$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa File: 5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa (raw, json) Hash identifier: cN5nvQBbA7WVOr5CVdEXVbDr4/1k/JUApMiQGMA92X0= Subject key identifier: 4E:D7:26:E4:55:E2:01:08:A8:1F:67:2C:D1:4E:7D:C3:15:32:B7:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE73BD4377B5ABE6693A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e7:3b:d4:37:7b:5a:be:66:93:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=534d7503-2c99-4f66-a2d6-53d79adb1be7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:fb:82:ab:53:af:c5:bb:7f:7c:22:77:48:b4: 4d:bd:fc:67:09:99:ee:ec:8c:34:17:ac:dc:c4:d8: 93:a6:de:eb:20:ff:97:dc:e4:ba:b8:35:55:25:5d: f0:b8:5c:56:b3:a2:12:ed:25:9e:ac:c7:36:cf:d0: c9:e1:61:95:3e:1e:9c:20:59:8d:f2:2b:dc:95:1b: 0b:e1:0e:72:c4:3a:b2:dc:65:85:49:43:0d:34:bf: ac:d5:15:0e:ee:45:22:78:4a:96:44:8e:38:dc:8f: 6e:fd:21:7c:ef:8f:34:45:ff:80:8d:8f:cb:5e:9b: 96:a9:2e:c3:09:62:75:63:af:87:4f:ee:21:36:4e: ce:bc:bb:ea:94:c3:b8:db:50:bb:27:f0:fe:19:f4: bc:f4:9c:21:02:53:44:0d:73:90:3e:40:f9:06:48: 73:52:75:02:66:4c:1a:44:9d:94:b8:ee:03:0f:7e: 8a:a7:6a:76:02:44:d3:08:94:e7:7d:d1:21:80:80: ff:9a:71:8b:c9:86:c7:0e:59:9d:f3:03:0e:58:89: 7d:24:c5:f6:03:8b:14:34:c6:fc:4e:c3:af:3f:43: ef:dd:38:1d:41:2d:e7:58:eb:96:1d:b7:ef:e1:16: 97:06:4a:ff:14:b8:14:0f:94:9e:2c:ef:ec:ed:f1: b7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:D7:26:E4:55:E2:01:08:A8:1F:67:2C:D1:4E:7D:C3:15:32:B7:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:11:52:e8:22:6a:89:da:4f:11:87:4f:75:af:36:08:19:08: 8f:72:23:48:9a:db:00:38:38:c0:e9:a3:9c:dc:63:a2:a4:f0: 45:9a:97:4e:b3:d0:12:74:72:d4:77:d1:61:9f:24:1b:7a:3a: 88:02:26:dc:02:47:a6:9a:a9:4b:f1:b7:01:ad:12:f6:ce:45: 3f:11:f4:62:15:c4:ac:dd:66:82:be:65:10:7d:da:04:74:e6: 8e:6a:d2:fb:19:2d:a7:00:f0:ce:a4:4b:06:01:3c:cf:aa:3e: 96:12:dc:36:7a:0d:f1:2b:e0:81:be:1a:c7:9e:da:9b:ce:c1: 13:46:1d:bf:91:62:74:4f:3a:77:14:35:cc:bf:1d:8d:07:00: dc:3f:21:5f:aa:1d:cc:cd:80:71:a8:87:a0:9d:22:b8:b9:6f: ee:1b:39:d3:f6:2f:66:b8:e0:39:df:e2:53:09:65:0d:15:0e: dd:06:59:bb:93:a2:dd:9c:ab:26:15:3e:d2:ff:d4:77:38:fa: 50:ed:e2:dd:ac:b8:c3:eb:29:46:9f:59:c7:aa:b0:1e:7f:0d: e7:46:76:a6:75:d9:a5:1e:a2:fe:0a:88:07:05:ec:89:c9:e6: 35:b4:86:21:44:7e:96:4b:23:1b:8b:83:33:53:25:d9:7f:94: 65:e9:29:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuc71Dd7Wr5mk6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTM0ZDc1MDMtMmM5OS00ZjY2LWEyZDYtNTNkNzlhZGIxYmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3/uCq1Ovxbt/fCJ3SLRNvfxnCZnu7Iw0F6zc xNiTpt7rIP+X3OS6uDVVJV3wuFxWs6IS7SWerMc2z9DJ4WGVPh6cIFmN8ivclRsL 4Q5yxDqy3GWFSUMNNL+s1RUO7kUieEqWRI443I9u/SF87480Rf+AjY/LXpuWqS7D CWJ1Y6+HT+4hNk7OvLvqlMO421C7J/D+GfS89JwhAlNEDXOQPkD5BkhzUnUCZkwa RJ2UuO4DD36Kp2p2AkTTCJTnfdEhgID/mnGLyYbHDlmd8wMOWIl9JMX2A4sUNMb8 TsOvP0Pv3TgdQS3nWOuWHbfv4RaXBkr/FLgUD5SeLO/s7fG3cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE7XJuRV4gEIqB9nLNFOfcMVMrcyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0ZDAzMjctNzhlNi0z OTNkLThkMGYtN2Q2YjNmZTYwMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMRUugiaonaTxGHT3WvNggZCI9yI0ia2wA4OMDpo5zcY6Kk8EWal06z 0BJ0ctR30WGfJBt6OogCJtwCR6aaqUvxtwGtEvbORT8R9GIVxKzdZoK+ZRB92gR0 5o5q0vsZLacA8M6kSwYBPM+qPpYS3DZ6DfEr4IG+Gsee2pvOwRNGHb+RYnRPOncU Ncy/HY0HANw/IV+qHczNgHGoh6CdIri5b+4bOdP2L2a44Dnf4lMJZQ0VDt0GWbuT ot2cqyYVPtL/1Hc4+lDt4t2suMPrKUafWceqsB5/DedGdqZ12aUeov4KiAcF7InJ 5jW0hiFEfpZLIxuLgzNTJdl/lGXpKVg= -----END CERTIFICATE-----Generated at Sun Apr 27 13:31:58 2025 by rpki-client