$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa File: a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa (raw, json) Hash identifier: nj0qnlycbV1hhDhMk7bGj5oQhvj2hT54s5yEfwHDfyM= Subject key identifier: 4F:1A:CD:13:3F:56:B1:71:8B:78:13:2A:3C:20:F3:53:D9:06:EC:8A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA514442928CCDB19EC580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 72.173.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:51:44:42:92:8c:cd:b1:9e:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=61958e39-b0ac-4f36-86f0-40c4dd966d74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:f8:6c:60:ae:21:89:60:88:6d:7d:ef:80:2a: 4e:92:a0:77:f8:7c:49:2f:94:c0:22:bb:b3:41:1a: ed:fa:9b:ff:f6:60:0b:6f:7f:33:f5:3e:36:9d:00: cc:b3:cc:b6:6b:1e:d1:a8:4e:75:46:40:f5:08:ca: cf:60:6d:88:df:9b:06:6d:f7:12:7b:f7:ef:1d:ea: 55:40:34:0b:cf:42:cf:db:20:c5:69:4c:17:92:06: e8:e9:26:86:1d:87:d3:25:a8:98:cc:10:66:cf:90: fd:7b:00:1d:3e:88:38:6f:26:bc:71:91:64:c4:24: 07:84:f2:53:13:28:9c:2d:21:df:26:39:d6:b7:58: 2d:d9:84:87:82:1e:77:81:27:86:d4:d2:d2:0c:e4: 95:c1:80:8b:ab:4c:09:46:d5:89:94:78:b4:af:7c: 46:00:d5:01:c9:00:17:b2:79:1a:5a:92:d3:15:85: 43:80:6c:f1:fc:4d:03:e1:b7:7b:a3:8d:be:bc:a2: 84:63:38:02:96:d7:8e:af:86:bb:53:73:a6:62:10: 89:26:08:27:d4:41:d8:f1:54:e3:d8:34:5c:e2:91: d4:7e:d8:b1:c5:58:55:db:be:44:00:f0:f5:50:24: 15:9b:d6:1a:ff:cf:fa:bd:ae:b2:63:a4:cb:54:08: e4:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:1A:CD:13:3F:56:B1:71:8B:78:13:2A:3C:20:F3:53:D9:06:EC:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a3d9deaa-4e20-317c-85e9-2c2ec8bcb78b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:aa:bd:90:0e:46:38:f5:f4:de:19:57:ba:9a:5c:de:8e:a3: 8f:bc:5e:36:6f:90:3b:8a:c1:8e:71:3a:bd:af:c5:4a:9b:32: ae:1d:cb:12:d9:d7:3e:fd:ac:c0:96:6a:99:8c:e7:83:ac:eb: 61:33:ef:82:b4:49:70:c3:28:d3:02:1b:7d:ae:b0:b5:bf:a9: ea:2e:ba:21:e2:e8:28:09:59:5a:fe:75:2c:b3:cc:0b:de:0b: 29:f1:25:a2:67:03:4a:bd:f7:a1:4b:37:c9:49:93:d3:78:4a: aa:5c:2d:80:40:d6:ef:23:41:0f:cb:d3:e8:71:7a:65:f5:09: c3:2b:90:33:cc:92:8c:f3:5f:13:e3:e5:84:57:7f:d4:ec:43: 05:9d:96:43:c9:df:ff:46:06:84:a8:8f:0b:9c:60:a2:b9:4c: 41:15:f1:14:fb:8b:a1:e9:72:8a:54:97:bd:1b:ee:f2:b7:21: 0b:3a:1b:c0:7b:a0:69:a3:d7:85:d5:c4:83:d1:35:08:f7:5e: 41:1f:48:d0:d4:ac:01:e6:8a:85:26:39:74:a6:b0:a2:06:92: a7:a5:4f:a4:9b:47:5c:a0:ac:f0:0e:d7:37:1d:be:c5:2f:5f: 6c:d1:4b:19:36:75:d8:6b:ef:6f:02:9f:0a:cb:96:0a:41:2f: ba:80:ca:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulFEQpKMzbGexYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjE5NThlMzktYjBhYy00ZjM2LTg2ZjAtNDBjNGRkOTY2ZDc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvhsYK4hiWCIbX3vgCpOkqB3+HxJL5TAIruz QRrt+pv/9mALb38z9T42nQDMs8y2ax7RqE51RkD1CMrPYG2I35sGbfcSe/fvHepV QDQLz0LP2yDFaUwXkgbo6SaGHYfTJaiYzBBmz5D9ewAdPog4bya8cZFkxCQHhPJT EyicLSHfJjnWt1gt2YSHgh53gSeG1NLSDOSVwYCLq0wJRtWJlHi0r3xGANUByQAX snkaWpLTFYVDgGzx/E0D4bd7o42+vKKEYzgClteOr4a7U3OmYhCJJggn1EHY8VTj 2DRc4pHUftixxVhV275EAPD1UCQVm9Ya/8/6va6yY6TLVAjkjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE8azRM/VrFxi3gTKjwg81PZBuyKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTNkOWRlYWEtNGUyMC0z MTdjLTg1ZTktMmMyZWM4YmNiNzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2qvZAORjj19N4ZV7qaXN6Oo4+8XjZvkDuKwY5xOr2vxUqbMq4dyxLZ 1z79rMCWapmM54Os62Ez74K0SXDDKNMCG32usLW/qeouuiHi6CgJWVr+dSyzzAve CynxJaJnA0q996FLN8lJk9N4SqpcLYBA1u8jQQ/L0+hxemX1CcMrkDPMkozzXxPj 5YRXf9TsQwWdlkPJ3/9GBoSojwucYKK5TEEV8RT7i6HpcopUl70b7vK3IQs6G8B7 oGmj14XVxIPRNQj3XkEfSNDUrAHmioUmOXSmsKIGkqelT6SbR1ygrPAO1zcdvsUv X2zRSxk2ddhr728CnwrLlgpBL7qAykA= -----END CERTIFICATE-----Generated at Mon Apr 28 10:03:36 2025 by rpki-client