$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a3a1b6d-0f7e-3b08-b73b-7358a749b90f.roa File: 5a3a1b6d-0f7e-3b08-b73b-7358a749b90f.roa (raw, json) Hash identifier: w6T52PaYgi7CbPsMO4zIObxm6w2wKIm6HZQLljctjX8= Subject key identifier: 30:B2:67:6B:8D:6C:63:A7:36:83:08:6D:6E:18:58:65:16:72:FE:9E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEC19924835BE6F50A0D8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a3a1b6d-0f7e-3b08-b73b-7358a749b90f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.255.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ec:19:92:48:35:be:6f:50:a0:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b2dc507d-580e-4f06-ab48-aa1f4dc5ce4a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:eb:30:c5:8a:3f:17:54:93:38:db:e6:eb:19: da:b3:cb:47:e1:b7:17:20:88:60:e2:10:61:bd:98: 1a:73:18:a5:00:cb:ce:3d:1e:c5:0b:75:2a:1e:6a: 2a:70:35:a2:d4:3f:3e:26:85:b0:07:0b:69:47:d2: 17:cf:e9:fe:22:27:7b:31:b8:73:0d:fa:b3:f5:06: 77:f8:b3:53:f0:27:15:8b:ff:83:a8:78:69:ed:2a: 36:8c:9c:4c:9f:b2:29:ee:82:78:48:8d:e4:e5:33: 05:c0:f1:16:a1:28:4b:79:4f:35:50:00:16:25:3d: b8:c2:ca:5b:9b:36:a4:53:46:dd:11:72:e7:b1:d1: 02:17:93:27:70:a6:b0:aa:53:af:94:ab:9c:80:75: 97:29:ea:7d:1c:17:59:e7:b9:17:71:bc:39:0f:40: 24:c6:19:c9:d7:50:0d:2c:40:9f:a4:da:8e:bd:51: 93:4f:96:3e:b6:a1:d0:85:3c:c3:66:23:88:66:a6: 12:b1:26:3f:ce:41:c8:51:d1:5b:09:62:d2:54:91: 96:0a:8b:e2:61:fb:fb:25:9f:87:51:cd:6c:fe:35: 03:84:18:08:f6:ca:f9:7b:5d:ee:7f:4e:a8:68:64: 94:b9:d8:e4:4d:a8:b9:77:f2:49:de:54:ed:33:1b: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:B2:67:6B:8D:6C:63:A7:36:83:08:6D:6E:18:58:65:16:72:FE:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a3a1b6d-0f7e-3b08-b73b-7358a749b90f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.255.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:7d:8a:a7:07:34:dd:ca:3d:8e:5f:b5:23:47:ae:bf:67:fa: 78:24:48:5c:80:e1:44:96:d4:b9:57:20:3d:d5:a6:02:25:fb: 0b:b3:6a:e9:08:89:06:81:ad:18:25:7b:86:eb:96:bc:b6:16: b3:78:d0:04:8f:f2:af:3e:81:3d:2a:f3:59:5d:13:8d:c4:e7: e0:99:ca:b5:f0:47:61:1b:ea:03:81:29:bf:63:0e:0e:2b:c1: c8:0b:c8:5c:09:f5:ac:f7:6e:be:28:ff:3d:3b:6f:ff:0a:35: 29:ca:20:fe:f8:2f:2b:b3:f1:72:46:fa:93:f7:6c:52:da:5f: ff:58:b8:d3:3e:e0:d3:86:59:1d:4b:40:d2:cd:64:45:ac:8d: 40:5e:fd:25:d5:f4:2c:f0:6d:72:f5:b7:aa:b9:46:49:3b:3e: 04:e2:13:63:b1:7b:be:9d:f2:4a:96:11:f1:26:5c:18:e4:82: da:7a:03:f7:ba:72:64:13:de:30:36:fc:bd:8c:e9:a6:c3:38: ac:ba:f7:33:e0:17:fd:ec:d4:4a:d3:0b:6b:c0:79:05:e4:a9: c5:d5:2a:20:47:7b:ce:3d:60:b9:72:57:d7:62:8e:2b:96:63: af:e9:9d:6a:1e:2e:4b:ed:90:9e:36:d2:dd:c3:85:97:29:f0: e0:06:21:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuwZkkg1vm9QoNgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjJkYzUwN2QtNTgwZS00ZjA2LWFiNDgtYWExZjRkYzVjZTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeswxYo/F1STONvm6xnas8tH4bcXIIhg4hBh vZgacxilAMvOPR7FC3UqHmoqcDWi1D8+JoWwBwtpR9IXz+n+Iid7MbhzDfqz9QZ3 +LNT8CcVi/+DqHhp7So2jJxMn7Ip7oJ4SI3k5TMFwPEWoShLeU81UAAWJT24wspb mzakU0bdEXLnsdECF5MncKawqlOvlKucgHWXKep9HBdZ57kXcbw5D0AkxhnJ11AN LECfpNqOvVGTT5Y+tqHQhTzDZiOIZqYSsSY/zkHIUdFbCWLSVJGWCoviYfv7JZ+H Uc1s/jUDhBgI9sr5e13uf06oaGSUudjkTai5d/JJ3lTtMxuHyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCyZ2uNbGOnNoMIbW4YWGUWcv6eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWEzYTFiNmQtMGY3ZS0z YjA4LWI3M2ItNzM1OGE3NDliOTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK19iqcHNN3KPY5ftSNHrr9n+ngkSFyA4USW1LlXID3VpgIl+wuzaukI iQaBrRgle4brlry2FrN40ASP8q8+gT0q81ldE43E5+CZyrXwR2Eb6gOBKb9jDg4r wcgLyFwJ9az3br4o/z07b/8KNSnKIP74Lyuz8XJG+pP3bFLaX/9YuNM+4NOGWR1L QNLNZEWsjUBe/SXV9CzwbXL1t6q5Rkk7PgTiE2Oxe76d8kqWEfEmXBjkgtp6A/e6 cmQT3jA2/L2M6abDOKy69zPgF/3s1ErTC2vAeQXkqcXVKiBHe849YLlyV9dijiuW Y6/pnWoeLkvtkJ420t3DhZcp8OAGIUI= -----END CERTIFICATE-----Generated at Mon Apr 28 00:37:36 2025 by rpki-client