$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf016e-9ca9-35cf-9b6c-1df787affcc5.roa File: 36bf016e-9ca9-35cf-9b6c-1df787affcc5.roa (raw, json) Hash identifier: iIMZc8RSYfypH25E/2Bb5zyiRqMEjMcGiI1dcSkMeY0= Subject key identifier: 8C:6F:55:56:81:2A:68:7F:EB:AD:5C:AD:86:C0:77:46:D0:A5:55:82 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE85B2BAEB71A58BEC780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf016e-9ca9-35cf-9b6c-1df787affcc5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e8:5b:2b:ae:b7:1a:58:be:c7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ae0cb5cc-7d38-4b85-aacc-0215a6f8dbc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:1c:a7:31:10:2b:cd:3c:8e:68:72:04:a7:76: 47:00:26:15:f0:30:61:2d:20:17:4a:2e:00:73:65: 07:49:48:62:6d:ee:4d:f5:9d:2d:5b:b1:98:f7:eb: fa:07:e4:71:0e:cd:fa:46:86:50:ec:f7:a6:58:cf: 47:d9:bf:5c:94:6c:11:87:bb:fd:78:42:4b:00:c6: 6a:c2:14:72:cf:5c:bb:20:04:4a:32:27:c2:76:dd: 9a:1d:60:88:fe:85:07:d3:64:18:24:34:81:64:2e: 97:46:e4:ab:8a:4b:65:fd:f2:29:63:25:56:fa:86: 30:56:bb:5f:d4:ec:b6:f9:9f:48:ae:ec:ab:0e:d5: 66:22:55:4f:1c:bf:7e:35:c7:08:24:4f:44:f5:01: 56:0e:78:f1:2c:7e:d5:70:91:9b:fd:75:cc:a4:05: 38:3d:c4:60:6f:df:a7:c2:d8:54:6b:c9:3c:0b:70: 3f:2d:ce:31:c3:07:9b:31:e6:7f:3a:15:72:b2:f1: 38:54:dc:15:44:04:0b:4b:b6:5d:68:e1:07:fb:25: f4:0b:a8:f4:1a:9c:ba:62:7e:53:bc:d0:87:d6:8d: a5:fe:23:5f:b7:d6:66:0a:a7:a9:bd:f4:9f:8f:6f: d6:9c:e2:8e:68:e7:2f:42:4f:7d:92:ae:12:34:db: f2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:6F:55:56:81:2A:68:7F:EB:AD:5C:AD:86:C0:77:46:D0:A5:55:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36bf016e-9ca9-35cf-9b6c-1df787affcc5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:9a:d1:a0:fa:2e:a4:5c:97:53:4e:af:8b:5b:22:f3:b8:c8: d5:47:9a:8f:1e:c7:44:79:71:b9:e7:b6:b3:08:43:62:f0:da: a9:36:fe:bc:b8:cd:c0:4a:70:cd:fd:de:c3:f2:b0:fb:43:8a: 02:8c:40:ad:fe:94:a6:9e:31:e7:d2:8a:85:3d:7b:ac:18:69: 7b:98:44:b5:4f:2c:07:a9:0e:a3:51:ca:9c:e4:63:c1:09:87: c7:91:d6:c6:44:6b:f2:5b:89:8e:41:e2:22:68:83:d1:63:ef: 9d:fa:8b:63:c1:ce:78:b8:49:51:7b:65:6d:bc:12:48:e6:72: 97:37:78:a8:cc:da:50:88:68:d7:84:ba:de:0d:08:09:99:61: e0:fd:ea:80:69:5a:43:f9:b0:c1:fc:31:b3:ad:d3:f7:aa:02: 2f:9f:34:66:19:08:82:38:a0:f7:8b:d3:b1:80:9b:d6:f3:1e: 96:1a:28:dd:ff:e5:4f:b7:5d:cd:71:8d:b8:1a:ec:91:fe:85: 64:64:d2:97:c3:ed:18:e6:24:b1:20:da:06:72:bf:65:b8:01: 0e:da:84:df:54:c0:db:a1:ff:bb:eb:e6:ba:70:1b:60:9f:43: bd:72:cc:53:e8:29:b5:97:b0:29:8c:5b:2e:80:91:41:38:59: e1:f8:71:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuhbK663Gli+x4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YWUwY2I1Y2MtN2QzOC00Yjg1LWFhY2MtMDIxNWE2ZjhkYmMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgBynMRArzTyOaHIEp3ZHACYV8DBhLSAXSi4A c2UHSUhibe5N9Z0tW7GY9+v6B+RxDs36RoZQ7PemWM9H2b9clGwRh7v9eEJLAMZq whRyz1y7IARKMifCdt2aHWCI/oUH02QYJDSBZC6XRuSriktl/fIpYyVW+oYwVrtf 1Oy2+Z9IruyrDtVmIlVPHL9+NccIJE9E9QFWDnjxLH7VcJGb/XXMpAU4PcRgb9+n wthUa8k8C3A/Lc4xwwebMeZ/OhVysvE4VNwVRAQLS7ZdaOEH+yX0C6j0Gpy6Yn5T vNCH1o2l/iNft9ZmCqepvfSfj2/WnOKOaOcvQk99kq4SNNvy/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIxvVVaBKmh/661crYbAd0bQpVWCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzZiZjAxNmUtOWNhOS0z NWNmLTliNmMtMWRmNzg3YWZmY2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKa0aD6LqRcl1NOr4tbIvO4yNVHmo8ex0R5cbnntrMIQ2Lw2qk2/ry4 zcBKcM393sPysPtDigKMQK3+lKaeMefSioU9e6wYaXuYRLVPLAepDqNRypzkY8EJ h8eR1sZEa/JbiY5B4iJog9Fj7536i2PBzni4SVF7ZW28Ekjmcpc3eKjM2lCIaNeE ut4NCAmZYeD96oBpWkP5sMH8MbOt0/eqAi+fNGYZCII4oPeL07GAm9bzHpYaKN3/ 5U+3Xc1xjbga7JH+hWRk0pfD7RjmJLEg2gZyv2W4AQ7ahN9UwNuh/7vr5rpwG2Cf Q71yzFPoKbWXsCmMWy6AkUE4WeH4cTI= -----END CERTIFICATE-----Generated at Mon Apr 28 08:31:22 2025 by rpki-client