$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa File: 57b2d317-a413-3065-a331-165b9348609d.roa (raw, json) Hash identifier: iTRjRuh3rUQqkHtS/PgnRi2c9fA6nEx3ZCQ6laj9W4c= Subject key identifier: 87:3B:1D:EC:CD:61:8C:79:5D:3D:59:6B:74:09:B4:12:47:FD:14:7F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841199457E4C56B1CE31B280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 40306 IP address blocks: 72.173.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:99:45:7e:4c:56:b1:ce:31:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c50af51f-9fca-44df-9bde-3b30513cb0f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:08:54:4e:c3:21:d1:c8:21:83:15:bb:5a:2b: c8:69:9e:4d:13:5d:80:30:37:8f:e9:94:ca:02:92: 2c:96:c3:51:63:27:8f:30:b4:00:66:e5:71:c5:8a: 02:3c:fb:14:36:39:a2:92:a0:a2:f5:1f:03:9b:36: b2:59:a6:0d:8d:3f:86:40:11:64:92:ab:fb:cf:64: e6:64:07:78:38:b6:96:8f:ca:52:99:f2:d6:d4:d3: f1:34:b7:e1:37:d5:e6:ef:0b:d5:d1:fa:c8:e9:9d: ca:a1:db:c1:ef:c5:b3:28:79:78:c3:3a:ae:c8:cf: 39:76:9b:87:f7:27:4c:f8:aa:9f:e6:c5:2b:e0:3c: 47:55:17:db:a7:7e:7a:3a:39:66:04:40:f6:40:88: c0:b1:66:c0:88:e7:ca:65:73:42:c9:01:05:f6:77: ee:96:0a:8b:9c:ac:07:7f:c6:b8:47:a5:e6:78:42: 77:15:f0:95:93:45:7d:66:1e:aa:9c:0c:f0:3b:f7: 28:31:6e:72:93:4e:ee:dc:16:e8:2e:47:b4:9b:8c: 01:c0:77:0b:e4:cb:86:24:bc:9e:fe:87:27:95:e6: ff:5f:2e:62:ae:4f:23:a6:1f:70:b9:c0:d2:5c:bd: e2:1a:7b:4a:1d:3e:47:dd:be:c7:dd:1b:8f:dd:63: 7a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:3B:1D:EC:CD:61:8C:79:5D:3D:59:6B:74:09:B4:12:47:FD:14:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:7d:36:5a:5e:09:ce:4b:21:5a:79:76:1d:15:e8:85:75:9e: a3:29:01:27:33:5c:e2:98:1a:63:99:ce:d4:93:08:82:8d:8d: ff:67:53:f8:dc:9a:45:9b:24:4a:72:9a:5a:c4:d3:6b:70:1d: 99:7e:c1:6c:f4:12:9c:9b:17:74:7e:4e:8b:48:b4:a9:fa:1b: 3e:81:46:83:d5:85:3d:1a:88:6f:9b:4e:16:19:71:20:7d:b0: 36:87:9e:42:99:40:de:b6:8e:38:fb:d6:40:e8:e3:da:b8:a0: f8:92:ed:e2:d3:ba:60:c7:b4:c9:45:60:eb:42:5e:8a:af:31: 6b:21:63:ce:7e:52:09:fe:35:a6:74:74:00:7e:45:cc:75:44: 5d:2c:c7:5b:93:45:d1:37:60:96:ff:00:e4:01:72:d7:02:db: 28:0f:98:4e:f0:1b:52:fe:61:b6:de:a1:4f:22:55:d9:a2:0e: 4d:26:6a:c3:e4:c0:22:44:c5:06:b0:b8:9f:26:96:97:d9:d2: 98:75:96:f6:f6:fc:d2:88:cd:66:bc:1f:5f:67:33:7e:a1:ed: 28:b5:85:08:ea:a8:82:15:2c:59:9e:3a:f1:bf:82:6b:ab:20: a8:a7:be:ff:8e:5d:c4:ba:4a:33:a3:02:c9:a8:a5:72:84:9e: c3:be:10:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEZlFfkxWsc4xsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzUwYWY1MWYtOWZjYS00NGRmLTliZGUtM2IzMDUxM2NiMGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQhUTsMh0cghgxW7WivIaZ5NE12AMDeP6ZTK ApIslsNRYyePMLQAZuVxxYoCPPsUNjmikqCi9R8DmzayWaYNjT+GQBFkkqv7z2Tm ZAd4OLaWj8pSmfLW1NPxNLfhN9Xm7wvV0frI6Z3KodvB78WzKHl4wzquyM85dpuH 9ydM+Kqf5sUr4DxHVRfbp356OjlmBED2QIjAsWbAiOfKZXNCyQEF9nfulgqLnKwH f8a4R6XmeEJ3FfCVk0V9Zh6qnAzwO/coMW5yk07u3BboLke0m4wBwHcL5MuGJLye /ocnleb/Xy5irk8jph9wucDSXL3iGntKHT5H3b7H3RuP3WN6/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIc7HezNYYx5XT1Za3QJtBJH/RR/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTdiMmQzMTctYTQxMy0z MDY1LWEzMzEtMTY1YjkzNDg2MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGt9NlpeCc5LIVp5dh0V6IV1nqMpASczXOKYGmOZztSTCIKNjf9nU/jc mkWbJEpymlrE02twHZl+wWz0EpybF3R+TotItKn6Gz6BRoPVhT0aiG+bThYZcSB9 sDaHnkKZQN62jjj71kDo49q4oPiS7eLTumDHtMlFYOtCXoqvMWshY85+Ugn+NaZ0 dAB+Rcx1RF0sx1uTRdE3YJb/AOQBctcC2ygPmE7wG1L+YbbeoU8iVdmiDk0masPk wCJExQawuJ8mlpfZ0ph1lvb2/NKIzWa8H19nM36h7Si1hQjqqIIVLFmeOvG/gmur IKinvv+OXcS6SjOjAsmopXKEnsO+EIQ= -----END CERTIFICATE-----Generated at Wed Aug 6 19:35:57 2025 by rpki-client