$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa File: 40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa (raw, json) Hash identifier: TsZhh7bVxZxRug1kC3eQ0YiGZjXQs9GbOab4TPZUZDo= Subject key identifier: 48:99:09:64:05:83:12:45:16:90:50:6B:65:93:B1:6D:41:76:F2:4D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEBEC96FAE1EC41714040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:eb:ec:96:fa:e1:ec:41:71:40:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=162ab3c5-a59e-42df-9c98-5f56e65ca392 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:38:b5:c8:ef:78:31:76:f3:18:04:56:d3:a6: fa:af:21:0f:a1:ba:f5:4b:6c:3e:ef:93:d3:fa:4e: 65:d2:02:82:67:92:3c:b4:b5:d2:b0:a0:9e:c1:6a: b8:a2:3e:5a:9c:18:97:70:e4:4f:28:b6:f8:e5:9e: 89:26:a5:a1:f1:b0:d4:ee:4f:87:12:0b:b8:18:e4: 29:ac:06:6b:be:a3:01:a4:f2:33:a2:61:50:5c:86: 62:89:58:09:85:02:a1:7f:69:89:95:ca:59:9f:d7: 73:c2:84:ca:71:57:08:29:c3:a6:b7:46:d6:4d:70: 4e:98:af:20:47:ac:79:9b:db:05:c8:f9:aa:59:37: 91:2d:24:94:ca:67:3a:fd:b5:94:ed:e7:7b:64:b0: ba:7d:ca:ef:be:68:22:08:4a:9d:51:07:8e:bd:64: 03:59:06:53:71:10:85:41:6e:07:4f:b4:bc:82:99: 8c:2b:6f:15:be:ff:d3:03:5f:b3:49:1f:87:09:b7: f4:72:a8:49:20:ae:ff:81:b7:db:a2:13:93:a3:c3: 18:0e:56:2f:06:7e:ff:bb:6a:b9:b5:4e:68:35:9e: 2a:f6:67:c1:27:b7:b3:f7:0d:02:de:94:f6:8c:05: b4:02:6d:6b:28:96:d6:19:a6:52:b7:70:25:bb:25: 93:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:99:09:64:05:83:12:45:16:90:50:6B:65:93:B1:6D:41:76:F2:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:42:80:9d:45:9f:74:c0:6d:82:fa:cf:d2:9d:ac:75:a8:6c: b0:ed:7b:69:b0:3e:75:97:7b:c9:81:e1:44:c0:0e:d0:0e:eb: 11:61:8b:9b:b8:13:c9:7b:34:7d:f1:84:67:e0:6c:11:b8:2a: ba:c0:0e:e9:08:8a:dd:f5:87:81:c9:a9:55:06:0e:0d:82:4b: 9d:08:47:d2:86:df:b2:a3:74:6f:2e:ec:2d:20:9d:74:fb:33: ea:32:37:72:2d:94:ea:9f:b0:4e:92:9a:86:c7:2f:1b:19:23: b2:8a:2d:82:fa:f6:c7:51:20:3a:49:01:02:5c:82:66:44:79: 76:a0:27:57:a5:b7:4e:46:65:fa:fe:c5:63:58:1b:4d:0d:b0: 57:9a:14:c4:8c:15:26:11:eb:ef:26:0f:c5:36:8c:97:e7:73: 8b:7b:61:c5:51:53:42:d8:14:52:ff:a4:56:7b:a5:1d:34:d5: ed:47:cb:62:87:0e:1a:64:07:3a:3b:24:6f:e3:cd:83:d7:51: e6:3c:89:2a:26:55:05:be:b3:c5:49:df:9f:8b:49:fd:ac:d2: 5f:ba:14:a2:97:50:fb:64:76:61:3a:7f:b3:e9:84:ea:be:62: 54:e6:6f:af:9e:63:e0:d9:62:a9:56:7c:1f:35:90:2c:12:6a: f7:68:3b:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuvslvrh7EFxQEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTYyYWIzYzUtYTU5ZS00MmRmLTljOTgtNWY1NmU2NWNhMzkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9Ti1yO94MXbzGARW06b6ryEPobr1S2w+75PT +k5l0gKCZ5I8tLXSsKCewWq4oj5anBiXcORPKLb45Z6JJqWh8bDU7k+HEgu4GOQp rAZrvqMBpPIzomFQXIZiiVgJhQKhf2mJlcpZn9dzwoTKcVcIKcOmt0bWTXBOmK8g R6x5m9sFyPmqWTeRLSSUymc6/bWU7ed7ZLC6fcrvvmgiCEqdUQeOvWQDWQZTcRCF QW4HT7S8gpmMK28Vvv/TA1+zSR+HCbf0cqhJIK7/gbfbohOTo8MYDlYvBn7/u2q5 tU5oNZ4q9mfBJ7ez9w0C3pT2jAW0Am1rKJbWGaZSt3AluyWTuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEiZCWQFgxJFFpBQa2WTsW1BdvJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBiM2JkMWMtYTc1NS0z M2I4LThlMTItMjBjNmQ2ZTFmOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANhCgJ1Fn3TAbYL6z9KdrHWobLDte2mwPnWXe8mB4UTADtAO6xFhi5u4 E8l7NH3xhGfgbBG4KrrADukIit31h4HJqVUGDg2CS50IR9KG37KjdG8u7C0gnXT7 M+oyN3ItlOqfsE6SmobHLxsZI7KKLYL69sdRIDpJAQJcgmZEeXagJ1elt05GZfr+ xWNYG00NsFeaFMSMFSYR6+8mD8U2jJfnc4t7YcVRU0LYFFL/pFZ7pR001e1Hy2KH DhpkBzo7JG/jzYPXUeY8iSomVQW+s8VJ35+LSf2s0l+6FKKXUPtkdmE6f7PphOq+ YlTmb6+eY+DZYqlWfB81kCwSavdoO1Q= -----END CERTIFICATE-----Generated at Sun Apr 27 11:48:17 2025 by rpki-client