$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa File: 3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa (raw, json) Hash identifier: zQ/6JH/ojzQa/8b5gttRcTvILS938EAGwfZWzMPHpAA= Subject key identifier: 6A:F5:71:8B:DD:7E:30:B2:BE:77:66:55:13:71:EB:45:48:1C:72:4F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA51606B6286D9A6434A40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 72.173.211.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:51:60:6b:62:86:d9:a6:43:4a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cc9a3072-d624-4186-9243-956dab00f496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:c1:3b:b0:4a:b4:ef:da:aa:69:ff:a3:a4:3e: 81:fd:b1:d6:39:72:41:bd:f8:24:d5:30:b7:bc:85: 16:f4:68:e0:b0:8f:69:50:7d:71:ca:13:c6:15:6b: a1:d5:54:86:de:29:ce:91:d9:96:d0:ff:15:12:e7: 6f:cd:23:86:2c:9f:cc:71:b9:fe:2b:17:a1:6e:b9: 55:c2:32:56:3e:7a:35:99:d3:e6:a2:88:c4:3a:5f: a2:a0:ed:36:11:1b:9d:70:53:d0:cf:75:f3:d8:3b: 08:a1:71:19:e0:71:c6:1b:60:49:20:3d:42:c6:08: 35:2b:e9:18:69:70:95:2a:8a:6a:36:f9:bf:9d:65: 1f:1e:87:5f:05:a6:83:60:ff:f5:7f:1d:28:1b:b8: 29:e4:cb:f3:49:13:12:06:73:76:96:d1:e2:24:df: 2b:7b:81:f4:b9:98:42:6a:d4:05:df:be:c4:e1:d3: 74:87:4e:db:a4:e8:42:9f:d7:ef:8c:02:01:0b:c4: 91:dc:cc:12:77:7b:b9:c0:b1:8d:96:fc:09:10:97: 77:78:56:15:42:23:c5:98:1a:07:91:fc:ca:ca:93: b3:1c:7e:cd:60:89:df:9e:81:83:1d:74:1e:5f:db: 07:04:4c:a1:8a:50:ca:f8:42:80:18:30:f0:a2:21: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:F5:71:8B:DD:7E:30:B2:BE:77:66:55:13:71:EB:45:48:1C:72:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c5e50c6-1b20-3351-80d8-264b1e3f5458.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.211.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:7d:58:10:00:89:19:6b:22:96:e9:bf:2f:7a:df:ab:aa:f6: 7e:3f:dd:4b:69:13:9a:a5:c2:b1:48:e7:7f:2f:10:99:77:56: 95:92:6a:bb:41:b3:8e:c1:f4:d0:ee:81:99:b1:1e:c5:b1:33: 3b:d2:f0:08:d5:bf:e9:84:13:c9:0c:69:31:01:4a:22:fa:82: 4e:9a:40:c0:f7:65:37:5c:2d:aa:94:8d:41:db:f2:df:92:18: 5e:9d:e2:23:22:79:a1:21:16:74:62:83:e6:8c:de:d2:1d:c7: 6f:6f:9e:45:1b:d7:d6:ea:f0:78:34:c0:0d:20:98:46:e8:6d: df:fc:86:d0:c9:7b:21:a1:cb:5a:91:69:1d:a5:23:bb:20:6e: a4:bb:53:b0:77:2b:2d:d5:ed:26:9c:c0:69:9b:ac:f1:a7:78: 35:cc:7c:67:57:7d:bb:e2:6d:63:62:e6:ef:b1:4e:0c:fd:b8: 0f:f5:83:1b:55:73:19:cd:0c:45:cc:71:e3:3c:a8:e6:c6:5b: cd:70:47:8c:de:00:38:28:42:cb:83:77:d0:0d:fa:7f:d6:7c: 0d:77:a8:7b:4d:dd:d1:ff:9d:15:2b:ac:e6:7c:46:95:28:24: 43:29:fa:8c:5c:34:2d:25:8c:63:c3:f6:4d:b3:0c:ab:7d:9c: 23:d1:e4:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulFga2KG2aZDSkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2M5YTMwNzItZDYyNC00MTg2LTkyNDMtOTU2ZGFiMDBmNDk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmsE7sEq079qqaf+jpD6B/bHWOXJBvfgk1TC3 vIUW9GjgsI9pUH1xyhPGFWuh1VSG3inOkdmW0P8VEudvzSOGLJ/Mcbn+KxehbrlV wjJWPno1mdPmoojEOl+ioO02ERudcFPQz3Xz2DsIoXEZ4HHGG2BJID1Cxgg1K+kY aXCVKopqNvm/nWUfHodfBaaDYP/1fx0oG7gp5MvzSRMSBnN2ltHiJN8re4H0uZhC atQF377E4dN0h07bpOhCn9fvjAIBC8SR3MwSd3u5wLGNlvwJEJd3eFYVQiPFmBoH kfzKypOzHH7NYInfnoGDHXQeX9sHBEyhilDK+EKAGDDwoiFLEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGr1cYvdfjCyvndmVRNx60VIHHJPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2M1ZTUwYzYtMWIyMC0z MzUxLTgwZDgtMjY0YjFlM2Y1NDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC59WBAAiRlrIpbpvy9636uq9n4/3UtpE5qlwrFI538vEJl3VpWSartB s47B9NDugZmxHsWxMzvS8AjVv+mEE8kMaTEBSiL6gk6aQMD3ZTdcLaqUjUHb8t+S GF6d4iMieaEhFnRig+aM3tIdx29vnkUb19bq8Hg0wA0gmEbobd/8htDJeyGhy1qR aR2lI7sgbqS7U7B3Ky3V7SacwGmbrPGneDXMfGdXfbvibWNi5u+xTgz9uA/1gxtV cxnNDEXMceM8qObGW81wR4zeADgoQsuDd9AN+n/WfA13qHtN3dH/nRUrrOZ8RpUo JEMp+oxcNC0ljGPD9k2zDKt9nCPR5Ag= -----END CERTIFICATE-----Generated at Sun Apr 27 00:21:32 2025 by rpki-client