$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5952250-cf9e-38fe-81b4-0a3b36294126.roa File: f5952250-cf9e-38fe-81b4-0a3b36294126.roa (raw, json) Hash identifier: WJT09kCG8y5BDzOHx/Mzou+qaB27/lNjjOLZiPnCSaA= Subject key identifier: 24:1F:5C:EF:35:BC:16:D4:F3:96:BA:D9:70:E4:9D:3F:E3:C1:46:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810ED9E5D344BAA0F7F080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5952250-cf9e-38fe-81b4-0a3b36294126.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.100.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0e:d9:e5:d3:44:ba:a0:f7:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=a983c221-038c-4a17-a85c-bca897b55ead Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:5b:ea:a6:a3:f0:07:5d:9a:f8:b1:67:45:ff: 7d:dc:14:c7:40:67:15:0a:23:aa:15:b8:b4:70:c7: 5f:08:43:36:ff:3e:42:a4:cb:27:e0:54:8b:b5:26: 28:c0:4b:e1:47:46:fa:90:64:af:52:c6:f2:88:83: 3e:df:98:fa:6c:4b:16:65:f5:5d:07:18:d1:cd:08: 4b:95:47:72:63:b4:65:9f:60:4a:ed:86:64:64:b7: 0e:7e:a9:be:85:e9:fb:10:f0:2b:d2:fd:d4:93:89: 5c:62:16:67:73:b1:c9:b2:ed:44:70:f4:90:8b:b4: 70:fe:64:b5:21:03:2b:ff:0a:aa:36:1a:41:d2:bf: 26:7b:d6:cf:a0:17:3c:8d:97:a9:9a:be:3a:f0:2e: ff:58:6b:8d:86:fe:99:0a:e6:a1:24:4b:78:4d:cd: 46:60:cc:32:44:2e:e1:b4:f4:be:83:94:94:fc:6c: 4f:0a:d4:90:ea:04:cc:e9:b5:d4:ad:a6:72:1b:e0: 0f:7f:36:16:1c:ee:1a:5d:75:6f:16:b2:f2:f5:de: a3:6a:06:bb:0a:9e:64:ec:39:5b:c4:f5:b8:cd:65: 89:63:19:0a:50:33:8b:15:16:f3:e8:78:dc:32:e2: d1:d4:fc:58:77:5f:15:c4:f1:ee:06:3b:75:09:58: 8f:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:1F:5C:EF:35:BC:16:D4:F3:96:BA:D9:70:E4:9D:3F:E3:C1:46:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f5952250-cf9e-38fe-81b4-0a3b36294126.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.100.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:1d:63:4b:f0:16:db:1f:43:00:e4:b6:2d:38:c1:ec:d2:a8: 00:e4:bd:6a:ad:f8:30:a2:e4:3d:e4:31:14:6c:b0:09:3a:25: e9:31:50:88:2e:f7:3b:db:cb:7a:7f:2f:ad:b1:cd:dc:d8:9f: 9c:72:9a:43:d9:da:1f:14:b9:b0:94:84:85:91:a8:67:a1:7f: eb:3d:04:c7:d9:23:4d:7b:6e:81:18:ee:a8:26:3c:69:36:eb: 90:5c:14:d7:76:c5:e3:99:f7:03:2b:a9:ce:6c:2c:b6:35:8e: c7:40:4a:a9:84:5c:64:72:60:3c:8c:63:4c:df:ee:bb:13:76: bd:ce:74:66:aa:4c:57:71:e5:3d:21:77:f7:85:6f:e1:95:0c: ac:31:ec:f6:73:bd:06:c3:cd:92:44:de:b8:27:84:25:03:ad: 7e:ed:97:5f:ba:78:9f:14:24:db:b8:af:1c:3f:da:f3:af:fe: 88:b4:09:74:2e:16:35:83:8d:d2:cc:ca:4b:c3:f3:29:f7:98: a4:e4:8f:5d:23:fa:7a:f2:3f:39:71:5b:d8:d9:bd:e4:4f:34: 6e:b0:98:62:4f:32:6a:b9:b5:6a:07:8e:51:13:dd:d5:6d:2c: 09:49:9d:89:68:91:e2:19:7d:d3:df:64:06:11:31:63:d1:c2: ff:92:bf:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQ7Z5dNEuqD38IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YTk4M2MyMjEtMDM4Yy00YTE3LWE4NWMtYmNhODk3YjU1ZWFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlvqpqPwB12a+LFnRf993BTHQGcVCiOqFbi0 cMdfCEM2/z5CpMsn4FSLtSYowEvhR0b6kGSvUsbyiIM+35j6bEsWZfVdBxjRzQhL lUdyY7Rln2BK7YZkZLcOfqm+hen7EPAr0v3Uk4lcYhZnc7HJsu1EcPSQi7Rw/mS1 IQMr/wqqNhpB0r8me9bPoBc8jZepmr468C7/WGuNhv6ZCuahJEt4Tc1GYMwyRC7h tPS+g5SU/GxPCtSQ6gTM6bXUraZyG+APfzYWHO4aXXVvFrLy9d6jaga7Cp5k7Dlb xPW4zWWJYxkKUDOLFRbz6HjcMuLR1PxYd18VxPHuBjt1CViPOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQfXO81vBbU85a62XDknT/jwUYJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjU5NTIyNTAtY2Y5ZS0z OGZlLTgxYjQtMGEzYjM2Mjk0MTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALMdY0vwFtsfQwDkti04wezSqADkvWqt+DCi5D3kMRRssAk6JekxUIgu 9zvby3p/L62xzdzYn5xymkPZ2h8UubCUhIWRqGehf+s9BMfZI017boEY7qgmPGk2 65BcFNd2xeOZ9wMrqc5sLLY1jsdASqmEXGRyYDyMY0zf7rsTdr3OdGaqTFdx5T0h d/eFb+GVDKwx7PZzvQbDzZJE3rgnhCUDrX7tl1+6eJ8UJNu4rxw/2vOv/oi0CXQu FjWDjdLMykvD8yn3mKTkj10j+nryPzlxW9jZveRPNG6wmGJPMmq5tWoHjlET3dVt LAlJnYlokeIZfdPfZAYRMWPRwv+Sv84= -----END CERTIFICATE-----Generated at Sun Feb 16 15:16:03 2025 by rpki-client