$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32dd88c7-2f8d-388e-a834-75892e8d947f.roa File: 32dd88c7-2f8d-388e-a834-75892e8d947f.roa (raw, json) Hash identifier: z3a8uIX4L/g2fb0k0iyYbJqxeFZ1o7il1N7bFW+PrXs= Subject key identifier: E9:07:55:A6:E9:8B:DE:0E:83:B1:C1:00:97:8A:A7:C6:8D:06:06:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA62B69E80B6EC741BD4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32dd88c7-2f8d-388e-a834-75892e8d947f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:b6:9e:80:b6:ec:74:1b:d4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8febad59-7ce4-4785-9e56-5ca468eb17e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1b:d5:e5:dd:c3:31:05:df:1c:8a:80:41:b2: 29:1c:d4:46:7e:f8:8b:b9:92:6e:3f:56:dc:21:c2: eb:76:37:d8:5e:57:94:c8:95:f6:f5:03:02:40:67: 07:27:56:ba:e4:a2:f9:eb:0d:21:da:ff:43:e3:61: 6e:aa:4f:27:37:ec:f2:09:00:96:78:a5:3e:df:07: 89:92:69:01:16:f5:c1:d2:1d:ba:84:a1:00:f4:6e: b7:56:8d:4b:17:e7:f5:83:16:f6:b6:07:3d:cb:30: 15:bd:68:af:8c:a9:fc:d8:93:a9:04:59:a1:78:7e: ca:4c:c5:85:96:ec:a5:3f:25:75:de:c4:ce:50:02: 80:9b:96:de:15:32:6a:fc:71:d2:04:4a:27:16:1a: 61:26:9c:3e:76:3b:e5:b5:77:c2:99:77:0c:3b:86: 70:08:45:67:57:72:5c:47:26:f8:2d:a7:3b:39:b1: 78:9f:37:31:2f:4a:ce:c1:e3:96:33:28:26:1c:69: 74:2f:7b:93:34:15:eb:1f:15:7b:f8:4a:30:f8:63: 63:a3:c3:dc:45:76:42:cf:17:98:f1:d5:80:5a:db: 9b:b1:9e:58:69:27:7f:f9:24:55:3c:48:3d:96:66: 79:4d:bc:91:ce:6b:3c:d0:a0:9e:0a:f6:55:9c:83: 01:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:07:55:A6:E9:8B:DE:0E:83:B1:C1:00:97:8A:A7:C6:8D:06:06:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32dd88c7-2f8d-388e-a834-75892e8d947f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:9c:21:e4:ba:07:45:92:b7:c6:b1:09:6b:db:b1:19:1d:49: 7c:b8:85:aa:8d:34:e2:12:76:4d:55:23:52:e6:55:25:45:83: ad:d7:aa:9e:cf:07:b8:4f:17:41:4b:fb:60:ef:16:44:49:21: 37:8a:ef:c6:9c:b1:60:ae:ca:8d:bb:d7:d6:47:04:80:a6:da: d4:6e:26:b0:45:39:0c:b6:fa:04:85:d2:88:3a:97:f9:ed:10: bf:7a:ee:7b:1a:b5:f3:62:13:a6:5b:f1:50:de:ea:2b:b9:b4: 17:ec:95:69:e3:07:04:09:88:50:90:c5:7b:8b:b9:89:c2:05: ef:82:37:8a:f2:3b:20:cf:9d:b0:44:6f:ac:85:d9:35:80:4c: 1d:9b:ad:42:6c:4d:50:4e:05:0e:b2:2d:00:d7:40:b4:40:66: 66:9f:d5:33:6b:60:de:12:c3:e7:11:72:ab:c8:ba:fb:e7:d9: 7d:7f:d4:8d:af:61:55:55:c9:9a:dd:86:f3:f3:bb:32:d9:0b: e6:8c:54:22:13:5f:ec:c7:d3:2e:6a:63:75:8d:b9:df:ad:d7: 15:61:6b:65:95:17:c0:70:84:f9:34:0e:63:ec:9c:3d:2c:3d: d5:64:be:7b:15:66:bf:3f:35:13:6a:4a:01:2a:fc:db:5f:de: f6:04:8a:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumK2noC27HQb1MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGZlYmFkNTktN2NlNC00Nzg1LTllNTYtNWNhNDY4ZWIxN2U5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApxvV5d3DMQXfHIqAQbIpHNRGfviLuZJuP1bc IcLrdjfYXleUyJX29QMCQGcHJ1a65KL56w0h2v9D42Fuqk8nN+zyCQCWeKU+3weJ kmkBFvXB0h26hKEA9G63Vo1LF+f1gxb2tgc9yzAVvWivjKn82JOpBFmheH7KTMWF luylPyV13sTOUAKAm5beFTJq/HHSBEonFhphJpw+djvltXfCmXcMO4ZwCEVnV3Jc Ryb4Lac7ObF4nzcxL0rOweOWMygmHGl0L3uTNBXrHxV7+Eow+GNjo8PcRXZCzxeY 8dWAWtubsZ5YaSd/+SRVPEg9lmZ5TbyRzms80KCeCvZVnIMBOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOkHVabpi94Og7HBAJeKp8aNBgaxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzJkZDg4YzctMmY4ZC0z ODhlLWE4MzQtNzU4OTJlOGQ5NDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2cIeS6B0WSt8axCWvbsRkdSXy4haqNNOISdk1VI1LmVSVFg63Xqp7P B7hPF0FL+2DvFkRJITeK78acsWCuyo2719ZHBICm2tRuJrBFOQy2+gSF0og6l/nt EL967nsatfNiE6Zb8VDe6iu5tBfslWnjBwQJiFCQxXuLuYnCBe+CN4ryOyDPnbBE b6yF2TWATB2brUJsTVBOBQ6yLQDXQLRAZmaf1TNrYN4Sw+cRcqvIuvvn2X1/1I2v YVVVyZrdhvPzuzLZC+aMVCITX+zH0y5qY3WNud+t1xVha2WVF8BwhPk0DmPsnD0s PdVkvnsVZr8/NRNqSgEq/Ntf3vYEisw= -----END CERTIFICATE-----Generated at Sun Apr 27 17:46:20 2025 by rpki-client