$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e06fa9-8297-3647-9f50-b56402a75b83.roa File: 28e06fa9-8297-3647-9f50-b56402a75b83.roa (raw, json) Hash identifier: /iOY0rwY+FGWlVWVqksBsBW3eFUTHagfReBhqk3qdQs= Subject key identifier: 28:FF:0C:F2:6A:ED:2F:52:0B:65:99:92:79:7F:1C:40:47:0B:03:7F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA620CF65E2A0315F11B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e06fa9-8297-3647-9f50-b56402a75b83.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:0c:f6:5e:2a:03:15:f1:1b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=a1b36f42-be30-4fa6-8a91-7e4a05ea3f91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:d3:36:99:63:f9:da:7e:38:dc:f3:c5:72:b0: 03:e7:55:54:d9:ab:21:9f:50:e9:7a:b0:6b:a2:19: 8e:d9:fc:3d:f8:02:bd:14:5e:fb:b0:2a:e3:96:e2: 61:6d:91:fa:2d:dc:9d:d6:ea:10:c3:c1:26:f8:0d: 6c:51:1f:fe:16:2f:3b:bb:0c:1e:7f:43:0b:08:ce: f2:17:51:a2:73:35:1e:f4:49:bb:41:c1:f0:cf:76: 5e:bc:cc:82:64:f9:53:5f:39:ae:45:7d:73:e4:9a: e4:3f:54:fe:31:9d:c3:7c:07:07:f8:b6:9c:76:b0: 31:ad:92:7c:8d:3d:fa:96:27:ee:a7:fb:23:13:21: c5:83:6e:db:21:d0:8e:a6:ed:f1:8f:78:45:84:33: 12:fa:3b:0a:28:b4:bf:3f:30:fe:8e:db:2a:6f:29: 6c:cd:3b:cc:24:88:ad:da:f1:14:c0:26:0b:c5:0d: ac:9f:84:ee:af:bc:64:8b:95:1f:78:13:45:7c:c8: 40:1c:b1:6d:74:3d:b1:8f:95:44:11:d1:6a:e3:5c: 37:93:6a:ba:cf:44:4b:7e:c1:d5:33:b8:4b:81:1a: bd:31:d0:62:2a:79:c0:92:25:b9:09:e2:0a:9e:3f: ac:ac:7c:5c:a2:c1:92:07:ed:a3:3e:ec:c9:82:f1: 30:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:FF:0C:F2:6A:ED:2F:52:0B:65:99:92:79:7F:1C:40:47:0B:03:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e06fa9-8297-3647-9f50-b56402a75b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:8a:4b:e8:d1:31:ae:bf:f9:5f:86:14:1e:f2:2f:e5:72:c1: 23:9a:9a:82:55:17:25:3d:c3:9d:f4:ea:c2:cb:b4:94:d4:1f: 4d:49:f5:ee:d8:d9:b9:81:eb:c9:8d:6a:6f:6a:3d:c2:64:d7: 52:ac:d0:e6:90:73:78:08:dd:24:49:06:3f:96:83:88:60:4a: 0f:34:bf:b2:ab:6b:da:b4:ec:26:4a:1c:d7:1e:f0:3f:16:fd: 55:4b:98:ed:7a:53:30:5c:fe:dd:92:51:58:7d:74:40:5d:24: 16:12:50:32:27:99:0e:9e:32:22:bb:c4:cb:2c:a7:0a:4d:5f: 7e:98:3c:dd:e8:4b:01:82:62:e7:c1:aa:35:cb:bc:cc:ce:63: fa:72:5d:6e:8b:82:17:3a:e2:89:2e:93:32:51:4a:13:e4:95: 2a:79:00:90:0c:e7:85:33:d7:52:b8:d1:91:78:ec:49:53:80: 2e:0b:16:d0:ff:f6:4d:0b:69:ee:bf:95:a0:88:a1:df:0d:02: a1:2a:76:ec:99:d0:9b:91:51:55:cf:a1:ac:6c:66:c5:3a:31: 98:21:31:c4:d2:b3:ea:69:15:6a:28:2e:cb:e7:86:70:de:3e: a0:f1:c6:75:b9:05:02:d1:3b:e1:c0:4a:67:97:92:63:0b:ba: 98:d1:75:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumIM9l4qAxXxG4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YTFiMzZmNDItYmUzMC00ZmE2LThhOTEtN2U0YTA1ZWEzZjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutM2mWP52n443PPFcrAD51VU2ashn1DperBr ohmO2fw9+AK9FF77sCrjluJhbZH6Ldyd1uoQw8Em+A1sUR/+Fi87uwwef0MLCM7y F1GiczUe9Em7QcHwz3ZevMyCZPlTXzmuRX1z5JrkP1T+MZ3DfAcH+LacdrAxrZJ8 jT36lifup/sjEyHFg27bIdCOpu3xj3hFhDMS+jsKKLS/PzD+jtsqbylszTvMJIit 2vEUwCYLxQ2sn4Tur7xki5UfeBNFfMhAHLFtdD2xj5VEEdFq41w3k2q6z0RLfsHV M7hLgRq9MdBiKnnAkiW5CeIKnj+srHxcosGSB+2jPuzJgvEwiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCj/DPJq7S9SC2WZknl/HEBHCwN/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjhlMDZmYTktODI5Ny0z NjQ3LTlmNTAtYjU2NDAyYTc1YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFeKS+jRMa6/+V+GFB7yL+VywSOamoJVFyU9w5306sLLtJTUH01J9e7Y 2bmB68mNam9qPcJk11Ks0OaQc3gI3SRJBj+Wg4hgSg80v7Kra9q07CZKHNce8D8W /VVLmO16UzBc/t2SUVh9dEBdJBYSUDInmQ6eMiK7xMsspwpNX36YPN3oSwGCYufB qjXLvMzOY/pyXW6Lghc64okukzJRShPklSp5AJAM54Uz11K40ZF47ElTgC4LFtD/ 9k0Lae6/laCIod8NAqEqduyZ0JuRUVXPoaxsZsU6MZghMcTSs+ppFWooLsvnhnDe PqDxxnW5BQLRO+HASmeXkmMLupjRdYA= -----END CERTIFICATE-----Generated at Sun Apr 27 00:21:19 2025 by rpki-client