$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967a7b62-223a-3a52-b400-d60a42fecc1d.roa File: 967a7b62-223a-3a52-b400-d60a42fecc1d.roa (raw, json) Hash identifier: FKowOGC0g3pNNBNGvZ6BmnekcGUnaJTpvj44TB/WVhM= Subject key identifier: C1:9F:75:B2:DA:AF:10:02:2F:FA:6C:E9:F3:82:66:35:0F:1A:22:81 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5F27EA4D1E619F0FF080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967a7b62-223a-3a52-b400-d60a42fecc1d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5f:27:ea:4d:1e:61:9f:0f:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=ea564324-a9dd-4752-a161-011734066eb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:ee:97:2f:33:df:8e:74:97:f5:4a:82:a2:9a: f7:42:4f:43:b7:20:8b:37:45:f5:ee:52:b4:82:93: 60:f4:f1:1d:9f:ef:87:ec:98:96:d2:e6:54:58:28: 45:85:1e:07:4a:58:b1:4c:37:0b:27:e3:42:75:44: b8:1d:2c:98:7c:09:8f:19:01:9b:9b:bf:83:01:fd: 42:f7:e0:9e:f7:f0:e9:6f:bf:71:2e:da:1b:5e:c5: 96:ea:ca:ff:3e:fe:6b:20:79:07:7e:c3:76:b7:cf: ca:4b:e5:e4:bf:64:00:ad:af:44:88:11:80:80:04: 5f:a5:c8:76:38:ad:50:83:d0:e6:13:ea:cb:6f:b5: 62:97:d8:2e:8b:c2:9a:66:36:c9:bd:38:e0:b9:0a: 8a:cc:85:46:91:5b:a8:b5:be:c3:cc:6e:01:46:df: f6:2f:b6:95:11:23:0c:97:6f:4d:11:ea:22:6b:90: 5d:2e:11:c8:5a:0d:d1:dc:b0:1d:24:74:1c:5d:dd: a7:58:21:ab:60:55:0a:43:3a:a7:00:e7:5c:90:e5: 30:de:83:6b:80:36:f1:09:29:36:81:51:65:dc:83: f0:26:87:b4:99:47:42:5d:6d:39:14:e8:44:bf:9c: a9:bc:c9:90:a1:20:f8:56:b5:f1:c0:5a:91:f2:1c: a0:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:9F:75:B2:DA:AF:10:02:2F:FA:6C:E9:F3:82:66:35:0F:1A:22:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/967a7b62-223a-3a52-b400-d60a42fecc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 20:17:93:65:75:c9:39:f4:d4:80:b2:bf:bc:cf:f0:6e:3c:95: e8:a7:e0:97:bb:75:1e:44:2a:86:aa:ac:0b:49:61:0c:17:39: 18:9b:6b:bb:97:92:1f:64:51:69:cd:74:40:fa:97:be:5c:20: 74:be:b5:7e:6a:c9:e7:f5:58:38:1d:a3:0f:52:09:d6:2c:d9: 64:8c:5c:54:a4:f0:e0:f1:7c:ef:7b:a8:3a:c7:71:7a:18:30: 83:12:d7:c2:d4:b8:ef:1a:5d:7f:c9:53:d7:7d:e1:d9:a1:89: ec:33:58:28:98:22:29:28:79:21:69:34:4c:68:e8:8a:0c:a1: 89:cf:76:3a:d8:db:dd:0c:05:33:f8:56:27:b4:4f:6e:f9:58: 60:02:9e:f9:8d:3e:3e:8b:85:5a:b3:54:5a:2d:fe:1d:3a:f4: 67:23:2d:e5:88:a2:7c:2d:f4:ba:98:8c:c6:84:67:79:73:ad: 5c:07:9d:c9:92:77:d6:e4:06:cb:03:f2:ee:78:dc:8b:03:7b: 10:f9:84:49:45:d5:8a:a3:af:5b:54:f7:69:fc:9a:bd:87:70: 86:f5:ce:98:b9:a6:68:de:94:48:3a:36:54:fb:9d:39:17:d2: 64:3e:49:a1:88:5f:3d:b2:c1:94:f4:04:ca:e0:73:9f:b5:03: 95:2b:8b:a4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul8n6k0eYZ8P8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZWE1NjQzMjQtYTlkZC00NzUyLWExNjEtMDExNzM0MDY2ZWIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+6XLzPfjnSX9UqCopr3Qk9DtyCLN0X17lK0 gpNg9PEdn++H7JiW0uZUWChFhR4HSlixTDcLJ+NCdUS4HSyYfAmPGQGbm7+DAf1C 9+Ce9/Dpb79xLtobXsWW6sr/Pv5rIHkHfsN2t8/KS+Xkv2QAra9EiBGAgARfpch2 OK1Qg9DmE+rLb7Vil9gui8KaZjbJvTjguQqKzIVGkVuotb7DzG4BRt/2L7aVESMM l29NEeoia5BdLhHIWg3R3LAdJHQcXd2nWCGrYFUKQzqnAOdckOUw3oNrgDbxCSk2 gVFl3IPwJoe0mUdCXW05FOhEv5ypvMmQoSD4VrXxwFqR8hygzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGfdbLarxACL/ps6fOCZjUPGiKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTY3YTdiNjItMjIzYS0z YTUyLWI0MDAtZDYwYTQyZmVjYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACAXk2V1yTn01ICyv7zP8G48lein4Je7dR5EKoaqrAtJYQwXORiba7uX kh9kUWnNdED6l75cIHS+tX5qyef1WDgdow9SCdYs2WSMXFSk8ODxfO97qDrHcXoY MIMS18LUuO8aXX/JU9d94dmhiewzWCiYIikoeSFpNExo6IoMoYnPdjrY290MBTP4 Vie0T275WGACnvmNPj6LhVqzVFot/h069GcjLeWIonwt9LqYjMaEZ3lzrVwHncmS d9bkBssD8u543IsDexD5hElF1Yqjr1tU92n8mr2HcIb1zpi5pmjelEg6NlT7nTkX 0mQ+SaGIXz2ywZT0BMrgc5+1A5Uri6Q= -----END CERTIFICATE-----Generated at Sun Apr 27 19:45:58 2025 by rpki-client