$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6db0fd68-bf62-3a32-a2c1-44eec156c850.roa File: 6db0fd68-bf62-3a32-a2c1-44eec156c850.roa (raw, json) Hash identifier: dTRckXF6R0aF3GWCAjYbUmQSODEomi+eEHRnb/F/hn4= Subject key identifier: FC:ED:F4:45:FB:56:76:7A:05:1B:60:77:5F:79:93:46:AE:D2:A7:C4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA6180849591C45B0D6DE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6db0fd68-bf62-3a32-a2c1-44eec156c850.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:61:80:84:95:91:c4:5b:0d:6d:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=e2866a47-03f9-448d-85b8-23e1635ce58f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:63:f6:b1:3e:ab:20:e2:e2:22:09:27:43:2d: a1:84:9b:12:29:4d:d6:7e:71:ff:ad:9e:4d:b7:08: 56:44:d6:66:7e:b6:74:d7:e7:11:5f:da:2a:41:9f: 2d:5c:17:93:2a:94:af:87:71:ca:38:c8:c5:4b:aa: 04:89:93:1b:20:1e:63:17:ff:dc:ba:02:bf:9a:90: aa:33:f8:f1:5f:ed:34:70:33:39:17:59:2b:fa:8a: 63:fa:13:a1:54:ae:9b:d4:3e:e9:cc:b2:c0:06:a9: ee:3f:df:39:d9:30:f2:e0:33:48:1e:2f:db:94:72: 44:fc:8e:26:a7:39:ce:19:cc:d0:18:60:f4:b1:9b: ae:35:8b:7f:dd:bb:10:0e:b8:03:fc:49:8e:9e:24: ac:94:3b:39:32:06:15:70:ef:1a:b0:58:46:2d:30: b7:c7:ad:fa:75:63:fd:40:b7:69:8e:cd:0e:7d:a9: c7:3d:c2:47:90:c7:26:b3:54:ab:a3:8e:bd:f2:a2: a1:51:3d:fd:89:6d:e5:6f:16:ce:89:e0:cb:c8:97: f6:79:98:89:67:9b:98:29:8b:ce:b5:17:06:81:de: f0:73:94:28:37:da:4d:81:cb:49:06:c1:b0:56:7a: 60:6b:c1:33:5f:e8:11:0e:a9:e5:5e:27:a7:37:79: 35:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:ED:F4:45:FB:56:76:7A:05:1B:60:77:5F:79:93:46:AE:D2:A7:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6db0fd68-bf62-3a32-a2c1-44eec156c850.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption be:02:d1:ab:be:fc:8c:93:1a:10:1f:95:50:9b:f1:89:ec:b7: e8:2c:bc:e4:fb:1c:dd:51:2e:6f:b7:39:04:91:2d:fe:bb:c4: ac:4a:c5:be:42:b7:a8:f8:46:6c:a1:ef:d2:51:2d:f5:8f:1f: ce:b8:27:ac:1a:39:71:3d:2c:22:df:10:b1:c4:92:86:73:21: c4:09:6f:41:05:12:85:70:dc:34:0c:0b:5c:87:2d:de:17:71: c1:ce:f1:d9:64:66:c3:98:d0:2d:e4:77:a5:57:dd:2a:0b:e4: d5:3c:c2:45:df:56:db:4b:77:6d:74:28:1b:39:84:c1:60:f2: 07:18:65:08:58:7a:50:45:52:9e:f4:3e:0e:1c:f3:db:56:8d: c7:3f:67:7c:d1:23:f5:5d:4d:c1:30:11:66:7e:5d:45:30:b9: 14:a8:6c:9f:ff:d8:a9:be:c7:0d:21:4b:53:fc:01:e6:2b:73: 12:fc:03:96:ec:d6:8e:7d:81:b3:8b:25:5c:e4:f5:f3:34:4c: 71:aa:39:90:ea:a3:ad:f7:e6:40:90:bb:3e:d3:b5:d5:46:aa: 96:20:88:dd:c8:ee:32:c2:5e:d5:f0:89:61:97:03:64:47:54: cd:58:59:11:a0:e8:95:83:2b:84:9e:d2:16:2e:38:8e:c9:be: de:70:9f:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumGAhJWRxFsNbeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZTI4NjZhNDctMDNmOS00NDhkLTg1YjgtMjNlMTYzNWNlNThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWP2sT6rIOLiIgknQy2hhJsSKU3WfnH/rZ5N twhWRNZmfrZ01+cRX9oqQZ8tXBeTKpSvh3HKOMjFS6oEiZMbIB5jF//cugK/mpCq M/jxX+00cDM5F1kr+opj+hOhVK6b1D7pzLLABqnuP9852TDy4DNIHi/blHJE/I4m pznOGczQGGD0sZuuNYt/3bsQDrgD/EmOniSslDs5MgYVcO8asFhGLTC3x636dWP9 QLdpjs0OfanHPcJHkMcms1Sro4698qKhUT39iW3lbxbOieDLyJf2eZiJZ5uYKYvO tRcGgd7wc5QoN9pNgctJBsGwVnpga8EzX+gRDqnlXienN3k1WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPzt9EX7VnZ6BRtgd195k0au0qfEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRiMGZkNjgtYmY2Mi0z YTMyLWEyYzEtNDRlZWMxNTZjODUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL4C0au+/IyTGhAflVCb8Ynst+gsvOT7HN1RLm+3OQSRLf67xKxKxb5C t6j4Rmyh79JRLfWPH864J6waOXE9LCLfELHEkoZzIcQJb0EFEoVw3DQMC1yHLd4X ccHO8dlkZsOY0C3kd6VX3SoL5NU8wkXfVttLd210KBs5hMFg8gcYZQhYelBFUp70 Pg4c89tWjcc/Z3zRI/VdTcEwEWZ+XUUwuRSobJ//2Km+xw0hS1P8AeYrcxL8A5bs 1o59gbOLJVzk9fM0THGqOZDqo6335kCQuz7TtdVGqpYgiN3I7jLCXtXwiWGXA2RH VM1YWRGg6JWDK4Se0hYuOI7Jvt5wnxQ= -----END CERTIFICATE-----Generated at Sun Apr 27 01:57:30 2025 by rpki-client