$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3518cf-4103-3e00-9292-664d179fd38b.roa File: ff3518cf-4103-3e00-9292-664d179fd38b.roa (raw, json) Hash identifier: wCrNgl00hsYsHlz16bdKa19d7IfbAHs61jDXQWdxU+k= Subject key identifier: F1:48:DB:35:B0:FB:0E:A1:D8:D5:75:E7:82:C4:6D:54:1D:6C:49:ED Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285848C581A1446934780B99413180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3518cf-4103-3e00-9292-664d179fd38b.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 7155 IP address blocks: 72.173.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 13 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:a1:44:69:34:78:0b:99:41:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=8a2b076a-5f87-4ce4-b0e9-6b1c14c15251 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:e7:e1:73:04:88:d7:6b:07:57:25:fe:41:49: ee:f2:11:04:b2:07:e3:d9:e4:4a:74:72:11:d1:56: 9f:66:d1:a0:42:c1:2b:6a:58:b6:6b:77:ab:66:e3: fc:38:05:58:22:4a:bd:18:7e:ad:24:fb:b8:c8:82: 4d:3f:7f:99:8f:4d:25:db:68:79:09:08:69:53:8e: 1f:3e:45:19:9b:c5:8b:c4:0d:d2:f8:56:b5:9d:1f: 5e:49:2f:63:a5:8b:4d:fe:9c:89:cb:c0:24:5c:5e: 9d:b8:c1:35:fb:22:d4:ec:52:97:f9:9b:01:47:03: 0d:88:08:4c:2a:5f:43:a3:2e:67:71:15:bb:a3:56: 78:b8:4a:10:52:04:a9:f9:d7:e9:10:86:13:a0:f0: 09:e6:20:5b:4c:22:85:be:3b:5e:fc:5d:77:44:2b: d4:44:e1:aa:00:d6:60:a8:fc:22:6c:93:98:f4:0f: d1:b6:08:10:fe:98:db:fc:5e:2e:0e:16:76:b0:94: e6:fa:77:cb:75:0e:1a:ea:9a:bd:38:4f:ea:69:2a: 93:c5:d7:0c:ca:3d:d6:c7:ec:f9:cc:a3:79:5b:79: bd:c8:c3:4b:c6:f6:ce:69:35:6a:3a:0b:13:47:a9: 23:2d:a4:e4:2a:e7:6b:bc:f4:15:55:f9:83:50:3a: aa:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:48:DB:35:B0:FB:0E:A1:D8:D5:75:E7:82:C4:6D:54:1D:6C:49:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3518cf-4103-3e00-9292-664d179fd38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:92:0e:67:83:32:30:91:26:cd:c7:09:6f:de:e5:fa:64:2a: 31:0d:8f:76:6b:27:ad:4c:52:d3:27:0a:73:d1:f6:1a:d9:40: 09:c7:69:53:09:95:04:55:36:92:9d:45:69:20:b3:aa:5d:26: 4f:88:87:85:98:89:64:59:40:86:6e:4a:35:00:01:63:df:22: 8e:0b:c3:68:24:30:e8:1d:48:2e:08:11:7f:56:55:c9:6e:e0: 29:c3:73:98:8e:12:6d:1f:d0:52:c4:c7:92:ae:05:3a:de:f2: 9b:ab:73:5a:09:68:85:74:f6:dd:1a:bb:2c:bc:8e:5a:45:30: 69:f1:23:fc:ba:5d:2f:21:77:6a:7c:af:b9:cf:3d:20:02:0a: 20:67:1b:e7:21:d6:15:c7:04:d0:76:3f:27:36:53:92:d5:2a: 6b:90:4f:90:14:20:c2:5a:61:08:dc:51:41:b4:9c:ba:b2:ba: 4d:cb:af:da:a5:c4:63:6d:96:49:ad:1d:b3:04:af:8d:fd:0c: 0c:9b:04:77:3f:39:d9:4e:e6:67:c6:2f:f5:52:f1:c7:5e:bf: 12:60:25:c8:6d:83:c1:2f:67:c7:65:23:53:b6:1d:85:01:55: 88:e9:f2:67:f2:3a:6c:8a:62:62:bc:b0:21:80:b2:f1:49:60: 27:5f:f4:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgaFEaTR4C5lBMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk OGEyYjA3NmEtNWY4Ny00Y2U0LWIwZTktNmIxYzE0YzE1MjUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhefhcwSI12sHVyX+QUnu8hEEsgfj2eRKdHIR 0VafZtGgQsErali2a3erZuP8OAVYIkq9GH6tJPu4yIJNP3+Zj00l22h5CQhpU44f PkUZm8WLxA3S+Fa1nR9eSS9jpYtN/pyJy8AkXF6duME1+yLU7FKX+ZsBRwMNiAhM Kl9Doy5ncRW7o1Z4uEoQUgSp+dfpEIYToPAJ5iBbTCKFvjte/F13RCvUROGqANZg qPwibJOY9A/RtggQ/pjb/F4uDhZ2sJTm+nfLdQ4a6pq9OE/qaSqTxdcMyj3Wx+z5 zKN5W3m9yMNLxvbOaTVqOgsTR6kjLaTkKudrvPQVVfmDUDqqwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFI2zWw+w6h2NV154LEbVQdbEntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmYzNTE4Y2YtNDEwMy0z ZTAwLTkyOTItNjY0ZDE3OWZkMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEmSDmeDMjCRJs3HCW/e5fpkKjENj3ZrJ61MUtMnCnPR9hrZQAnHaVMJ lQRVNpKdRWkgs6pdJk+Ih4WYiWRZQIZuSjUAAWPfIo4Lw2gkMOgdSC4IEX9WVclu 4CnDc5iOEm0f0FLEx5KuBTre8purc1oJaIV09t0auyy8jlpFMGnxI/y6XS8hd2p8 r7nPPSACCiBnG+ch1hXHBNB2Pyc2U5LVKmuQT5AUIMJaYQjcUUG0nLqyuk3Lr9ql xGNtlkmtHbMEr439DAybBHc/OdlO5mfGL/VS8cdevxJgJchtg8EvZ8dlI1O2HYUB VYjp8mfyOmyKYmK8sCGAsvFJYCdf9DE= -----END CERTIFICATE-----Generated at Sat Apr 12 00:17:40 2025 by rpki-client