$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa File: a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa (raw, json) Hash identifier: My0HjwXHd7qj4FpvTcUI9gU1pAywIk+sBSwQbnQEI/Q= Subject key identifier: 7F:BA:2F:27:D7:31:4E:FD:36:A2:97:DE:1B:E4:19:D5:2C:C8:FD:84 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEB8143DD27E399A4A3C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:eb:81:43:dd:27:e3:99:a4:a3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2fa90608-6b50-4fe4-b8b8-39241e829a07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:f7:67:cc:af:dc:1e:80:8f:4a:61:27:96:67: 98:2b:57:3f:93:59:90:a0:4b:85:89:36:1e:49:30: fa:10:22:52:47:06:84:ad:1f:78:ff:a8:65:c2:53: 6f:97:ff:a7:7f:0a:c4:b5:fd:4a:5e:b7:1f:1f:28: 2b:9d:20:8e:02:55:e3:97:97:6f:d2:f3:6f:f3:74: 61:07:92:2b:b6:18:5a:7f:bb:26:9d:89:27:8b:2c: d6:e9:db:02:64:20:9f:81:55:e2:92:91:bf:70:f8: 87:91:10:15:58:98:f8:59:a1:3c:6b:fb:22:44:d5: 3a:38:9d:c5:af:92:c5:12:81:ed:64:a7:9b:dc:3f: d6:b8:98:45:f8:98:eb:f1:ba:12:db:13:b9:06:5f: ff:5c:ea:09:ca:75:37:ca:d9:67:41:d2:e5:47:1c: e0:1b:0a:ba:a0:b6:ec:4b:90:01:ca:de:25:32:76: 55:25:6c:85:65:e9:dc:46:d8:d7:5d:fe:d8:f7:d0: 6d:26:6f:19:98:f5:1e:ad:44:0e:1f:86:7c:1b:be: 32:6c:84:1d:98:48:87:d8:a8:99:85:b2:79:d8:7d: 3e:a0:b8:88:69:03:21:a6:05:8d:0d:d5:b5:e8:ca: 88:23:2d:68:d6:88:45:b7:4c:12:7d:30:59:f7:29: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:BA:2F:27:D7:31:4E:FD:36:A2:97:DE:1B:E4:19:D5:2C:C8:FD:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:55:d6:06:01:a9:40:de:81:c5:00:3e:fb:3f:e9:51:f7:a6: 46:82:b8:57:3e:d7:1c:2e:6e:0c:f7:e5:4f:39:c2:db:84:2a: 1a:2d:20:13:38:38:c8:fc:cd:88:44:74:84:58:b3:9c:30:0f: 5f:c6:a3:a7:2f:f6:64:8c:97:82:d9:7e:25:55:e4:fc:75:11: e4:b1:cb:92:13:8a:7d:44:32:ea:5a:e6:25:20:b0:72:2d:8a: 9e:08:81:a2:1d:cb:10:7c:46:ff:a8:c4:f8:6a:c1:66:8b:c7: 3b:f1:06:8d:6e:fa:7b:c6:06:cb:52:73:eb:3d:56:40:66:9c: b9:d3:41:53:93:9c:5a:37:ae:39:cb:7e:51:dd:0c:22:54:07: 5f:f5:05:12:61:c9:7b:e6:25:6f:11:3c:5c:d4:01:97:69:5c: d4:25:46:1e:58:59:e4:ee:44:8a:52:7a:5f:76:b8:bb:6b:35: ec:1a:64:f0:c7:7f:47:8a:ee:f5:d2:fc:f4:58:5a:18:9f:7c: 92:fd:a2:41:53:44:77:5c:db:a4:15:a3:e4:01:fe:30:7f:08: e6:73:9a:cd:95:e4:e9:bc:d5:b6:83:85:86:15:90:be:7a:36: 3b:40:63:4f:a4:c2:50:87:d9:c8:d0:b2:90:3f:ee:6b:b2:25: cb:e9:23:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuuBQ90n45mko8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmZhOTA2MDgtNmI1MC00ZmU0LWI4YjgtMzkyNDFlODI5YTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vdnzK/cHoCPSmEnlmeYK1c/k1mQoEuFiTYe STD6ECJSRwaErR94/6hlwlNvl/+nfwrEtf1KXrcfHygrnSCOAlXjl5dv0vNv83Rh B5Irthhaf7smnYkniyzW6dsCZCCfgVXikpG/cPiHkRAVWJj4WaE8a/siRNU6OJ3F r5LFEoHtZKeb3D/WuJhF+Jjr8boS2xO5Bl//XOoJynU3ytlnQdLlRxzgGwq6oLbs S5AByt4lMnZVJWyFZencRtjXXf7Y99BtJm8ZmPUerUQOH4Z8G74ybIQdmEiH2KiZ hbJ52H0+oLiIaQMhpgWNDdW16MqIIy1o1ohFt0wSfTBZ9yk7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+6LyfXMU79NqKX3hvkGdUsyP2EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTBmYWVlOWYtMjQ5ZC0z ZjY0LTk5NTEtZjZkMTliNmQ1ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtV1gYBqUDegcUAPvs/6VH3pkaCuFc+1xwubgz35U85wtuEKhotIBM4 OMj8zYhEdIRYs5wwD1/Go6cv9mSMl4LZfiVV5Px1EeSxy5ITin1EMupa5iUgsHIt ip4IgaIdyxB8Rv+oxPhqwWaLxzvxBo1u+nvGBstSc+s9VkBmnLnTQVOTnFo3rjnL flHdDCJUB1/1BRJhyXvmJW8RPFzUAZdpXNQlRh5YWeTuRIpSel92uLtrNewaZPDH f0eK7vXS/PRYWhiffJL9okFTRHdc26QVo+QB/jB/COZzms2V5Om81baDhYYVkL56 NjtAY0+kwlCH2cjQspA/7muyJcvpIxk= -----END CERTIFICATE-----Generated at Sun Apr 27 11:21:23 2025 by rpki-client