZw7kqHm5cPAahoOlCUerwaeYgZdBvZX/z13wgbzHP1oqhia0rNbp2YuqG/f/R aDQ9e2AwjZn+KP0aeYzOIVscBzcOtZU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:55 2025 by rpki-client