$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa File: 3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa (raw, json) Hash identifier: Cn8Ome5K4V5TeoQyDeWEHDHZZ9Hc66JVjy9nyHZcqbQ= Subject key identifier: 81:28:63:1F:A0:2F:F6:B2:4E:60:34:4E:B1:7C:82:4D:85:AF:6A:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8410FA2D72AFFD5070EFBC40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 72.173.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:10:fa:2d:72:af:fd:50:70:ef:bc:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8e448f4f-3db8-4fa6-ac93-c6d123bad33e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:2c:18:75:55:de:0f:03:69:0b:2b:28:f2:10: 93:51:af:9e:6f:06:c6:8d:23:61:7f:fc:f5:c0:d7: 16:bb:b7:85:64:ef:18:61:da:e0:d5:9c:8a:04:93: aa:df:9c:ed:6f:c1:36:20:e8:50:d7:ad:3b:87:79: 6e:9c:e8:b4:c6:10:d4:61:3a:7b:3d:38:49:c2:dd: eb:1a:c5:f1:78:07:af:cb:28:e1:b6:02:cf:1e:c4: b0:42:46:64:c8:21:29:f4:80:e6:1c:37:78:b4:ef: 97:9f:f7:a4:27:dc:71:3e:0d:aa:4f:70:30:79:26: 13:56:42:c8:34:63:a2:79:85:6b:bc:2e:dc:45:1f: 5b:94:87:0e:b6:23:6f:c3:41:2c:08:89:4d:dd:75: 44:db:58:87:8c:8e:af:41:bf:35:a1:2d:40:f1:87: 8e:ac:67:5d:e2:92:e2:ca:40:4c:61:6e:43:65:c7: 7d:b4:b3:97:b8:9b:29:10:ba:da:87:a5:f8:ea:c8: 39:f7:50:6e:1f:29:ba:5d:85:b3:5c:33:58:91:42: ba:75:ac:57:51:85:8c:f3:dd:c9:43:fa:59:b5:ce: 10:1a:88:e0:e3:38:cd:71:ce:b1:f5:b4:e0:1c:a1: ae:ed:da:ac:6c:cb:e0:54:7c:15:d8:54:af:3d:21: f1:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:28:63:1F:A0:2F:F6:B2:4E:60:34:4E:B1:7C:82:4D:85:AF:6A:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:e6:8a:f8:7d:9b:58:a3:4a:aa:e0:76:70:7a:f4:76:56:9c: 96:d2:f4:a3:8b:d2:a6:0a:c6:79:19:71:47:40:1d:35:74:41: 0c:12:1e:33:92:d5:5e:1b:6b:63:a9:86:43:17:20:80:cf:fc: 21:0b:e7:29:41:b9:f0:e2:1d:e0:49:bd:41:79:83:88:b6:67: e7:aa:ad:de:e0:03:d7:e7:01:b5:b0:aa:f8:e0:bf:61:30:96: a4:39:69:33:8a:5b:ac:e0:40:c8:68:f4:e4:05:c4:4a:3a:7e: 9e:99:ae:e3:48:d4:26:29:69:cf:1a:a4:35:28:c4:ad:96:c6: 6d:53:e1:17:25:8f:35:49:f0:5d:96:19:c2:af:05:da:87:b3: e1:91:1a:44:11:5a:61:8c:b6:5a:b5:c8:e8:62:63:6b:32:41: 7c:02:aa:6b:98:4b:57:c2:5b:fa:f9:04:a1:69:db:29:bf:1d: 34:1e:d7:be:58:c7:67:cf:ee:f8:3b:52:16:4a:4a:71:36:5a: 23:d7:3a:9d:88:99:0d:25:cd:64:98:3b:a7:7e:7d:f2:c8:55: c5:80:93:b2:a2:9e:5d:32:20:ad:22:a6:2f:e3:47:c5:f8:42: b2:1b:cf:a4:76:0f:09:fb:6a:08:59:fa:51:c9:ac:b3:a4:99: ba:0f:1e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPotcq/9UHDvvEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGU0NDhmNGYtM2RiOC00ZmE2LWFjOTMtYzZkMTIzYmFkMzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnCwYdVXeDwNpCyso8hCTUa+ebwbGjSNhf/z1 wNcWu7eFZO8YYdrg1ZyKBJOq35ztb8E2IOhQ1607h3lunOi0xhDUYTp7PThJwt3r GsXxeAevyyjhtgLPHsSwQkZkyCEp9IDmHDd4tO+Xn/ekJ9xxPg2qT3AweSYTVkLI NGOieYVrvC7cRR9blIcOtiNvw0EsCIlN3XVE21iHjI6vQb81oS1A8YeOrGdd4pLi ykBMYW5DZcd9tLOXuJspELrah6X46sg591BuHym6XYWzXDNYkUK6daxXUYWM893J Q/pZtc4QGojg4zjNcc6x9bTgHKGu7dqsbMvgVHwV2FSvPSHx5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEoYx+gL/ayTmA0TrF8gk2Fr2oCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M1ZTUwYzYtMWIyMC0z MzUxLTgwZDgtMjY0YjFlM2Y1NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbmivh9m1ijSqrgdnB69HZWnJbS9KOL0qYKxnkZcUdAHTV0QQwSHjOS 1V4ba2OphkMXIIDP/CEL5ylBufDiHeBJvUF5g4i2Z+eqrd7gA9fnAbWwqvjgv2Ew lqQ5aTOKW6zgQMho9OQFxEo6fp6ZruNI1CYpac8apDUoxK2Wxm1T4RcljzVJ8F2W GcKvBdqHs+GRGkQRWmGMtlq1yOhiY2syQXwCqmuYS1fCW/r5BKFp2ym/HTQe175Y x2fP7vg7UhZKSnE2WiPXOp2ImQ0lzWSYO6d+ffLIVcWAk7Kinl0yIK0ipi/jR8X4 QrIbz6R2Dwn7aghZ+lHJrLOkmboPHjM= -----END CERTIFICATE-----Generated at Wed Aug 6 16:10:26 2025 by rpki-client