$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa File: 40420dc4-9d4c-3850-9245-08633abd44d4.roa (raw, json) Hash identifier: 3QABArowgxKcq7/H7lMCCkRBsmqpwObhQOpg4liZgYw= Subject key identifier: CB:33:D5:24:99:33:EF:0B:E7:3F:80:76:55:8A:2E:7B:86:7E:25:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE9E6551137AE9EB967C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e9:e6:55:11:37:ae:9e:b9:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=29adf579-6d11-4036-ae74-e8f5d491cb0f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:ad:fa:e3:f6:b1:6a:61:6d:3b:56:3f:6e:8d: f2:bb:c3:7f:51:2f:c1:8f:56:9d:af:a5:7b:bd:be: 1e:f2:fe:df:df:6e:83:bc:96:67:fc:6e:20:a1:a9: 06:bc:04:ff:cc:eb:b4:b6:fe:c7:1a:c9:96:57:5d: 7f:e7:30:ee:ef:aa:db:90:b8:12:8f:d5:77:b5:d3: e2:e0:3b:95:1f:af:37:92:45:4d:66:2e:00:fd:1e: 83:24:c7:50:98:02:0d:c0:b6:1a:ff:ab:a9:a8:d7: 2d:c4:c2:3e:9b:b1:b6:b1:91:41:1b:b5:f4:3a:3f: cc:91:f7:9d:55:87:ce:9d:ca:88:d2:ea:77:87:cd: 8f:bc:7a:47:be:6b:56:22:2a:f2:c4:23:18:60:4f: 9e:50:7f:32:44:2a:bc:d3:02:e6:54:a6:f9:da:6e: 19:2e:a2:f8:d4:4a:bc:aa:5d:90:bf:11:00:38:a1: 19:5c:43:f9:a8:60:b7:d6:c8:02:43:2c:80:c2:a7: d9:f0:b8:d7:ae:fb:48:89:e3:0a:32:e5:78:9a:d3: 6d:3e:fb:3c:fb:7f:51:f4:68:6d:98:34:5e:ad:ab: a8:71:89:03:50:d7:5e:02:6c:a0:ac:7c:c8:72:50: 1d:42:68:91:6a:09:0e:93:cd:35:b4:64:72:3c:d6: bb:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:33:D5:24:99:33:EF:0B:E7:3F:80:76:55:8A:2E:7B:86:7E:25:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40420dc4-9d4c-3850-9245-08633abd44d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:d3:77:fb:02:e1:75:69:a8:4b:c4:15:f7:61:ca:f8:92:b5: 45:b6:31:a0:db:28:fe:67:e2:bf:a2:96:50:41:39:4a:53:a4: cc:c5:a2:ce:fb:f9:f6:16:ec:92:8f:ac:da:b7:b5:11:f2:1f: 2b:cb:f0:45:01:0e:f6:4f:f1:4b:98:cc:cc:d5:be:ee:1b:43: 03:f2:73:cd:1a:2d:eb:58:1f:25:cc:a6:a1:b7:6b:0b:7b:7d: 8e:48:87:bf:ad:60:67:d5:01:1c:c8:9e:28:27:88:7e:39:cc: c3:8c:82:9e:ca:b8:56:7c:92:8d:41:98:72:19:b3:06:49:92: 39:a7:de:c6:19:1f:25:89:fc:75:ad:9f:0c:9e:b8:e9:52:d0: 9e:d0:a1:3f:16:d3:42:4b:1b:c4:54:a3:0a:75:78:f6:9c:7b: 1e:a8:50:d7:21:9c:71:01:02:a7:95:e7:e8:3c:90:f2:ea:9e: 5f:2a:3c:6e:83:89:d7:5e:33:ef:7b:ac:8d:7f:01:ee:a7:34: 49:13:80:84:11:a8:2a:54:ea:1f:21:88:85:68:27:f4:db:fd: 5f:a5:10:40:83:d9:07:45:50:b3:22:7d:f6:d4:9d:16:8b:01: b9:4c:11:55:9d:81:c4:0b:7b:fa:71:6e:6a:c6:98:f1:a6:5c: 4b:d4:2b:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuunmVRE3rp65Z8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjlhZGY1NzktNmQxMS00MDM2LWFlNzQtZThmNWQ0OTFjYjBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA86364/axamFtO1Y/bo3yu8N/US/Bj1adr6V7 vb4e8v7f326DvJZn/G4goakGvAT/zOu0tv7HGsmWV11/5zDu76rbkLgSj9V3tdPi 4DuVH683kkVNZi4A/R6DJMdQmAINwLYa/6upqNctxMI+m7G2sZFBG7X0Oj/Mkfed VYfOncqI0up3h82PvHpHvmtWIiryxCMYYE+eUH8yRCq80wLmVKb52m4ZLqL41Eq8 ql2QvxEAOKEZXEP5qGC31sgCQyyAwqfZ8LjXrvtIieMKMuV4mtNtPvs8+39R9Ght mDRerauocYkDUNdeAmygrHzIclAdQmiRagkOk801tGRyPNa7TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMsz1SSZM+8L5z+AdlWKLnuGfiWMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDA0MjBkYzQtOWQ0Yy0z ODUwLTkyNDUtMDg2MzNhYmQ0NGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2pMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfTd/sC4XVpqEvEFfdhyviStUW2MaDbKP5n4r+illBBOUpTpMzFos77 +fYW7JKPrNq3tRHyHyvL8EUBDvZP8UuYzMzVvu4bQwPyc80aLetYHyXMpqG3awt7 fY5Ih7+tYGfVARzInigniH45zMOMgp7KuFZ8ko1BmHIZswZJkjmn3sYZHyWJ/HWt nwyeuOlS0J7QoT8W00JLG8RUowp1ePacex6oUNchnHEBAqeV5+g8kPLqnl8qPG6D iddeM+97rI1/Ae6nNEkTgIQRqCpU6h8hiIVoJ/Tb/V+lEECD2QdFULMiffbUnRaL AblMEVWdgcQLe/pxbmrGmPGmXEvUK/I= -----END CERTIFICATE-----Generated at Sun Apr 27 04:02:30 2025 by rpki-client