$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa File: 3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa (raw, json) Hash identifier: FWMyOaQPpSyw84SpvJXi5xYR3skGswAHUkQZCev6v84= Subject key identifier: FA:40:6B:D6:D7:45:8F:16:00:4B:3E:6B:81:2E:0B:06:25:19:8E:DA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE7DDED2CED86A4FFCDC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.73.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e7:dd:ed:2c:ed:86:a4:ff:cd:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=c18a248b-329e-4871-95cd-4f2f333c00a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:25:c3:77:d2:0a:2b:5e:a6:65:12:a4:91:0d: e0:a7:09:e9:df:a1:0a:7c:15:70:d3:c8:65:bf:08: c4:76:d5:db:47:95:1d:78:b2:50:69:1a:27:98:dd: a6:c2:22:77:32:39:41:43:1f:aa:73:a2:d9:63:53: 1c:4a:ed:c6:e2:d1:1d:45:ae:09:88:6f:3a:db:9e: 6c:8b:de:92:6f:51:77:27:53:cc:ee:73:f7:f0:03: 40:f4:ba:30:d0:08:57:4b:12:cd:a4:e4:1e:f9:c3: f6:98:bd:13:04:dc:0e:e5:91:af:59:4b:d6:b5:0d: 8e:e6:81:d1:70:1a:30:9c:cb:a6:f0:f4:35:5d:e2: c6:e3:e3:f2:0d:97:eb:5e:12:ff:75:05:2c:3f:a2: a4:0a:97:c0:5e:b4:5b:e7:06:11:99:ea:17:74:62: c5:74:36:9a:cf:2a:1a:bf:7c:3b:05:a7:a8:97:b1: f6:cc:00:17:72:2a:f8:fc:bf:82:df:e4:bc:16:df: dc:91:e9:8b:58:c1:c0:a3:ca:59:da:3e:cd:3c:46: b0:44:b9:98:89:61:17:96:34:3e:c3:35:9c:26:35: af:c8:79:0c:b9:86:69:0f:46:a2:d4:4c:6c:7e:12: f8:16:69:25:63:5d:de:ce:40:aa:b3:b9:73:f1:1e: 90:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:40:6B:D6:D7:45:8F:16:00:4B:3E:6B:81:2E:0B:06:25:19:8E:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a3fae91-4c70-33ae-bea1-7a84b7e61ff0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.73.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:81:fc:d5:b2:19:9f:fb:c9:d1:ab:ac:5a:58:e3:b7:26:1e: 22:d6:37:68:02:35:ed:20:39:8b:0b:49:58:86:0a:e0:4f:9c: a6:d0:22:3a:89:0b:96:8f:07:a7:ff:43:45:37:11:28:50:24: 8b:21:c3:94:95:44:f0:36:df:f1:a5:50:b4:c4:0e:4d:33:c0: 9d:bb:0c:17:86:8a:57:74:c1:ed:07:f5:59:54:4f:6f:14:69: 99:75:2e:3b:0c:19:16:32:81:55:7e:e4:65:8c:59:6c:5a:8c: 77:af:3d:ae:4f:ab:3a:b2:ce:ee:5d:10:c5:0a:68:88:97:94: 73:74:6c:b0:63:e2:b6:9c:dc:c2:dd:19:bd:a7:02:a7:a9:ba: f4:6f:57:44:b7:28:ca:d8:84:6c:72:d2:82:19:a2:d2:3f:9e: a7:c5:33:f0:b1:18:8e:56:e3:30:c2:da:18:6b:61:5c:e9:5e: 40:8d:5c:b5:3f:aa:c5:e6:ab:8a:9b:ce:dd:a5:35:a0:9c:34: f6:1e:0b:7d:aa:08:b8:cf:31:13:cb:7e:b1:83:1d:43:75:04: 6a:b4:84:c9:1d:c6:01:e4:05:12:21:5c:54:8a:d0:77:00:ec: d4:65:1f:92:ba:1c:dc:36:89:40:57:fb:a9:fb:ef:23:53:03: 8f:25:93:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuufd7SzthqT/zcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YzE4YTI0OGItMzI5ZS00ODcxLTk1Y2QtNGYyZjMzM2MwMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjSXDd9IKK16mZRKkkQ3gpwnp36EKfBVw08hl vwjEdtXbR5UdeLJQaRonmN2mwiJ3MjlBQx+qc6LZY1McSu3G4tEdRa4JiG86255s i96Sb1F3J1PM7nP38ANA9Low0AhXSxLNpOQe+cP2mL0TBNwO5ZGvWUvWtQ2O5oHR cBownMum8PQ1XeLG4+PyDZfrXhL/dQUsP6KkCpfAXrRb5wYRmeoXdGLFdDaazyoa v3w7Baeol7H2zAAXcir4/L+C3+S8Ft/ckemLWMHAo8pZ2j7NPEawRLmYiWEXljQ+ wzWcJjWvyHkMuYZpD0ai1ExsfhL4FmklY13ezkCqs7lz8R6QMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPpAa9bXRY8WAEs+a4EuCwYlGY7aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2EzZmFlOTEtNGM3MC0z M2FlLWJlYTEtN2E4NGI3ZTYxZmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKB/NWyGZ/7ydGrrFpY47cmHiLWN2gCNe0gOYsLSViGCuBPnKbQIjqJ C5aPB6f/Q0U3EShQJIshw5SVRPA23/GlULTEDk0zwJ27DBeGild0we0H9VlUT28U aZl1LjsMGRYygVV+5GWMWWxajHevPa5Pqzqyzu5dEMUKaIiXlHN0bLBj4rac3MLd Gb2nAqepuvRvV0S3KMrYhGxy0oIZotI/nqfFM/CxGI5W4zDC2hhrYVzpXkCNXLU/ qsXmq4qbzt2lNaCcNPYeC32qCLjPMRPLfrGDHUN1BGq0hMkdxgHkBRIhXFSK0HcA 7NRlH5K6HNw2iUBX+6n77yNTA48lk1c= -----END CERTIFICATE-----Generated at Sun Apr 27 09:52:51 2025 by rpki-client