$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83413d7a-c76d-3c45-9887-246a761e0680.roa File: 83413d7a-c76d-3c45-9887-246a761e0680.roa (raw, json) Hash identifier: zGUAJGmVSipmfGt7fnXmFCMKxg2YTCc4v/Dw7PCevX4= Subject key identifier: 69:54:17:6A:28:65:B9:23:40:D9:62:1F:A0:7B:44:C4:63:B3:64:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5D6F260DD8A721DB2EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83413d7a-c76d-3c45-9887-246a761e0680.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.26.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5d:6f:26:0d:d8:a7:21:db:2e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=944fe022-ff59-4a4b-9a13-5786b6b3f988 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:97:77:0f:99:21:96:21:c9:09:ab:4a:27:8d: 79:18:70:bf:05:cf:b8:30:11:52:0a:ac:1f:35:44: c6:cc:1a:7f:d8:e0:0e:f8:31:a6:92:99:5f:51:6e: 63:74:f4:4d:df:22:15:7f:c8:b1:0d:9a:f3:3c:26: 8b:89:aa:9b:9b:b7:22:3c:8e:2f:ac:c7:3b:16:54: 89:cb:14:36:7c:69:b4:3d:03:86:ca:f0:f6:b0:53: 97:03:5b:67:c4:18:aa:b3:42:b0:a4:4f:f2:62:9c: c3:00:07:ba:1c:28:db:58:8c:61:9e:23:17:07:9b: c0:1c:87:b1:23:a8:d6:42:8b:77:df:18:b5:44:b3: b6:37:c8:6b:51:47:24:ae:cf:12:2f:de:9b:cb:d4: 18:7f:9d:5f:bf:e0:10:92:e6:a1:68:ab:f8:a5:20: 4d:1f:ee:0d:5c:7d:f8:6d:29:50:1f:5d:bf:7c:b0: e3:fc:ec:26:74:b4:ba:e9:a9:22:ed:98:c8:0d:e8: 76:18:64:54:48:6f:81:80:48:f5:fd:7e:0c:a2:35: 66:be:4d:ed:9b:b4:ad:eb:dd:e8:87:48:4d:5a:15: 5f:e3:f7:7a:98:f1:fc:d6:8e:21:39:77:7e:6f:7b: ca:e9:62:25:e2:61:1d:9a:85:46:15:b6:e7:34:1a: 9d:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:54:17:6A:28:65:B9:23:40:D9:62:1F:A0:7B:44:C4:63:B3:64:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/83413d7a-c76d-3c45-9887-246a761e0680.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.26.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1d:2d:57:d7:c4:d0:06:9d:f1:ab:d6:2d:30:7e:40:73:77: f2:9b:ae:14:bf:84:60:56:3c:9b:bc:c1:07:5b:99:04:da:75: 66:a2:c0:16:77:e7:99:b2:54:d6:7b:d3:16:77:09:1c:e6:78: 20:0f:b3:b8:e5:c0:9f:69:8d:08:4e:35:2d:8d:d4:ed:e8:ec: 40:e5:d9:71:78:b9:62:29:be:9f:68:3e:68:1d:1c:44:14:02: a0:2b:ec:13:60:55:68:23:15:c1:3c:4f:12:3d:22:ef:d3:5a: c2:bb:0c:75:16:57:22:00:db:8e:61:e4:2f:3c:36:9a:93:64: bc:d2:d4:b3:e7:bc:b1:27:31:21:79:c2:a8:af:21:4f:be:04: c5:6a:e5:d6:e2:b5:bf:17:79:49:45:94:13:08:03:21:d8:ec: f4:c5:40:3d:75:2a:21:5c:52:d1:47:b4:01:5d:7f:48:10:4f: b0:e1:e3:d6:4a:3f:57:2f:f4:30:2f:96:33:56:26:8e:68:3b: 80:b3:fc:a6:d4:f9:c0:59:d8:bc:98:2b:c1:48:cb:0d:92:a9: cf:b8:77:c3:50:bb:2e:d8:60:9e:b1:ee:d9:2a:00:a9:fa:80: 3c:c5:24:4d:ea:b2:a5:dd:08:9e:58:ea:e4:22:29:18:3a:99: f1:79:31:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul1vJg3YpyHbLsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTQ0ZmUwMjItZmY1OS00YTRiLTlhMTMtNTc4NmI2YjNmOTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pd3D5khliHJCatKJ415GHC/Bc+4MBFSCqwf NUTGzBp/2OAO+DGmkplfUW5jdPRN3yIVf8ixDZrzPCaLiaqbm7ciPI4vrMc7FlSJ yxQ2fGm0PQOGyvD2sFOXA1tnxBiqs0KwpE/yYpzDAAe6HCjbWIxhniMXB5vAHIex I6jWQot33xi1RLO2N8hrUUckrs8SL96by9QYf51fv+AQkuahaKv4pSBNH+4NXH34 bSlQH12/fLDj/OwmdLS66aki7ZjIDeh2GGRUSG+BgEj1/X4MojVmvk3tm7St693o h0hNWhVf4/d6mPH81o4hOXd+b3vK6WIl4mEdmoVGFbbnNBqdsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlUF2ooZbkjQNliH6B7RMRjs2RpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODM0MTNkN2EtYzc2ZC0z YzQ1LTk4ODctMjQ2YTc2MWUwNjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsdLVfXxNAGnfGr1i0wfkBzd/KbrhS/hGBWPJu8wQdbmQTadWaiwBZ3 55myVNZ70xZ3CRzmeCAPs7jlwJ9pjQhONS2N1O3o7EDl2XF4uWIpvp9oPmgdHEQU AqAr7BNgVWgjFcE8TxI9Iu/TWsK7DHUWVyIA245h5C88NpqTZLzS1LPnvLEnMSF5 wqivIU++BMVq5dbitb8XeUlFlBMIAyHY7PTFQD11KiFcUtFHtAFdf0gQT7Dh49ZK P1cv9DAvljNWJo5oO4Cz/KbU+cBZ2LyYK8FIyw2Sqc+4d8NQuy7YYJ6x7tkqAKn6 gDzFJE3qsqXdCJ5Y6uQiKRg6mfF5Mfk= -----END CERTIFICATE-----Generated at Tue Apr 29 15:24:52 2025 by rpki-client