$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa File: 57b2d317-a413-3065-a331-165b9348609d.roa (raw, json) Hash identifier: F/y61QqgCzyN4CkkAs7/N39ph3gY/KDp9k9n+5GhJzU= Subject key identifier: 3B:33:D3:6F:4E:0F:01:56:CC:BC:6B:49:1B:A8:E3:BE:4C:39:2B:56 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADB941FEF0E96DCBD0D40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 72.173.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:db:94:1f:ef:0e:96:dc:bd:0d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2c4d3b64-aae3-480e-a1a9-91ec71edea28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:93:ee:b1:ee:e5:a6:f1:44:fb:2f:18:6a:b9: 28:b4:1f:4c:52:53:25:16:78:5f:fa:1c:29:9e:cb: 8e:16:97:aa:9f:db:e9:5e:53:61:15:3e:b3:37:74: f0:77:6f:59:1f:c4:c8:8b:3a:23:31:d1:8b:c2:2d: 61:63:8d:11:f4:95:fd:d7:77:ca:9d:84:0d:5b:d1: a0:6c:97:4a:06:0d:3a:48:e4:18:55:05:15:52:37: 6e:4f:9a:d5:90:39:3c:16:5a:c9:d1:f7:1e:85:7e: 4e:09:75:53:5a:c9:b4:dd:b4:cb:3c:c2:b3:48:1a: 8c:a9:5a:a3:d3:4d:72:43:4d:63:97:7a:5e:c8:b7: 79:41:0f:2d:ce:43:bf:46:a0:26:89:da:7b:5c:2e: b9:a9:9f:d8:2a:a6:96:bf:2e:cd:5f:01:6b:f0:bf: 86:22:76:3a:2e:7a:30:67:15:15:ce:13:14:21:c5: 3d:c4:0e:12:07:a9:f0:42:22:e8:a1:fe:44:91:bd: fa:06:b5:a7:b8:bc:f6:73:92:3b:96:c5:a3:3c:44: 8b:b1:db:6e:e2:5a:00:e9:b6:19:3d:bc:93:83:4d: 4a:23:95:f0:ec:e5:ad:19:e9:02:e7:8e:89:db:6c: 78:f4:41:c9:a7:7d:06:c8:8a:50:8f:49:ce:b4:d5: 93:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:33:D3:6F:4E:0F:01:56:CC:BC:6B:49:1B:A8:E3:BE:4C:39:2B:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:2b:a9:c1:ff:bf:6c:74:bc:ad:79:f1:cf:59:80:94:8c:80: c8:22:99:1a:00:d6:8a:c9:de:48:58:fc:f8:f1:f3:96:92:7c: a7:3f:0d:06:57:50:06:cc:26:15:33:13:77:a1:3a:4e:7c:3d: a0:12:95:87:ea:2a:9e:7b:7f:b7:1c:ac:53:6f:d0:c0:19:76: a0:d3:0f:8f:ba:30:91:bc:03:f1:6f:4e:3f:6c:7e:6f:86:fb: 82:6f:39:32:21:ab:09:e5:f0:db:b0:a4:0a:0f:9b:b4:9e:58: 3d:16:a6:77:da:46:fd:a4:1b:77:ab:9a:77:4f:83:17:f4:3a: 5f:09:c6:82:55:c9:23:32:e6:78:d0:92:0c:f1:aa:11:4e:9f: 2d:70:ae:95:6a:7d:58:69:7c:c9:99:1e:c6:5f:20:21:ba:bf: 3f:60:28:6c:2b:a9:57:c2:cd:a1:f9:43:b3:84:66:a0:ed:30: 16:9f:cd:8b:7a:88:47:3d:b0:f1:3e:a8:d6:5c:26:39:78:6e: 43:fd:54:28:8d:6d:1f:5b:87:e8:8f:76:9c:37:8c:e8:e9:66: 0a:46:17:f1:94:da:7b:b9:b6:1e:32:d3:bf:dc:6e:cc:a6:52: b8:ea:75:7f:a7:76:78:e2:62:77:8f:73:29:81:a7:07:51:c2: 1e:28:27:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutuUH+8Olty9DUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmM0ZDNiNjQtYWFlMy00ODBlLWExYTktOTFlYzcxZWRlYTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pPuse7lpvFE+y8YarkotB9MUlMlFnhf+hwp nsuOFpeqn9vpXlNhFT6zN3Twd29ZH8TIizojMdGLwi1hY40R9JX913fKnYQNW9Gg bJdKBg06SOQYVQUVUjduT5rVkDk8FlrJ0fcehX5OCXVTWsm03bTLPMKzSBqMqVqj 001yQ01jl3peyLd5QQ8tzkO/RqAmidp7XC65qZ/YKqaWvy7NXwFr8L+GInY6Lnow ZxUVzhMUIcU9xA4SB6nwQiLoof5Ekb36BrWnuLz2c5I7lsWjPESLsdtu4loA6bYZ PbyTg01KI5Xw7OWtGekC546J22x49EHJp30GyIpQj0nOtNWTgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsz029ODwFWzLxrSRuo475MOStWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTdiMmQzMTctYTQxMy0z MDY1LWEzMzEtMTY1YjkzNDg2MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUrqcH/v2x0vK158c9ZgJSMgMgimRoA1orJ3khY/Pjx85aSfKc/DQZX UAbMJhUzE3ehOk58PaASlYfqKp57f7ccrFNv0MAZdqDTD4+6MJG8A/FvTj9sfm+G +4JvOTIhqwnl8NuwpAoPm7SeWD0WpnfaRv2kG3ermndPgxf0Ol8JxoJVySMy5njQ kgzxqhFOny1wrpVqfVhpfMmZHsZfICG6vz9gKGwrqVfCzaH5Q7OEZqDtMBafzYt6 iEc9sPE+qNZcJjl4bkP9VCiNbR9bh+iPdpw3jOjpZgpGF/GU2nu5th4y07/cbsym UrjqdX+ndnjiYnePcymBpwdRwh4oJ0g= -----END CERTIFICATE-----Generated at Sun Apr 27 20:28:43 2025 by rpki-client