$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e47dcc1-780d-34e4-8444-caed127c594c.roa File: 1e47dcc1-780d-34e4-8444-caed127c594c.roa (raw, json) Hash identifier: 1uTHF9X66AvWtjAem9KYsob8rxSyfizy8HlmnuVD5J4= Subject key identifier: FD:37:34:09:30:14:E1:10:FB:D8:13:35:B1:9C:B4:21:AB:82:53:AB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE97372F868EAC513B880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e47dcc1-780d-34e4-8444-caed127c594c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e9:73:72:f8:68:ea:c5:13:b8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7c91c0f3-2976-4b4a-b9b9-37eb5c4f550e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:54:23:fc:4d:aa:87:25:e3:e2:86:f3:9a:d5: 17:53:85:25:49:4c:93:db:d4:8b:51:8b:f9:34:15: a5:77:c4:ce:bd:48:45:ca:4c:93:04:c6:a4:76:ac: c1:7a:5d:dc:ec:c3:45:bb:b8:bb:0c:64:c0:3d:23: 57:75:e3:7a:fc:ff:e2:e7:07:7d:3d:43:06:97:b7: a2:8d:0e:46:20:00:bd:bd:c4:60:6c:9b:4e:8c:30: 86:4f:5e:e2:88:a8:ed:bd:06:49:00:99:36:20:69: 13:de:eb:91:de:5e:82:9b:93:ba:04:72:11:c4:f6: 80:6a:b7:22:ac:1a:16:a7:c7:ff:c7:c0:6e:28:58: 51:14:0e:8a:ac:37:2e:b1:0b:a3:fe:e0:80:4c:55: 44:12:3c:c8:73:14:9b:ef:8c:67:17:21:f7:ff:94: dd:78:12:c9:08:8b:c1:08:a2:e4:bf:43:25:c8:1d: e1:1d:76:77:87:39:2d:bf:71:1b:b7:91:2f:b0:90: 9a:df:e4:58:85:4e:ee:c4:e5:0f:c7:77:49:cc:d2: 67:ee:89:55:6c:4e:1f:39:64:63:b7:76:f9:e4:da: d7:23:0c:8d:30:4c:3c:1b:95:b6:20:8d:22:db:74: 9c:2c:87:dc:73:c8:4e:ac:f1:37:14:24:ea:1c:8e: 3a:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:37:34:09:30:14:E1:10:FB:D8:13:35:B1:9C:B4:21:AB:82:53:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1e47dcc1-780d-34e4-8444-caed127c594c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:bf:6e:19:b8:4e:42:fc:6c:83:81:2d:ae:01:ca:73:58:fc: f4:c2:b4:b6:ee:15:da:15:c3:74:3d:52:c9:77:26:df:77:70: 85:c7:e9:b8:33:1d:5a:9d:84:a4:f0:d5:16:4f:d2:56:e2:e7: 5c:6b:cf:c2:66:c7:8c:17:34:87:13:a4:50:37:ce:49:79:ff: b8:72:f6:d1:7f:85:d8:37:e1:7d:64:5d:64:c6:86:8d:6b:91: 2c:bb:94:c3:76:ff:ae:d3:77:74:40:dd:f6:0a:35:77:3f:c2: 23:65:af:06:96:d9:0a:00:c8:23:44:e4:82:c2:de:cf:d1:a4: 6d:4f:0a:b8:6e:e4:2c:e9:70:52:a0:7b:e8:48:0b:8c:95:89: 24:a4:9f:0e:fa:31:08:a9:b6:ae:c6:bb:56:14:bd:86:11:83: 82:e3:e6:65:e5:2c:0b:1a:c1:66:c6:f6:1c:82:96:26:e0:f1: 0b:10:0f:da:82:69:26:8c:8e:06:67:df:36:de:36:89:d5:0b: e6:b0:7a:f2:bb:e6:f8:59:ef:16:aa:90:ef:2c:84:1f:9f:29: e5:05:a5:e7:5a:ef:50:de:77:42:2d:b7:75:c7:de:69:83:42: a4:9d:3f:dd:37:0a:79:cd:24:67:2c:05:d1:c2:f4:3c:56:12: d9:8b:a7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuulzcvho6sUTuIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2M5MWMwZjMtMjk3Ni00YjRhLWI5YjktMzdlYjVjNGY1NTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAglQj/E2qhyXj4obzmtUXU4UlSUyT29SLUYv5 NBWld8TOvUhFykyTBMakdqzBel3c7MNFu7i7DGTAPSNXdeN6/P/i5wd9PUMGl7ei jQ5GIAC9vcRgbJtOjDCGT17iiKjtvQZJAJk2IGkT3uuR3l6Cm5O6BHIRxPaAarci rBoWp8f/x8BuKFhRFA6KrDcusQuj/uCATFVEEjzIcxSb74xnFyH3/5TdeBLJCIvB CKLkv0MlyB3hHXZ3hzktv3Ebt5EvsJCa3+RYhU7uxOUPx3dJzNJn7olVbE4fOWRj t3b55NrXIwyNMEw8G5W2II0i23ScLIfcc8hOrPE3FCTqHI46RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP03NAkwFOEQ+9gTNbGctCGrglOrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWU0N2RjYzEtNzgwZC0z NGU0LTg0NDQtY2FlZDEyN2M1OTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIe/bhm4TkL8bIOBLa4BynNY/PTCtLbuFdoVw3Q9Usl3Jt93cIXH6bgz HVqdhKTw1RZP0lbi51xrz8Jmx4wXNIcTpFA3zkl5/7hy9tF/hdg34X1kXWTGho1r kSy7lMN2/67Td3RA3fYKNXc/wiNlrwaW2QoAyCNE5ILC3s/RpG1PCrhu5CzpcFKg e+hIC4yViSSknw76MQiptq7Gu1YUvYYRg4Lj5mXlLAsawWbG9hyClibg8QsQD9qC aSaMjgZn3zbeNonVC+awevK75vhZ7xaqkO8shB+fKeUFpeda71Ded0Itt3XH3mmD QqSdP903CnnNJGcsBdHC9DxWEtmLp+M= -----END CERTIFICATE-----Generated at Sun Apr 27 10:26:51 2025 by rpki-client