$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa File: 691bed57-da0a-3baf-ad9d-45ddf8c78439.roa (raw, json) Hash identifier: Ops5p1TjxIludluMkLwa+vCfwoqKs5ZKW9wuYo151D4= Subject key identifier: A5:AD:F7:39:A2:E6:58:63:11:E8:3D:E3:40:F0:F7:3D:A9:B9:34:12 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA629F52BE74F15EDA4980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:9f:52:be:74:f1:5e:da:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=92863027-e105-45e3-946a-70dc7b419791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:69:e1:03:e0:3c:e9:9f:c0:f2:4a:98:0e:98: bc:50:e4:f4:0e:60:9c:c3:c6:79:c2:23:10:b7:18: 9a:38:a8:70:99:75:cd:9e:79:a0:24:26:a5:e3:b3: fb:9b:81:ed:48:dc:4e:98:92:3a:1e:d4:12:23:ad: d7:9b:0a:d0:a6:04:4b:3b:6d:45:61:98:7d:5f:9b: 01:df:54:c5:68:50:41:42:63:b1:69:c8:44:cd:ed: b9:d1:04:54:66:84:5e:b1:ff:72:c5:2e:b8:ee:68: 32:3f:1e:7e:c8:17:e1:7b:f5:08:da:2e:dd:5d:eb: 30:de:34:b1:5c:2c:e6:ec:d4:f0:a8:5a:a0:7b:58: fe:6c:62:44:9c:8f:5c:4f:f8:cb:1f:69:fe:ea:c9: 7e:3e:ff:27:67:e4:86:e8:7f:ee:ca:56:b0:20:2c: 87:42:23:3c:a2:25:a2:10:53:7f:01:53:91:80:d0: 81:2f:1e:9a:b9:13:23:09:bb:6d:b3:80:9d:29:ac: dd:51:15:df:f0:3e:b4:ab:07:3b:51:4d:fc:7b:b1: 04:4f:e0:d0:9f:0e:e5:25:7d:4a:1e:e6:cc:41:3a: b0:e5:37:5c:bb:e7:56:a2:df:0d:16:fb:d7:95:65: 69:df:3d:75:86:cb:4e:a5:e2:94:88:c6:55:e1:b2: a2:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:AD:F7:39:A2:E6:58:63:11:E8:3D:E3:40:F0:F7:3D:A9:B9:34:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:b9:fd:cd:84:77:a8:2b:04:cd:77:0d:6f:a1:d4:5c:a6:56: 62:e8:af:d7:25:ba:f7:68:a4:6d:95:78:5b:8b:df:80:68:e5: 84:6f:9e:7b:2a:f1:ef:e8:61:d6:c5:cb:dd:e1:1a:ea:26:45: 1f:22:31:92:d2:26:d2:f4:4f:56:70:99:a3:75:6a:6c:4e:e3: 9a:31:cc:dd:fc:f5:b6:1f:85:f4:40:46:e7:08:8b:81:35:ea: 50:5d:c2:9e:bc:5a:2a:da:fd:ae:22:e9:c4:e6:b6:0a:43:7b: e0:ff:9c:2e:d9:3f:d8:4e:75:8d:4d:9b:56:d1:86:d6:55:19: 2a:03:b4:10:44:9d:a8:8a:79:ac:e0:0f:89:93:fa:1a:1b:2d: 84:3e:c3:62:db:21:3f:8b:04:d9:9e:97:b9:4a:55:a7:41:d0: e2:bf:14:7f:db:dd:58:bc:f3:c5:41:5d:d0:47:0a:4f:81:65: 3f:ce:08:34:73:79:c4:5f:cb:a2:28:ec:e9:26:82:82:47:93: 6b:ee:a9:93:f5:da:b7:b5:ac:63:2e:a9:5a:77:73:9c:6f:c0: 31:77:c0:67:2b:b5:d3:0c:0b:d8:11:3f:90:5e:80:64:3d:39: a5:b8:4e:35:6c:96:ab:c2:f2:2a:96:2e:b9:a3:be:37:0a:65: 9a:b6:73:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumKfUr508V7aSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTI4NjMwMjctZTEwNS00NWUzLTk0NmEtNzBkYzdiNDE5NzkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA22nhA+A86Z/A8kqYDpi8UOT0DmCcw8Z5wiMQ txiaOKhwmXXNnnmgJCal47P7m4HtSNxOmJI6HtQSI63XmwrQpgRLO21FYZh9X5sB 31TFaFBBQmOxachEze250QRUZoResf9yxS647mgyPx5+yBfhe/UI2i7dXesw3jSx XCzm7NTwqFqge1j+bGJEnI9cT/jLH2n+6sl+Pv8nZ+SG6H/uylawICyHQiM8oiWi EFN/AVORgNCBLx6auRMjCbtts4CdKazdURXf8D60qwc7UU38e7EET+DQnw7lJX1K HubMQTqw5Tdcu+dWot8NFvvXlWVp3z11hstOpeKUiMZV4bKi4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKWt9zmi5lhjEeg940Dw9z2puTQSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjkxYmVkNTctZGEwYS0z YmFmLWFkOWQtNDVkZGY4Yzc4NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKS5/c2Ed6grBM13DW+h1FymVmLor9cluvdopG2VeFuL34Bo5YRvnnsq 8e/oYdbFy93hGuomRR8iMZLSJtL0T1ZwmaN1amxO45oxzN389bYfhfRARucIi4E1 6lBdwp68Wira/a4i6cTmtgpDe+D/nC7ZP9hOdY1Nm1bRhtZVGSoDtBBEnaiKeazg D4mT+hobLYQ+w2LbIT+LBNmel7lKVadB0OK/FH/b3Vi888VBXdBHCk+BZT/OCDRz ecRfy6Io7OkmgoJHk2vuqZP12re1rGMuqVp3c5xvwDF3wGcrtdMMC9gRP5BegGQ9 OaW4TjVslqvC8iqWLrmjvjcKZZq2c+0= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:39 2025 by rpki-client