$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/094ba684-8495-3416-b94e-0130627b1c45.roa File: 094ba684-8495-3416-b94e-0130627b1c45.roa (raw, json) Hash identifier: UGQowz/wTvJ6goll7aDNfKpGy40smkSBciVika59gLU= Subject key identifier: 34:C5:81:05:13:24:D7:F8:E7:21:4A:B9:14:7A:77:DD:6B:0A:21:67 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE98AB8397C6BEF62A140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/094ba684-8495-3416-b94e-0130627b1c45.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e9:8a:b8:39:7c:6b:ef:62:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8c91e4a0-01ce-41b3-aba9-c3a7e7913c0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4f:3c:47:ca:d2:43:19:5c:c5:65:74:92:45: 65:88:87:a8:cc:79:87:4f:93:68:1b:1a:6b:3d:d5: 33:be:9a:2b:49:1b:30:0d:4c:68:96:15:3d:07:82: b8:d7:ba:3a:cd:55:66:04:23:d2:d7:ee:57:f0:bc: b2:61:f1:0a:ce:d4:fa:47:9b:1a:5e:bb:5f:c4:a4: ea:fb:56:4e:e4:85:97:de:e6:ca:4f:79:40:8a:eb: df:8b:f5:39:4e:a2:df:d4:b5:c6:bd:d4:31:ad:4c: 4d:b8:a9:5f:c2:51:0d:54:0a:c0:32:88:8e:9a:80: 2e:c4:e5:e6:b1:34:3b:1d:a3:ce:1f:4d:3d:96:44: 06:a9:7a:5e:33:52:d7:db:4a:80:cc:46:fa:74:dd: e0:74:fe:97:14:95:de:d0:50:b0:23:6f:42:49:e6: bd:57:c7:a4:d7:8f:90:6b:cc:44:bd:88:83:73:0e: c7:1b:f6:15:dc:ae:e8:ef:52:2b:1f:12:d3:75:e6: d0:e4:1b:b3:d9:9f:67:01:99:71:f1:8e:21:4c:82: 06:6f:88:f4:34:75:f0:94:48:62:08:ca:b4:52:db: 4c:03:44:8b:13:37:29:dd:17:33:78:36:42:82:8f: 3e:6d:c8:0c:a6:ac:a4:7e:6e:d5:e0:25:62:a0:84: be:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:C5:81:05:13:24:D7:F8:E7:21:4A:B9:14:7A:77:DD:6B:0A:21:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/094ba684-8495-3416-b94e-0130627b1c45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:52:cf:b0:ea:24:af:a1:1f:1b:47:56:92:9b:12:47:b8:d2: 7c:40:81:08:e7:b7:25:39:bf:51:ca:c0:c3:33:32:81:0e:6c: 95:6a:3d:be:25:4b:be:fd:ba:9a:39:3a:8f:09:dc:0b:a9:c2: e1:4b:f4:6b:8e:61:89:b2:4a:9c:63:5e:57:cb:c5:b7:b3:0a: 01:4e:82:50:d0:4e:4f:55:a9:40:17:17:9b:17:9e:fe:21:48: 87:ad:8f:34:a0:95:d9:94:91:44:84:5a:ee:79:3a:e8:08:10: 84:2c:c8:58:89:0a:1b:a3:a9:9c:72:47:24:6e:7c:c2:5c:6f: 6c:51:ab:38:92:a5:cd:59:8d:11:b6:f7:00:46:09:d8:71:9f: 63:ee:bd:36:bf:43:26:23:f6:e8:92:8a:43:55:b9:0c:a8:79: ec:68:a8:ae:09:74:b4:be:55:44:32:d5:a9:81:ec:28:9b:b7: aa:94:0f:b6:50:9b:36:c8:f3:94:90:b9:ca:5f:51:42:3a:83: e9:9e:60:70:93:43:57:93:06:dd:b3:5f:f9:44:e1:a4:ab:24: 5a:36:06:83:2b:26:b0:82:ea:f5:57:3f:9b:1a:57:33:ef:d0: 25:54:ae:ca:c4:ae:5e:07:5e:b7:9c:55:17:97:9a:85:57:b5: 74:ab:21:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuumKuDl8a+9ioUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGM5MWU0YTAtMDFjZS00MWIzLWFiYTktYzNhN2U3OTEzYzBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE88R8rSQxlcxWV0kkVliIeozHmHT5NoGxpr PdUzvporSRswDUxolhU9B4K417o6zVVmBCPS1+5X8LyyYfEKztT6R5saXrtfxKTq +1ZO5IWX3ubKT3lAiuvfi/U5TqLf1LXGvdQxrUxNuKlfwlENVArAMoiOmoAuxOXm sTQ7HaPOH009lkQGqXpeM1LX20qAzEb6dN3gdP6XFJXe0FCwI29CSea9V8ek14+Q a8xEvYiDcw7HG/YV3K7o71IrHxLTdebQ5Buz2Z9nAZlx8Y4hTIIGb4j0NHXwlEhi CMq0UttMA0SLEzcp3RczeDZCgo8+bcgMpqykfm7V4CVioIS+hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDTFgQUTJNf45yFKuRR6d91rCiFnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDk0YmE2ODQtODQ5NS0z NDE2LWI5NGUtMDEzMDYyN2IxYzQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1Sz7DqJK+hHxtHVpKbEke40nxAgQjntyU5v1HKwMMzMoEObJVqPb4l S779upo5Oo8J3AupwuFL9GuOYYmySpxjXlfLxbezCgFOglDQTk9VqUAXF5sXnv4h SIetjzSgldmUkUSEWu55OugIEIQsyFiJChujqZxyRyRufMJcb2xRqziSpc1ZjRG2 9wBGCdhxn2PuvTa/QyYj9uiSikNVuQyoeexoqK4JdLS+VUQy1amB7Cibt6qUD7ZQ mzbI85SQucpfUUI6g+meYHCTQ1eTBt2zX/lE4aSrJFo2BoMrJrCC6vVXP5saVzPv 0CVUrsrErl4HXrecVReXmoVXtXSrIQM= -----END CERTIFICATE-----Generated at Sun Apr 27 04:00:01 2025 by rpki-client