$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa File: f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa (raw, json) Hash identifier: evnb7Gri0b9R6IAExKdAZ9yWplhnSGckSZchXQtNJSM= Subject key identifier: CB:56:61:F3:66:0A:38:C0:E6:35:5D:00:71:37:59:DC:AF:40:49:78 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581108858922F9CDE3B3380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:10:88:58:92:2f:9c:de:3b:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8e151c74-9bcd-46f0-aa20-f888635d418b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:ea:9a:7c:62:68:8c:dd:13:02:a5:22:31: 41:e2:d1:e0:8d:2e:a7:7e:60:fd:22:90:01:db:c4: d7:71:b8:a4:c5:44:9f:f3:59:15:b2:5b:65:c6:92: 7c:46:2c:d9:39:52:1a:82:95:d1:75:e4:f2:07:ab: c6:1c:52:47:e8:b9:94:3a:87:b5:35:b5:10:6f:65: 4a:92:82:54:99:64:44:66:2e:9a:dd:61:0c:dc:d7: 66:cf:61:71:b1:fa:27:ab:41:ca:da:ab:c0:fe:96: 20:bc:db:99:91:0a:a0:a6:61:a6:72:a2:68:d4:64: 80:03:ca:71:0b:c3:57:c4:6e:ce:df:95:a8:63:9c: 88:22:f8:96:b1:6a:39:ed:58:ae:0a:ba:47:f9:ea: 8d:ab:cb:f2:70:93:8c:23:32:be:2a:38:d8:09:ae: ae:19:e3:d8:52:c7:a3:59:f7:15:87:9c:f5:3d:4b: 10:8b:a4:51:6e:7d:d5:e2:84:63:64:5c:57:8f:71: 77:a5:a1:18:bc:75:34:5a:77:18:f1:ca:0c:e7:1b: 9f:f3:d6:cc:c2:99:34:bf:8b:01:44:5b:a0:cd:ab: b4:ae:c5:a2:5d:8c:d0:80:bc:99:f3:a9:d4:2d:1f: 4c:e3:86:b4:fc:ce:e9:46:c6:22:b8:db:c9:81:da: ff:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:56:61:F3:66:0A:38:C0:E6:35:5D:00:71:37:59:DC:AF:40:49:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:d3:d9:3f:e5:72:ba:d8:1d:01:48:22:18:02:e4:93:4a:be: 55:4d:24:4b:7a:e9:e9:7c:14:46:eb:87:f7:80:18:3a:5f:c7: d9:e5:72:66:be:08:e6:e3:08:a2:17:16:83:74:21:96:91:f2: c5:70:5f:60:ad:44:53:59:82:65:ec:49:ca:e1:d7:cd:1e:0b: ab:ef:1e:76:49:80:11:c0:c5:b2:c2:b7:b0:20:87:e8:6a:bc: 33:71:f3:df:7e:2e:66:ff:9b:76:d5:e3:f9:7d:48:13:1e:5b: a3:18:08:ae:75:8e:a9:b3:dc:54:ca:f7:b2:ae:35:3c:96:b3: 1a:84:30:db:bf:0e:df:08:6d:8a:5a:4c:6a:68:d6:d4:52:d2: 12:92:62:4b:be:eb:f7:b8:3f:fc:75:b2:01:5b:9a:a2:80:d7: 8f:b6:59:60:95:c9:48:2e:b5:38:69:04:94:b0:a1:b5:f6:e0: 8b:ae:62:b6:55:99:c9:11:af:bd:75:1a:b6:22:88:d7:ff:38: 6b:9a:67:53:d3:0d:91:40:e1:fa:ed:96:85:bd:87:cd:0e:59: 24:a3:7e:4e:0f:7d:de:00:ff:3d:67:85:ac:ba:e9:bf:03:df: 34:c3:fc:ad:db:2b:8d:2d:85:99:34:93:33:ca:f0:43:ac:17: 58:6f:09:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgRCIWJIvnN47M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGUxNTFjNzQtOWJjZC00NmYwLWFhMjAtZjg4ODYzNWQ0MThiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsTqmnxiaIzdEwKlIjFB4tHgjS6nfmD9IpAB 28TXcbikxUSf81kVsltlxpJ8RizZOVIagpXRdeTyB6vGHFJH6LmUOoe1NbUQb2VK koJUmWREZi6a3WEM3Ndmz2Fxsfonq0HK2qvA/pYgvNuZkQqgpmGmcqJo1GSAA8px C8NXxG7O35WoY5yIIviWsWo57ViuCrpH+eqNq8vycJOMIzK+KjjYCa6uGePYUsej WfcVh5z1PUsQi6RRbn3V4oRjZFxXj3F3paEYvHU0WncY8coM5xuf89bMwpk0v4sB RFugzau0rsWiXYzQgLyZ86nULR9M44a0/M7pRsYiuNvJgdr/gQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMtWYfNmCjjA5jVdAHE3WdyvQEl4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjZlZDQ0MzctMmMwNy0z ZjVkLWIwN2QtNWVjZjI4ZmRjNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3T2T/lcrrYHQFIIhgC5JNKvlVNJEt66el8FEbrh/eAGDpfx9nlcma+ CObjCKIXFoN0IZaR8sVwX2CtRFNZgmXsScrh180eC6vvHnZJgBHAxbLCt7Agh+hq vDNx899+Lmb/m3bV4/l9SBMeW6MYCK51jqmz3FTK97KuNTyWsxqEMNu/Dt8IbYpa TGpo1tRS0hKSYku+6/e4P/x1sgFbmqKA14+2WWCVyUgutThpBJSwobX24IuuYrZV mckRr711GrYiiNf/OGuaZ1PTDZFA4frtloW9h80OWSSjfk4Pfd4A/z1nhay66b8D 3zTD/K3bK40thZk0kzPK8EOsF1hvCQ4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:52 2025 by rpki-client