$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa File: a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa (raw, json) Hash identifier: UTEizWtyHKYTnZvccayVWxWMJIOFekzxiP9PEN6PdaQ= Subject key identifier: 2E:8E:BC:A2:BC:84:A1:15:80:C1:78:BF:44:DD:DB:35:D5:F4:05:60 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5CBBB7325862A4111980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5c:bb:b7:32:58:62:a4:11:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=187368cc-83f8-487d-9c1e-de2e790d8d13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:8b:46:19:36:76:e8:cc:04:91:09:ce:b2:85: 8e:5d:71:9e:fc:0f:c7:cd:92:f3:27:7a:4a:54:97: d4:e3:b9:89:78:ec:bc:ce:15:75:9f:70:7f:b9:cc: 80:f2:45:ce:67:ac:7e:89:e3:10:75:03:69:4d:5a: e2:3b:6b:29:25:a2:e3:0a:65:c8:48:82:7f:f4:09: a8:33:df:b5:56:9c:a2:d7:9e:db:2e:4e:bc:c3:77: 70:a9:6a:12:b3:16:c5:70:04:a9:b9:ee:a3:ea:79: 88:76:17:36:88:a5:3a:60:0c:74:cc:14:5a:de:07: ba:b2:46:e7:f5:f5:39:bf:f4:74:03:13:94:74:d3: b1:9e:e3:9e:4c:60:53:b1:01:bb:ea:8a:5b:ea:29: c7:a1:d6:05:cb:d5:da:67:97:49:50:ad:89:f7:94: 84:dd:90:9b:23:db:74:a7:d6:ef:7d:46:6a:64:a1: c1:2d:28:a6:03:f5:58:e5:2a:58:ba:a5:c1:0f:4d: 60:d4:23:66:5d:e6:25:c0:ac:10:70:3a:5c:53:65: 0d:18:36:7e:de:dc:46:77:98:26:c1:ec:fa:26:bf: c2:7e:44:37:6a:2b:fb:19:7c:2e:bf:de:97:28:14: 9f:d4:fa:22:06:35:63:79:2d:f3:8e:a7:1c:a8:d0: 16:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8E:BC:A2:BC:84:A1:15:80:C1:78:BF:44:DD:DB:35:D5:F4:05:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:d2:51:e2:12:c2:84:0e:06:92:87:7a:b9:49:64:81:90:3b: 19:e8:83:81:e4:b4:9f:b4:cb:f7:5d:dc:87:60:14:67:d8:f1: 7c:f9:b1:4a:d5:97:f2:af:71:89:b6:1d:93:ae:ea:fb:6a:ec: f6:7a:5c:aa:cd:06:dc:f5:45:48:c3:b3:6e:34:4a:5c:df:bd: 9d:d9:c2:02:05:fa:00:2c:9f:06:bd:58:c9:fb:de:27:e0:11: d1:b0:62:5d:04:56:95:f6:82:4e:a3:1b:87:a0:78:35:64:71: 1e:24:ed:76:e1:23:46:14:31:07:ed:26:ce:2b:c2:0b:c4:28: 23:11:3a:4b:a2:74:13:e9:e9:66:c0:32:c1:5a:e0:43:43:21: 65:8e:ec:14:0f:91:29:5b:73:35:a3:36:bf:54:7b:99:65:2e: f5:89:c1:83:33:4d:1d:4c:13:9d:b8:16:f2:54:04:90:55:1d: 33:c9:81:97:fd:40:41:9f:5c:21:d1:e3:3e:4c:3f:52:82:7e: 09:64:ac:5f:bf:a0:4e:2f:41:6c:22:53:d8:ad:53:0c:39:93: 36:9b:86:15:d6:47:a6:b7:fb:d2:b7:a7:5d:6d:c8:79:0e:a7: a3:02:30:c8:38:27:e0:c8:85:74:32:a2:83:6e:f1:4b:ff:22: 93:46:75:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuly7tzJYYqQRGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTg3MzY4Y2MtODNmOC00ODdkLTljMWUtZGUyZTc5MGQ4ZDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArotGGTZ26MwEkQnOsoWOXXGe/A/HzZLzJ3pK VJfU47mJeOy8zhV1n3B/ucyA8kXOZ6x+ieMQdQNpTVriO2spJaLjCmXISIJ/9Amo M9+1Vpyi157bLk68w3dwqWoSsxbFcASpue6j6nmIdhc2iKU6YAx0zBRa3ge6skbn 9fU5v/R0AxOUdNOxnuOeTGBTsQG76opb6inHodYFy9XaZ5dJUK2J95SE3ZCbI9t0 p9bvfUZqZKHBLSimA/VY5SpYuqXBD01g1CNmXeYlwKwQcDpcU2UNGDZ+3txGd5gm wez6Jr/CfkQ3aiv7GXwuv96XKBSf1PoiBjVjeS3zjqccqNAWmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6OvKK8hKEVgMF4v0Td2zXV9AVgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTJkOWUzYjctNmI0Zi0z ODJkLWJmNDktNDhiNjRiZTYyYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/SUeISwoQOBpKHerlJZIGQOxnog4HktJ+0y/dd3IdgFGfY8Xz5sUrV l/KvcYm2HZOu6vtq7PZ6XKrNBtz1RUjDs240SlzfvZ3ZwgIF+gAsnwa9WMn73ifg EdGwYl0EVpX2gk6jG4egeDVkcR4k7XbhI0YUMQftJs4rwgvEKCMROkuidBPp6WbA MsFa4ENDIWWO7BQPkSlbczWjNr9Ue5llLvWJwYMzTR1ME524FvJUBJBVHTPJgZf9 QEGfXCHR4z5MP1KCfglkrF+/oE4vQWwiU9itUww5kzabhhXWR6a3+9K3p11tyHkO p6MCMMg4J+DIhXQyooNu8Uv/IpNGdS8= -----END CERTIFICATE-----Generated at Sun Apr 27 08:17:33 2025 by rpki-client