$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa File: 109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa (raw, json) Hash identifier: 9jQ1Z9ClZ2LLmyjK3DvOLDMGI3brhwFbnHBCRF5JAgU= Subject key identifier: 9A:D7:AC:0D:41:40:E2:A9:C8:2A:39:61:09:7A:21:7F:52:CC:22:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA607E7C7496B69873B900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:60:7e:7c:74:96:b6:98:73:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=89841d78-8cfd-4669-96ab-5f18fd5ee377 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:68:24:cd:00:0f:ae:de:55:45:75:c9:7b:12: b9:45:33:80:39:9a:68:68:d0:64:b1:b6:0e:e3:3c: d9:17:1b:79:54:22:66:a7:95:78:41:a3:de:ad:87: 03:01:55:51:19:4d:49:c7:bf:dc:0c:c2:a9:bb:c3: 9e:fe:eb:cd:65:be:b5:eb:b2:5f:48:b8:e2:eb:7f: d1:ed:b2:36:c2:65:e4:61:b6:bc:ce:85:35:5d:dd: 39:0f:1c:c7:e3:e7:7b:07:ef:ad:e7:e7:2b:da:6a: 9d:64:26:fd:07:97:5a:be:b0:f0:83:a1:3d:45:1f: 91:0d:43:79:d3:e8:44:19:0f:22:f0:cb:6d:f2:62: a2:2d:55:7c:bd:79:04:59:1f:15:38:54:55:b3:95: 73:74:46:b6:55:4d:d3:7d:fe:47:20:4c:7b:0f:91: 55:fc:34:6d:d1:d2:ff:8c:e3:a6:bd:97:df:78:c7: 88:b0:8e:a9:22:95:f9:66:86:a5:43:3d:1d:02:49: d9:a1:d3:1b:db:2a:0c:1f:5d:dd:d2:43:c0:24:07: 87:8f:6e:52:4b:c5:0a:6c:a7:34:71:62:2c:f1:d6: 71:e6:f1:6d:23:ad:61:b3:75:e6:e3:b4:68:7d:81: 7a:d4:91:78:bd:db:d1:ab:9b:b0:d2:42:fb:ae:5f: ee:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:D7:AC:0D:41:40:E2:A9:C8:2A:39:61:09:7A:21:7F:52:CC:22:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/109a2877-8f41-3e6a-b026-4ee9dbd03a1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:ab:66:2d:67:35:09:5f:33:ec:ae:0f:5a:e8:49:df:c6:00: fd:29:c8:57:76:71:2e:da:f0:36:77:ff:83:b6:40:d1:58:a9: 1e:f2:52:ff:d2:ba:10:f9:22:3b:11:1c:20:49:d6:52:19:09: 10:99:ab:53:74:24:c1:20:c0:03:31:01:4c:da:04:17:af:45: 12:79:22:7d:a0:07:ce:cd:5d:b3:3a:2d:87:63:5f:cd:3c:1a: 12:ab:30:ea:87:53:07:67:a6:58:e3:29:ed:9d:0d:b0:83:cc: e3:e2:fb:7b:a3:4f:66:ae:cf:cf:e6:13:43:45:de:47:c5:1c: d6:bd:44:4c:41:19:13:f5:2c:2d:7d:1e:c5:16:f2:d1:c3:26: 20:d7:4f:ea:ef:f9:48:3c:6d:2a:e5:6f:a0:f8:37:b4:00:fa: 76:62:72:b5:5f:d4:38:09:53:5d:16:eb:97:f7:0c:86:48:d5: d4:70:b2:7d:5c:b5:73:91:8a:e0:0e:8b:15:33:24:fb:6d:a9: 08:de:92:eb:36:00:12:47:c0:aa:ef:5a:40:1a:f7:01:a5:57: 54:ef:e9:f3:49:37:98:6a:86:82:2f:75:32:33:84:39:cf:9b: 71:8f:7e:70:fa:95:8b:f6:ac:75:74:f9:ed:63:16:02:1e:0f: 6b:c3:99:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumB+fHSWtphzuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODk4NDFkNzgtOGNmZC00NjY5LTk2YWItNWYxOGZkNWVlMzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGgkzQAPrt5VRXXJexK5RTOAOZpoaNBksbYO 4zzZFxt5VCJmp5V4QaPerYcDAVVRGU1Jx7/cDMKpu8Oe/uvNZb6167JfSLji63/R 7bI2wmXkYba8zoU1Xd05DxzH4+d7B++t5+cr2mqdZCb9B5davrDwg6E9RR+RDUN5 0+hEGQ8i8Mtt8mKiLVV8vXkEWR8VOFRVs5VzdEa2VU3Tff5HIEx7D5FV/DRt0dL/ jOOmvZffeMeIsI6pIpX5ZoalQz0dAknZodMb2yoMH13d0kPAJAeHj25SS8UKbKc0 cWIs8dZx5vFtI61hs3Xm47RofYF61JF4vdvRq5uw0kL7rl/uiQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJrXrA1BQOKpyCo5YQl6IX9SzCJhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTA5YTI4NzctOGY0MS0z ZTZhLWIwMjYtNGVlOWRiZDAzYTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADurZi1nNQlfM+yuD1roSd/GAP0pyFd2cS7a8DZ3/4O2QNFYqR7yUv/S uhD5IjsRHCBJ1lIZCRCZq1N0JMEgwAMxAUzaBBevRRJ5In2gB87NXbM6LYdjX808 GhKrMOqHUwdnpljjKe2dDbCDzOPi+3ujT2auz8/mE0NF3kfFHNa9RExBGRP1LC19 HsUW8tHDJiDXT+rv+Ug8bSrlb6D4N7QA+nZicrVf1DgJU10W65f3DIZI1dRwsn1c tXORiuAOixUzJPttqQjekus2ABJHwKrvWkAa9wGlV1Tv6fNJN5hqhoIvdTIzhDnP m3GPfnD6lYv2rHV0+e1jFgIeD2vDmV0= -----END CERTIFICATE-----Generated at Sun Apr 27 10:15:56 2025 by rpki-client