$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa File: ddb495f4-e786-35e8-a411-017aa3cd9084.roa (raw, json) Hash identifier: me3J1NHtOxKw3EECKVULJ9B1fyySZc22jUagsMAqMyI= Subject key identifier: 91:96:BC:1F:7B:7F:84:B1:D3:5B:C7:09:F3:C1:40:7E:5A:9C:FB:B7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5819ECA208890CD41411F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:9e:ca:20:88:90:cd:41:41:1f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b14aca4a-b292-40d3-a405-f44c2e746519 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:32:2d:2d:d4:30:c5:d4:35:f5:a8:4f:ab:8c: 36:d5:48:6a:b1:a6:20:81:a3:c1:d1:a7:bf:75:0d: 69:18:36:eb:cf:71:a1:06:d0:48:a3:2d:5d:0c:44: 35:39:dd:f7:32:8a:37:4c:73:bd:b0:9e:47:36:5f: 6e:2b:94:9b:5b:40:6a:02:89:5b:75:72:00:07:1e: 8f:3e:bf:5f:77:d9:6f:d5:28:0c:33:17:70:aa:3f: 92:3a:88:c7:82:07:8a:fa:ca:81:91:bb:fe:87:b3: 47:26:6b:25:e6:c7:c5:9d:79:4b:bd:33:49:27:4d: 80:3d:99:ce:c8:4c:76:ce:b6:d4:31:1a:89:d1:dd: 62:5f:67:82:d0:5b:fb:88:1b:0f:b5:9b:e7:f8:13: 79:de:38:f6:b5:7a:0a:1b:5e:b8:a8:3b:1a:18:6d: 6a:fb:b6:4c:a7:c9:83:c1:2b:f2:a8:59:8c:ed:a1: b0:f6:6a:ec:6c:b3:d1:ad:51:ad:ac:b2:a3:41:25: 9c:bd:e2:a1:25:5e:3a:59:1b:2f:86:8c:7b:bd:00: 50:cd:d2:c8:18:64:da:0c:bf:59:26:6f:34:ec:c6: d6:70:12:12:14:4f:3a:79:f1:b5:93:32:f2:09:97: 56:c4:fd:42:32:79:19:69:2d:b5:cd:ba:07:e6:a8: 27:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:96:BC:1F:7B:7F:84:B1:D3:5B:C7:09:F3:C1:40:7E:5A:9C:FB:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ddb495f4-e786-35e8-a411-017aa3cd9084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:f6:97:86:dc:0b:b7:84:49:f1:53:47:29:cd:c4:64:52:91: fb:47:5f:6b:05:63:1f:fe:a1:e2:8e:f9:c7:f8:fd:29:d7:7a: 71:89:07:9a:6c:f4:b5:80:86:94:d8:e4:26:f7:0a:3c:84:6a: 3a:0a:69:b9:52:64:51:cc:fb:aa:7e:e6:1e:c4:1f:02:1e:a7: 8f:bc:0c:73:f0:ef:d1:75:58:5d:83:5b:4f:c7:7a:08:0a:76: 4e:f4:67:1e:e4:f9:a8:62:ff:40:7a:85:f1:23:a4:83:40:17: 3f:d1:aa:42:45:95:fb:5e:a8:a8:0e:bc:b7:47:54:e2:20:1c: fa:47:b0:5f:4b:67:1f:4c:d1:c5:66:59:4f:8a:21:d7:c0:4e: fc:2d:9e:d6:29:73:24:df:a5:41:34:8f:5f:89:df:b2:f3:cd: e4:69:02:9d:d0:fe:a2:6a:d1:b5:4e:8f:7a:0c:d2:1a:af:06: 43:5f:cc:21:c4:ec:42:5b:b3:8f:e1:08:34:92:33:2a:d8:2d: 93:2d:3d:9c:ce:5f:53:5d:8e:45:56:f9:54:bf:26:14:63:ce: e5:72:7e:6a:b0:83:3b:ec:a5:9d:42:bc:a6:79:1e:75:02:8d: ec:90:f6:7d:e0:d6:04:75:6a:15:e5:8d:52:83:ca:28:99:6e: c3:ce:a0:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgZ7KIIiQzUFBH0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjE0YWNhNGEtYjI5Mi00MGQzLWE0MDUtZjQ0YzJlNzQ2NTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzItLdQwxdQ19ahPq4w21UhqsaYggaPB0ae/ dQ1pGDbrz3GhBtBIoy1dDEQ1Od33Moo3THO9sJ5HNl9uK5SbW0BqAolbdXIABx6P Pr9fd9lv1SgMMxdwqj+SOojHggeK+sqBkbv+h7NHJmsl5sfFnXlLvTNJJ02APZnO yEx2zrbUMRqJ0d1iX2eC0Fv7iBsPtZvn+BN53jj2tXoKG164qDsaGG1q+7ZMp8mD wSvyqFmM7aGw9mrsbLPRrVGtrLKjQSWcveKhJV46WRsvhox7vQBQzdLIGGTaDL9Z Jm807MbWcBISFE86efG1kzLyCZdWxP1CMnkZaS21zboH5qgnOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGWvB97f4Sx01vHCfPBQH5anPu3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGRiNDk1ZjQtZTc4Ni0z NWU4LWE0MTEtMDE3YWEzY2Q5MDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALn2l4bcC7eESfFTRynNxGRSkftHX2sFYx/+oeKO+cf4/SnXenGJB5ps 9LWAhpTY5Cb3CjyEajoKablSZFHM+6p+5h7EHwIep4+8DHPw79F1WF2DW0/HeggK dk70Zx7k+ahi/0B6hfEjpINAFz/RqkJFlfteqKgOvLdHVOIgHPpHsF9LZx9M0cVm WU+KIdfATvwtntYpcyTfpUE0j1+J37LzzeRpAp3Q/qJq0bVOj3oM0hqvBkNfzCHE 7EJbs4/hCDSSMyrYLZMtPZzOX1NdjkVW+VS/JhRjzuVyfmqwgzvspZ1CvKZ5HnUC jeyQ9n3g1gR1ahXljVKDyiiZbsPOoAs= -----END CERTIFICATE-----Generated at Sat Apr 12 00:21:53 2025 by rpki-client