$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa File: 7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa (raw, json) Hash identifier: XzeMXKXM6Fw4P+FjCWoSwqAdrbLC3admKyE+YIu67AA= Subject key identifier: 78:24:D6:6C:B2:6E:3A:73:72:88:F8:E0:80:8C:B6:93:3F:48:C0:A6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5CED12FABF3045433080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5c:ed:12:fa:bf:30:45:43:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=96625e21-c8fa-44ad-b174-c69a700bf447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f5:f9:9d:53:22:f6:b6:c4:ff:45:86:8b:e5: a8:70:63:ea:6c:e7:ae:fe:4e:34:ad:24:88:9e:5b: 6d:b5:e8:ac:34:44:ac:c6:32:44:97:07:df:c4:b1: 42:fd:b9:7d:dd:a7:a7:95:e6:5e:52:63:65:46:1a: 36:ab:86:29:c6:0b:8c:0e:01:f9:fd:b7:99:bd:3c: 29:c6:30:6f:0d:51:8a:46:43:fd:9a:b4:d3:23:9a: bf:b3:2e:c3:9e:85:b5:3b:17:45:f0:67:b6:79:35: 36:23:59:4d:46:32:f6:92:5e:e9:b2:c7:28:3e:5d: 1f:b9:d5:c3:9b:4b:71:76:35:5c:e9:30:20:ca:4a: b7:81:27:7d:1d:12:1a:c0:93:c7:e6:0c:73:03:ad: 1e:7b:00:79:55:8c:2f:63:f0:ec:53:94:7c:af:ad: 52:3f:95:22:cc:67:4a:da:a1:1c:c8:64:96:33:39: 3c:60:16:a4:5a:6c:1d:87:e1:21:54:af:f8:e3:d9: a0:64:2a:64:ca:f5:43:da:2b:2c:a2:ec:38:c5:1c: 83:e1:76:70:c8:79:21:45:8e:ef:90:d4:27:69:cd: c1:a5:46:95:d4:bf:d5:bb:11:10:d8:33:91:d7:c5: 44:7c:5e:bc:d7:9f:01:94:d4:94:4d:ac:d5:df:87: 8d:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:24:D6:6C:B2:6E:3A:73:72:88:F8:E0:80:8C:B6:93:3F:48:C0:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:4c:ea:96:09:e8:e3:22:ba:f4:7b:1b:ae:8a:c0:f9:4c:0e: 2f:6e:8d:23:d8:93:d0:72:46:f4:87:6d:cd:5f:ea:f7:81:94: d4:64:34:34:f5:e1:95:a1:55:94:68:f6:49:5e:20:a4:40:a8: 08:cb:07:b6:99:cc:1c:a6:14:e2:44:47:7d:7d:33:89:38:6b: c2:23:8c:4f:71:98:bd:9b:7d:00:f2:03:67:fd:99:76:16:4b: 84:1f:20:5c:82:23:64:05:b1:f0:f5:78:8a:e8:73:c1:86:d2: 23:df:63:2a:b5:05:7e:b7:da:24:ce:5d:60:84:c2:80:41:38: 2c:7a:a6:43:46:de:c8:af:38:07:d9:7a:83:e7:3f:0b:99:35: 1c:69:1b:d5:e4:a4:dd:d8:09:03:10:00:3b:d0:59:73:30:5e: 40:1f:f8:a1:c6:c3:0c:91:14:22:e6:0e:dd:16:a1:91:fc:3e: 94:90:40:c9:a9:0d:f9:2d:22:2b:c8:e8:c7:cc:75:2e:48:6e: b6:b4:9f:2c:44:03:a8:92:2b:4f:a6:44:a1:a6:44:5d:07:0d: dc:bb:68:54:8a:49:87:32:41:45:03:20:3d:1f:01:6b:36:5f: 28:97:28:80:4b:33:bb:a7:a4:29:5f:5d:b7:b9:e6:bd:02:19: ff:6b:38:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulztEvq/MEVDMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTY2MjVlMjEtYzhmYS00NGFkLWIxNzQtYzY5YTcwMGJmNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/X5nVMi9rbE/0WGi+WocGPqbOeu/k40rSSI nlttteisNESsxjJElwffxLFC/bl93aenleZeUmNlRho2q4YpxguMDgH5/beZvTwp xjBvDVGKRkP9mrTTI5q/sy7DnoW1OxdF8Ge2eTU2I1lNRjL2kl7psscoPl0fudXD m0txdjVc6TAgykq3gSd9HRIawJPH5gxzA60eewB5VYwvY/DsU5R8r61SP5UizGdK 2qEcyGSWMzk8YBakWmwdh+EhVK/449mgZCpkyvVD2issouw4xRyD4XZwyHkhRY7v kNQnac3BpUaV1L/VuxEQ2DOR18VEfF68158BlNSUTazV34eNSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgk1myybjpzcoj44ICMtpM/SMCmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2EzYTlmMmMtYmY3Yy0z NGRiLTg5OWMtNWUyNmFjYjg1NzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhM6pYJ6OMiuvR7G66KwPlMDi9ujSPYk9ByRvSHbc1f6veBlNRkNDT1 4ZWhVZRo9kleIKRAqAjLB7aZzBymFOJER319M4k4a8IjjE9xmL2bfQDyA2f9mXYW S4QfIFyCI2QFsfD1eIroc8GG0iPfYyq1BX632iTOXWCEwoBBOCx6pkNG3sivOAfZ eoPnPwuZNRxpG9XkpN3YCQMQADvQWXMwXkAf+KHGwwyRFCLmDt0WoZH8PpSQQMmp DfktIivI6MfMdS5Ibra0nyxEA6iSK0+mRKGmRF0HDdy7aFSKSYcyQUUDID0fAWs2 XyiXKIBLM7unpClfXbe55r0CGf9rONk= -----END CERTIFICATE-----Generated at Sun Apr 27 08:43:23 2025 by rpki-client