$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa File: 82601e6b-430d-31de-9c99-a4a04a886fbe.roa (raw, json) Hash identifier: T6hFpzz6ib75mgKef+52qYd7EBSCnQDWbUiThRw+e0U= Subject key identifier: 9D:24:31:F6:68:0A:30:98:5B:1E:B6:9A:22:C7:D2:58:FC:34:38:12 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA62FB76A9A9308639D340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:fb:76:a9:a9:30:86:39:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9225c6f0-ce6c-470c-b7f2-a2a1b07bcadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:90:2f:31:7c:1c:9a:c9:ad:21:c5:7a:a6:cd: 6a:da:f4:d0:1f:f0:49:3e:5e:5e:d3:f7:75:18:b2: 73:15:e4:e8:73:da:7f:ab:52:6a:e9:14:a2:ed:37: b3:f6:f5:92:aa:69:ed:c9:64:df:43:f7:ac:02:d0: 6c:7e:c8:16:fd:0c:ba:f7:b2:68:75:61:f0:5a:e2: 15:70:03:64:fc:cd:57:52:bb:0e:60:50:40:fd:df: 86:2a:5b:ae:00:2e:28:df:2f:68:de:a4:6a:e6:32: 00:05:f2:28:9f:7d:dc:34:8f:bd:f3:42:40:b8:9b: 53:f1:9f:47:be:b7:ce:d7:5b:df:41:f3:8b:96:d9: 36:dd:51:3b:c7:05:af:78:31:fb:1b:ad:9d:88:cc: 75:7a:f3:98:34:ef:eb:5d:22:b2:0c:4d:06:87:a9: 53:77:b2:96:0b:a8:8e:43:48:6d:b2:db:78:f4:e1: b7:fc:e2:6a:55:7e:5e:66:d2:6f:b9:20:a1:74:8a: 3f:72:b8:e6:a8:91:66:2b:cf:cc:50:8f:25:c0:11: 44:05:54:1b:6c:58:b5:8e:2c:2e:45:97:a2:84:82: 11:c8:87:53:58:f0:70:7e:e9:9f:ed:f9:e0:ee:10: 33:6d:55:73:66:57:67:f7:0a:d2:49:c9:71:40:24: 1e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:24:31:F6:68:0A:30:98:5B:1E:B6:9A:22:C7:D2:58:FC:34:38:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:3e:fe:06:fd:96:e1:ba:51:c7:b6:20:ac:bf:3c:b8:a8:4e: 20:4a:db:a7:d2:84:37:72:05:64:e0:90:61:3c:85:63:6d:ce: 52:a8:86:a1:ea:7b:f1:14:b0:b7:41:b2:09:0e:9d:71:ff:a4: 5d:25:46:e7:ed:2e:5d:fb:1f:43:76:35:1b:d8:d3:44:d9:0b: fd:60:26:6f:e9:13:a5:34:19:de:68:27:fa:d9:1e:52:ad:bd: 72:ff:70:be:c7:68:e6:9f:12:0f:6f:9d:c6:da:a2:ff:76:8d: 4a:15:ac:a5:eb:05:c0:48:8e:01:15:f3:83:2b:2c:cb:9b:55: a2:bc:5a:22:2a:3d:e9:c2:4e:23:21:cf:30:cd:d6:ba:28:dc: 24:e7:15:1a:71:cd:26:c5:1f:8a:1c:dd:82:83:ed:70:70:c7: 90:bb:93:cc:a5:04:25:24:1b:e9:69:e6:08:c2:b6:94:c4:27: e5:64:02:eb:66:e8:11:c9:a8:92:52:de:28:a1:41:be:55:3a: 36:13:20:c8:4f:10:f1:87:4e:14:74:f5:2a:6f:38:38:15:a7: 57:e0:16:6f:b9:e3:48:32:30:27:6e:d5:94:59:cb:a7:43:42: 3a:6a:74:8f:05:2b:68:a5:3a:d6:3c:83:22:f6:65:de:0f:06: aa:2d:0c:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumL7dqmpMIY500AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTIyNWM2ZjAtY2U2Yy00NzBjLWI3ZjItYTJhMWIwN2JjYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsJAvMXwcmsmtIcV6ps1q2vTQH/BJPl5e0/d1 GLJzFeToc9p/q1Jq6RSi7Tez9vWSqmntyWTfQ/esAtBsfsgW/Qy697JodWHwWuIV cANk/M1XUrsOYFBA/d+GKluuAC4o3y9o3qRq5jIABfIon33cNI+980JAuJtT8Z9H vrfO11vfQfOLltk23VE7xwWveDH7G62diMx1evOYNO/rXSKyDE0Gh6lTd7KWC6iO Q0htstt49OG3/OJqVX5eZtJvuSChdIo/crjmqJFmK8/MUI8lwBFEBVQbbFi1jiwu RZeihIIRyIdTWPBwfumf7fng7hAzbVVzZldn9wrSSclxQCQeDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ0kMfZoCjCYWx62miLH0lj8NDgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODI2MDFlNmItNDMwZC0z MWRlLTljOTktYTRhMDRhODg2ZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM+/gb9luG6Uce2IKy/PLioTiBK26fShDdyBWTgkGE8hWNtzlKohqHq e/EUsLdBsgkOnXH/pF0lRuftLl37H0N2NRvY00TZC/1gJm/pE6U0Gd5oJ/rZHlKt vXL/cL7HaOafEg9vncbaov92jUoVrKXrBcBIjgEV84MrLMubVaK8WiIqPenCTiMh zzDN1roo3CTnFRpxzSbFH4oc3YKD7XBwx5C7k8ylBCUkG+lp5gjCtpTEJ+VkAutm 6BHJqJJS3iihQb5VOjYTIMhPEPGHThR09SpvODgVp1fgFm+540gyMCdu1ZRZy6dD QjpqdI8FK2ilOtY8gyL2Zd4PBqotDPw= -----END CERTIFICATE-----Generated at Sun Apr 27 20:24:33 2025 by rpki-client