$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa File: f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa (raw, json) Hash identifier: /wLEWxHvXsobgxWTKuV5vVmG4S6d3F5YjLLMa9vOMQ0= Subject key identifier: 06:7E:D7:35:ED:45:3B:FA:DD:B6:00:44:31:59:14:AA:79:26:3B:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C5810C110BBBCBC5231BE100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:0c:11:0b:bb:cb:c5:23:1b:e1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8102a4cc-d0b3-42be-b1d2-85869d3f7e92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a9:78:79:34:ee:a1:c8:26:e8:8c:91:a5:b5: d0:43:2c:c0:4c:90:51:02:bb:90:47:a3:45:87:5d: f1:3b:22:26:81:57:d3:57:94:0d:52:f3:5b:00:bd: fd:b5:54:86:a6:ae:cd:f6:63:09:60:49:c7:aa:a7: 6d:6d:9a:61:0c:ef:d6:03:9a:95:a4:cf:3b:5d:8f: bb:e1:aa:eb:1b:76:7f:c1:b8:da:9e:b7:93:b8:d8: ed:f1:58:0b:69:d1:68:d0:e4:82:33:d0:30:6d:0f: 72:33:da:dd:37:10:8e:7f:5a:b5:87:b2:2e:18:b6: 6a:83:37:b1:c2:e2:55:af:a6:9d:b8:d6:2c:a9:99: 39:24:7b:fc:ea:83:65:fe:96:a5:ad:c8:eb:91:e0: b8:02:a4:e4:8f:94:1e:b8:8f:ee:a4:eb:c2:24:52: a1:89:60:0b:65:1a:e9:68:4b:d2:16:6b:00:c3:85: d7:65:3f:5e:f3:78:2f:53:b0:ea:2a:dc:cf:2f:8e: e4:56:3b:32:1a:36:b4:eb:c4:1a:f0:ad:08:40:af: d1:28:24:54:32:4f:f2:4b:22:ae:8c:05:86:72:13: 37:4a:75:5c:cb:c9:e8:f1:c2:80:b3:60:e1:4a:9a: bd:b9:9f:53:ae:cc:6d:84:32:df:64:f2:55:2a:f7: e4:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:7E:D7:35:ED:45:3B:FA:DD:B6:00:44:31:59:14:AA:79:26:3B:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:98:61:46:e8:49:df:c6:12:35:44:3b:eb:98:f4:26:d6:92: 37:d1:48:a1:ef:97:ec:f3:ba:1f:46:39:35:3b:6a:54:b0:e1: 85:3d:d1:84:a7:db:9d:2a:1f:f7:a0:9a:3e:e4:de:bd:21:ea: fe:74:83:98:53:a8:50:ea:2d:76:05:0c:b1:31:de:96:ac:a1: 40:41:52:1f:25:fd:5f:b6:3e:27:a7:e4:62:1d:c3:63:46:be: 99:12:38:37:56:55:26:30:b1:1c:4b:f6:62:ce:2d:5c:ef:a3: ea:9c:65:83:31:5e:10:da:90:f0:e3:15:8d:c9:7b:f6:7f:28: b7:cb:82:47:c5:cd:87:0e:9c:39:c1:60:25:e5:8b:28:9c:e3: 07:c9:36:89:80:51:f0:17:9f:a0:68:e3:c6:02:7f:f8:48:51: 1b:69:7b:72:b5:48:0c:9b:d3:f5:b9:e4:d7:f5:87:1e:97:fe: b8:7b:ce:6d:32:cd:42:b7:4d:14:67:39:69:88:93:22:b7:77: b6:31:5e:f5:9e:ce:b8:f1:21:df:1f:44:ef:63:3f:31:f4:42: ef:f4:da:dc:7b:29:9a:8d:e9:20:30:9d:8a:b5:d9:58:a7:fe: 63:f0:f8:75:a5:b1:6f:82:63:8d:62:a0:81:00:1c:a5:09:f9: d0:18:4c:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgQwRC7vLxSMb4QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODEwMmE0Y2MtZDBiMy00MmJlLWIxZDItODU4NjlkM2Y3ZTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkal4eTTuocgm6IyRpbXQQyzATJBRAruQR6NF h13xOyImgVfTV5QNUvNbAL39tVSGpq7N9mMJYEnHqqdtbZphDO/WA5qVpM87XY+7 4arrG3Z/wbjanreTuNjt8VgLadFo0OSCM9AwbQ9yM9rdNxCOf1q1h7IuGLZqgzex wuJVr6aduNYsqZk5JHv86oNl/palrcjrkeC4AqTkj5QeuI/upOvCJFKhiWALZRrp aEvSFmsAw4XXZT9e83gvU7DqKtzPL47kVjsyGja068Qa8K0IQK/RKCRUMk/ySyKu jAWGchM3SnVcy8no8cKAs2DhSpq9uZ9TrsxthDLfZPJVKvfkuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ+1zXtRTv63bYARDFZFKp5JjuRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjYxOTU5YTEtNmFmOC0z ZDFjLTljNzktM2QxOTI0ZmI5YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICYYUboSd/GEjVEO+uY9CbWkjfRSKHvl+zzuh9GOTU7alSw4YU90YSn 250qH/egmj7k3r0h6v50g5hTqFDqLXYFDLEx3pasoUBBUh8l/V+2Pien5GIdw2NG vpkSODdWVSYwsRxL9mLOLVzvo+qcZYMxXhDakPDjFY3Je/Z/KLfLgkfFzYcOnDnB YCXliyic4wfJNomAUfAXn6Bo48YCf/hIURtpe3K1SAyb0/W55Nf1hx6X/rh7zm0y zUK3TRRnOWmIkyK3d7YxXvWezrjxId8fRO9jPzH0Qu/02tx7KZqN6SAwnYq12Vin /mPw+HWlsW+CY41ioIEAHKUJ+dAYTLY= -----END CERTIFICATE-----Generated at Sat Apr 12 01:55:43 2025 by rpki-client