$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f9802f6-679d-3371-a00f-20697a360739.roa File: 5f9802f6-679d-3371-a00f-20697a360739.roa (raw, json) Hash identifier: 3Pc7kDV4ysFVkC3It/vdZ4YAzoJLekwy4JRj9yYitDw= Subject key identifier: 41:5A:00:96:C4:39:F9:B5:11:D2:0E:4E:47:69:DD:6B:CE:19:FF:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5F719A920D1076392620 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f9802f6-679d-3371-a00f-20697a360739.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.101.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5f:71:9a:92:0d:10:76:39:26:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5746c3e3-5bac-4a2c-a81b-eb5c377eb1d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:a7:01:6d:ba:da:78:52:64:a2:84:91:85:ed: 67:c0:1b:07:60:5c:41:cb:8d:0c:e7:42:6b:5e:4e: 39:8e:6a:e3:fa:b7:bf:d8:ee:be:b6:47:68:0a:89: 5c:a0:0d:b7:2a:6a:ff:36:dc:91:97:70:71:18:a2: 49:0f:35:9c:ce:4f:86:2b:2d:5e:30:64:61:7f:e9: 33:ab:5c:43:69:97:b2:13:53:c2:8a:60:f2:e2:9e: 0b:e6:f1:cf:88:fc:66:39:ea:fb:78:d6:a5:fb:f6: 60:23:81:d6:db:e1:6c:5e:38:eb:c3:5b:62:cd:db: 6a:9e:77:41:24:f4:5d:27:b5:1d:ba:cc:26:b0:d3: 82:64:ec:23:10:49:45:06:cc:28:ec:48:92:9b:7e: ca:95:d5:b6:3c:87:35:06:02:da:ec:d1:31:19:d2: d9:99:b9:3f:31:af:3c:8d:57:ac:eb:b8:88:82:59: b2:e8:a5:df:26:b8:ab:1e:c2:51:9d:6f:a5:77:4a: b3:6d:a5:b7:1b:24:f1:8a:60:e5:e3:d6:84:e4:72: e1:ef:02:10:4d:5f:7b:11:c9:dd:60:22:c0:b3:1b: ce:96:f2:71:46:13:e5:72:60:1d:6c:3d:95:f0:ab: 61:eb:73:8e:e1:a9:40:a8:8d:bc:f0:25:23:54:16: 0a:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:5A:00:96:C4:39:F9:B5:11:D2:0E:4E:47:69:DD:6B:CE:19:FF:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f9802f6-679d-3371-a00f-20697a360739.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.101.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b8:a9:10:07:78:98:ea:13:11:9d:c8:4b:15:3d:31:fc:e9: 86:f8:55:6b:1c:c9:25:a8:3a:b9:98:e0:95:2b:75:b3:af:ca: a9:f9:05:ef:08:b5:54:38:56:2c:6a:26:e1:6f:2c:79:eb:6d: f0:4b:4d:46:a8:32:2b:d9:a4:bb:11:0c:15:5a:6f:e6:b6:40: 62:2e:12:29:ba:f3:c1:79:51:3e:43:1a:a8:77:08:06:80:6f: 17:16:c9:ad:21:01:be:a8:a2:0b:aa:09:46:a2:e4:f4:06:46: 15:65:f3:bb:a7:e5:b7:e7:32:da:0c:34:98:03:1e:1a:0e:b0: f1:c9:b4:34:62:a4:3c:e9:21:55:31:3d:4e:11:25:e1:3f:10: ed:86:ec:8c:a8:35:03:5c:38:87:08:0b:0a:5e:03:d0:e8:30: 57:83:aa:e0:be:24:64:90:c6:a4:0a:83:29:0c:8d:f6:5e:4a: 56:75:58:7e:52:cd:c7:20:53:c9:32:5c:88:96:a5:53:ed:ec: 9b:f9:71:39:13:9f:0b:3c:26:5b:07:35:32:f3:ee:6f:94:a3: 66:57:f6:e3:1f:72:15:94:c2:31:f4:1a:ec:15:4f:a8:a2:49: 1e:9e:25:7a:91:5c:84:6f:fa:e4:3d:a1:a9:42:f6:d0:db:26: 6e:8d:5a:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul9xmpINEHY5JiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTc0NmMzZTMtNWJhYy00YTJjLWE4MWItZWI1YzM3N2ViMWQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuacBbbraeFJkooSRhe1nwBsHYFxBy40M50Jr Xk45jmrj+re/2O6+tkdoColcoA23Kmr/NtyRl3BxGKJJDzWczk+GKy1eMGRhf+kz q1xDaZeyE1PCimDy4p4L5vHPiPxmOer7eNal+/ZgI4HW2+FsXjjrw1tizdtqnndB JPRdJ7UduswmsNOCZOwjEElFBswo7EiSm37KldW2PIc1BgLa7NExGdLZmbk/Ma88 jVes67iIglmy6KXfJrirHsJRnW+ld0qzbaW3GyTximDl49aE5HLh7wIQTV97Ecnd YCLAsxvOlvJxRhPlcmAdbD2V8Kth63OO4alAqI288CUjVBYKdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEFaAJbEOfm1EdIOTkdp3WvOGf8/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY5ODAyZjYtNjc5ZC0z MzcxLWEwMGYtMjA2OTdhMzYwNzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS4qRAHeJjqExGdyEsVPTH86Yb4VWscySWoOrmY4JUrdbOvyqn5Be8I tVQ4VixqJuFvLHnrbfBLTUaoMivZpLsRDBVab+a2QGIuEim688F5UT5DGqh3CAaA bxcWya0hAb6ooguqCUai5PQGRhVl87un5bfnMtoMNJgDHhoOsPHJtDRipDzpIVUx PU4RJeE/EO2G7IyoNQNcOIcICwpeA9DoMFeDquC+JGSQxqQKgykMjfZeSlZ1WH5S zccgU8kyXIiWpVPt7Jv5cTkTnws8JlsHNTLz7m+Uo2ZX9uMfchWUwjH0GuwVT6ii SR6eJXqRXIRv+uQ9oalC9tDbJm6NWug= -----END CERTIFICATE-----Generated at Sun Apr 27 16:09:46 2025 by rpki-client