$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/689ae062-12a3-3651-9b92-e11092c02d58.roa File: 689ae062-12a3-3651-9b92-e11092c02d58.roa (raw, json) Hash identifier: AcdOvzjCSUzO+ycEumYuMxR+5TSImhZqvTLLUaAUKjM= Subject key identifier: 38:70:5C:FA:44:04:4B:32:86:B9:C3:81:EE:83:E5:0E:C7:A7:98:27 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5FDACA9A10A7D3F68E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/689ae062-12a3-3651-9b92-e11092c02d58.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.113.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5f:da:ca:9a:10:a7:d3:f6:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=487ae4d3-01fa-4fef-8d58-39befcce7e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b3:33:de:c9:11:ce:fe:f4:f8:5c:67:58:88: 07:c7:a1:bf:a9:c0:0e:fb:43:39:a8:15:2c:09:96: f2:9b:f2:9a:f4:a2:d4:70:3e:dd:72:b5:1e:c8:01: c2:54:cf:ca:48:af:c2:58:b2:ad:1e:14:b9:3b:ef: 9b:db:a4:0d:bb:ba:4a:93:8d:61:d9:c4:c8:1b:fb: df:16:56:e0:7b:53:11:f2:38:7e:28:ed:9c:b5:d9: 82:34:b7:b6:cf:00:8e:5e:be:58:66:5b:b3:25:54: 62:1b:22:ed:0f:0f:17:28:37:99:8d:7b:c5:92:0e: 53:bb:61:3b:af:a0:9a:2e:3e:68:9d:d3:b1:90:79: fb:2c:37:7f:b4:5b:1b:c3:7d:07:bf:98:d1:a0:ba: 15:8d:59:5a:44:76:25:0b:f2:c0:04:df:52:46:27: 14:a7:29:af:12:db:63:0d:f2:9d:d9:04:72:eb:60: c1:ce:78:4e:f4:d3:7d:bc:b8:fd:6e:2a:02:b4:fc: 5a:34:84:c9:a3:6e:22:94:9c:60:dc:5f:c7:95:3b: 4b:f7:29:69:83:57:ac:87:55:ee:9e:ef:12:bb:4b: e7:fc:63:b6:0d:b3:e3:39:21:41:32:9b:79:b0:4c: d6:33:ed:dd:88:fa:ae:ef:8e:e4:85:38:4b:cc:f1: b5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:70:5C:FA:44:04:4B:32:86:B9:C3:81:EE:83:E5:0E:C7:A7:98:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/689ae062-12a3-3651-9b92-e11092c02d58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.113.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:43:1e:ff:ef:bd:5c:51:b9:7b:a9:a9:45:49:cb:c8:94:03: 92:19:b5:57:e3:32:7c:b4:fd:4e:d5:44:36:2f:c1:07:88:ee: 3e:e9:cc:63:fa:c4:00:ad:98:fc:90:8c:04:3e:9b:e8:56:66: 17:85:fb:b8:17:cd:50:40:a5:d5:e7:f2:4e:e3:db:ec:d1:20: 2f:07:d7:fc:cd:21:18:a7:85:1c:d5:1f:b6:64:5f:10:dd:22: 76:de:f9:cb:83:d9:d5:19:68:0c:8d:e1:ed:0e:02:f6:c2:33: d4:7d:d0:1f:a6:53:0f:23:29:6c:28:72:27:64:a8:2f:b9:bd: c4:e6:b5:d0:df:6d:10:20:e6:67:1a:64:f5:4a:24:5d:cb:3f: 22:51:2d:b7:80:15:c4:53:65:c9:57:c3:de:8a:19:d7:b3:87: 7a:56:c9:4e:83:ee:c0:dd:b3:ec:51:b3:37:d5:34:e0:e3:63: 38:cc:d3:b6:c5:4e:4a:58:29:bd:58:be:42:c1:76:8d:6a:6a: 76:7b:0e:4b:df:e0:54:18:d4:10:69:6d:e3:1d:4f:65:67:a0: 16:eb:d5:c5:5b:17:45:8f:a8:40:7c:b8:5d:62:be:0e:bc:73: 6e:fb:5d:93:c2:84:27:bd:7d:d7:50:f6:31:b8:bd:2c:61:f4: dd:02:f4:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul/aypoQp9P2jgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDg3YWU0ZDMtMDFmYS00ZmVmLThkNTgtMzliZWZjY2U3ZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorMz3skRzv70+FxnWIgHx6G/qcAO+0M5qBUs CZbym/Ka9KLUcD7dcrUeyAHCVM/KSK/CWLKtHhS5O++b26QNu7pKk41h2cTIG/vf Flbge1MR8jh+KO2ctdmCNLe2zwCOXr5YZluzJVRiGyLtDw8XKDeZjXvFkg5Tu2E7 r6CaLj5ondOxkHn7LDd/tFsbw30Hv5jRoLoVjVlaRHYlC/LABN9SRicUpymvEttj DfKd2QRy62DBznhO9NN9vLj9bioCtPxaNITJo24ilJxg3F/HlTtL9ylpg1esh1Xu nu8Su0vn/GO2DbPjOSFBMpt5sEzWM+3diPqu747khThLzPG1/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDhwXPpEBEsyhrnDge6D5Q7Hp5gnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjg5YWUwNjItMTJhMy0z NjUxLTliOTItZTExMDkyYzAyZDU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpDHv/vvVxRuXupqUVJy8iUA5IZtVfjMny0/U7VRDYvwQeI7j7pzGP6 xACtmPyQjAQ+m+hWZheF+7gXzVBApdXn8k7j2+zRIC8H1/zNIRinhRzVH7ZkXxDd Inbe+cuD2dUZaAyN4e0OAvbCM9R90B+mUw8jKWwocidkqC+5vcTmtdDfbRAg5mca ZPVKJF3LPyJRLbeAFcRTZclXw96KGdezh3pWyU6D7sDds+xRszfVNODjYzjM07bF TkpYKb1YvkLBdo1qanZ7Dkvf4FQY1BBpbeMdT2VnoBbr1cVbF0WPqEB8uF1ivg68 c277XZPChCe9fddQ9jG4vSxh9N0C9Jc= -----END CERTIFICATE-----Generated at Tue Apr 29 00:36:33 2025 by rpki-client