$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa File: 8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa (raw, json) Hash identifier: PboLC2ytpyyrOqcKoDHsLD5/9TmApaXRersh879wCqs= Subject key identifier: 2B:E9:A0:4F:E9:AB:6F:F7:AB:C6:2E:91:4D:5D:D3:91:83:AC:E9:D1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA61CCFFED57FA68201780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:61:cc:ff:ed:57:fa:68:20:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=3d6fb2d3-0299-4211-bf7b-a4ecaada9f9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:01:f0:7c:2a:65:ed:c5:42:d5:e0:e7:0f:66: 41:ba:92:c4:98:2f:e5:7a:06:cd:cd:55:96:80:7b: d8:80:da:af:2b:fc:a2:08:0f:1e:ef:2a:15:a8:74: 5d:39:8e:ce:4f:67:4d:a0:49:b6:8d:d3:4a:f9:4b: 18:21:8b:45:55:f4:15:94:c1:5b:48:76:b9:17:69: 88:9e:f9:f7:dc:48:80:66:0c:11:8e:00:8e:e1:0f: cc:c7:28:b5:b3:b6:1a:c4:02:ca:dc:de:68:e9:89: 41:fe:b2:d2:bc:67:09:b6:be:2b:5f:95:2f:81:f1: 95:a8:b2:0d:0f:6c:1a:4a:d5:80:2f:e5:b3:93:c4: a2:f0:92:16:18:91:db:a6:10:f8:38:d7:f9:2e:a5: e5:d3:df:69:29:07:89:9c:77:64:e6:20:0c:de:7e: d5:b5:fa:ed:2b:14:eb:76:e1:ae:27:c0:fd:7f:fd: c6:94:b6:15:59:84:65:22:d2:b8:34:fb:76:44:c3: 3f:f9:0c:f7:6e:66:8e:07:9b:5a:9d:0c:90:cc:ca: be:50:2f:87:5b:ee:89:2b:eb:d9:61:c3:a3:df:fb: f3:32:2a:3b:bf:bd:55:ce:47:79:40:18:72:39:f0: 6b:18:a2:ae:19:c1:11:af:ec:22:12:e2:96:58:8a: 16:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:E9:A0:4F:E9:AB:6F:F7:AB:C6:2E:91:4D:5D:D3:91:83:AC:E9:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:bb:1b:70:7d:2d:a1:b8:fb:55:1d:c6:ee:ee:6d:1c:96:10: a1:27:fe:d9:14:66:44:27:c3:d7:b4:c2:e4:52:c6:52:7d:25: 0b:46:b9:96:24:8e:b5:dd:ce:5d:37:d1:18:4b:1e:c6:17:f9: 3c:52:3a:44:6c:00:99:1a:2c:33:7d:38:f2:be:69:42:74:ac: ca:02:6c:11:74:10:85:d0:bd:1a:55:dc:ad:6a:8f:7c:37:f7: a2:be:72:ce:63:bf:09:7b:3b:4d:2c:a2:c5:e1:aa:2a:2f:a1: 96:49:b2:4e:de:43:3e:15:6d:ce:47:11:9a:ce:85:46:7b:71: fe:8a:55:c0:6b:0e:f6:d2:89:e6:30:51:a1:c6:d9:7e:eb:85: 6e:41:7d:64:38:95:b1:76:b7:ef:1a:2d:91:b7:99:b8:53:6d: 7e:17:f5:3e:72:e4:91:ab:ab:e3:97:c0:6c:98:e1:c9:4a:e9: 93:9f:c4:14:62:d7:d7:99:bd:91:d4:85:a7:4a:a5:59:48:11: 84:7a:e6:da:b3:a9:c8:51:18:77:21:33:04:d9:9d:a2:6a:b1: 0d:1d:e2:2a:a0:0f:49:8d:5e:08:82:0e:c0:a4:71:ae:89:d7: 95:ce:dd:23:75:3c:d5:ad:f0:a3:a2:ff:b2:a3:6d:3b:5d:39: 43:5c:99:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumHM/+1X+mggF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk M2Q2ZmIyZDMtMDI5OS00MjExLWJmN2ItYTRlY2FhZGE5ZjljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgHwfCpl7cVC1eDnD2ZBupLEmC/legbNzVWW gHvYgNqvK/yiCA8e7yoVqHRdOY7OT2dNoEm2jdNK+UsYIYtFVfQVlMFbSHa5F2mI nvn33EiAZgwRjgCO4Q/Mxyi1s7YaxALK3N5o6YlB/rLSvGcJtr4rX5UvgfGVqLIN D2waStWAL+Wzk8Si8JIWGJHbphD4ONf5LqXl099pKQeJnHdk5iAM3n7VtfrtKxTr duGuJ8D9f/3GlLYVWYRlItK4NPt2RMM/+Qz3bmaOB5tanQyQzMq+UC+HW+6JK+vZ YcOj3/vzMio7v71Vzkd5QBhyOfBrGKKuGcERr+wiEuKWWIoWVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCvpoE/pq2/3q8YukU1d05GDrOnRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGVhMWI3MTgtZjMzOC0z OTAxLWJkYzctZWNjNTk0MGFhN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIK7G3B9LaG4+1Udxu7ubRyWEKEn/tkUZkQnw9e0wuRSxlJ9JQtGuZYk jrXdzl030RhLHsYX+TxSOkRsAJkaLDN9OPK+aUJ0rMoCbBF0EIXQvRpV3K1qj3w3 96K+cs5jvwl7O00sosXhqiovoZZJsk7eQz4Vbc5HEZrOhUZ7cf6KVcBrDvbSieYw UaHG2X7rhW5BfWQ4lbF2t+8aLZG3mbhTbX4X9T5y5JGrq+OXwGyY4clK6ZOfxBRi 19eZvZHUhadKpVlIEYR65tqzqchRGHchMwTZnaJqsQ0d4iqgD0mNXgiCDsCkca6J 15XO3SN1PNWt8KOi/7KjbTtdOUNcmZQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:21:24 2025 by rpki-client