$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa File: 1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa (raw, json) Hash identifier: b3ijcIVbJQnvPT/L3GfkxWgVUtG66oNlzY3aBuCWshA= Subject key identifier: E2:96:42:7A:8B:A5:AA:BA:A9:D1:27:34:CD:29:93:B4:7D:93:71:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEC0EC2C27AE0BC2B5980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ec:0e:c2:c2:7a:e0:bc:2b:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c01b32ab-1582-4455-9137-8456ffe0c67f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:44:b4:7f:70:b4:63:ea:03:f9:1d:ea:e7:f6: ed:4b:3e:2e:48:10:88:6b:95:15:5a:60:aa:ec:31: 5c:68:c4:d5:96:a7:90:ce:0e:d5:c4:47:29:9c:f8: c9:82:93:5a:41:dc:be:a6:4d:e9:39:66:be:21:ee: 77:c0:9b:56:2e:d2:ad:9a:af:0c:9e:b7:c1:f7:bc: ac:e2:90:0d:2d:a8:75:68:8c:73:36:84:e2:5f:e9: 9e:35:4d:a4:2d:d2:0a:2f:19:2d:14:ad:5b:af:24: 1e:0c:8d:27:03:55:20:78:f7:40:a1:d7:40:7f:29: 31:ea:51:44:8d:75:4c:9c:71:17:c3:e1:4c:4c:44: a6:d2:1b:6c:6a:fe:64:9b:a3:25:c1:ee:4c:d9:9a: 00:0f:2a:eb:85:76:d7:23:04:63:43:70:b9:d3:56: c9:52:20:c6:41:86:0f:4d:e7:df:6f:50:e3:7d:52: 8e:f4:20:23:6d:04:39:69:90:99:a0:a0:2b:9a:e2: ba:88:d3:ba:f2:0c:b8:22:41:e9:c3:9f:85:46:f5: 79:57:13:74:44:55:50:50:cd:a5:cd:ad:bc:db:f6: b7:63:e6:8d:8b:c7:fb:e6:12:36:06:7d:8f:e7:9d: f0:31:e5:1c:c1:3f:4f:d3:60:37:06:8b:b0:b9:52: 8f:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:96:42:7A:8B:A5:AA:BA:A9:D1:27:34:CD:29:93:B4:7D:93:71:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d59a3a5-771d-3da3-86dd-e6f0b8cd577a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:45:6e:7d:52:7f:4c:0b:cf:b5:96:ef:d2:a5:5d:8d:21:51: 05:92:a3:b5:41:eb:07:f7:37:19:3e:a6:fe:9a:02:81:9c:28: ca:dc:7a:36:1b:33:8e:d6:88:36:e3:e8:6a:d8:7c:13:90:33: 10:00:38:bd:79:b7:7e:b3:7f:20:f2:4e:54:39:5a:7a:56:75: 1c:b9:a5:34:8e:6e:38:08:d3:2a:40:4c:8f:ff:ad:50:31:81: c8:2d:0e:16:36:58:40:be:2f:d7:ef:71:4e:4b:4d:bd:fc:3d: 02:1a:b6:37:ad:da:23:cc:07:49:76:6a:fc:32:9d:1e:9d:6e: 1a:c7:e7:c2:a7:86:15:90:f7:a8:c0:39:df:f2:44:24:48:70: e1:9f:2b:79:c2:4e:6e:ca:e0:38:81:92:5a:2a:fe:e9:cd:1c: 95:ec:1a:61:62:d9:c5:ae:0f:18:73:e5:c0:24:c3:c9:a7:b4: cb:2d:91:57:62:b9:96:2e:0a:75:5b:ff:5a:f4:4e:44:f5:0a: df:75:33:98:9f:f7:21:af:af:ed:2a:09:74:20:44:34:74:68: 6e:e3:08:b4:fa:15:80:20:99:28:ef:f9:1a:0c:9e:99:c5:e9: 44:47:8b:3f:d6:c0:84:28:55:3b:ed:22:30:06:48:e1:2d:a9: e2:79:4a:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuwOwsJ64LwrWYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzAxYjMyYWItMTU4Mi00NDU1LTkxMzctODQ1NmZmZTBjNjdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzES0f3C0Y+oD+R3q5/btSz4uSBCIa5UVWmCq 7DFcaMTVlqeQzg7VxEcpnPjJgpNaQdy+pk3pOWa+Ie53wJtWLtKtmq8MnrfB97ys 4pANLah1aIxzNoTiX+meNU2kLdIKLxktFK1bryQeDI0nA1UgePdAoddAfykx6lFE jXVMnHEXw+FMTESm0htsav5km6Mlwe5M2ZoADyrrhXbXIwRjQ3C501bJUiDGQYYP Teffb1DjfVKO9CAjbQQ5aZCZoKArmuK6iNO68gy4IkHpw5+FRvV5VxN0RFVQUM2l za282/a3Y+aNi8f75hI2Bn2P553wMeUcwT9P02A3BouwuVKPpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOKWQnqLpaq6qdEnNM0pk7R9k3FjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWQ1OWEzYTUtNzcxZC0z ZGEzLTg2ZGQtZTZmMGI4Y2Q1NzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhFbn1Sf0wLz7WW79KlXY0hUQWSo7VB6wf3Nxk+pv6aAoGcKMrcejYb M47WiDbj6GrYfBOQMxAAOL15t36zfyDyTlQ5WnpWdRy5pTSObjgI0ypATI//rVAx gcgtDhY2WEC+L9fvcU5LTb38PQIatjet2iPMB0l2avwynR6dbhrH58KnhhWQ96jA Od/yRCRIcOGfK3nCTm7K4DiBkloq/unNHJXsGmFi2cWuDxhz5cAkw8mntMstkVdi uZYuCnVb/1r0TkT1Ct91M5if9yGvr+0qCXQgRDR0aG7jCLT6FYAgmSjv+RoMnpnF 6URHiz/WwIQoVTvtIjAGSOEtqeJ5Sms= -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:32 2025 by rpki-client