$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa File: af94c568-033d-3a88-9500-558aeee053a0.roa (raw, json) Hash identifier: 8tB6sEdMNbTbUkPq6gyxv/BVZnSUUHnrV+uVeU058Kw= Subject key identifier: 60:A5:D0:82:73:C1:BE:D0:EC:03:4D:D3:94:E1:57:61:E7:B7:4C:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5F3F39E6B708C2AA3A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.93.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5f:3f:39:e6:b7:08:c2:aa:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5c1fd972-c79d-494f-b794-f0643aab1b6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:54:f2:7a:65:a8:1e:f9:b0:21:88:be:ad:cb: ca:fb:63:03:80:c2:da:e5:1f:49:97:f5:7a:63:12: 74:45:50:da:ba:68:42:3a:e2:6b:b2:4d:76:fd:52: 3a:01:fa:de:1b:0a:bd:50:c7:0e:70:83:45:d1:dc: 8e:38:20:dd:27:34:2e:c5:6e:d0:df:91:61:02:0b: 6e:5f:1d:67:78:43:18:32:cd:da:48:a4:e6:1d:04: 96:36:8f:db:9a:0b:66:46:52:ea:0f:2e:ee:ba:c5: 95:6a:f8:82:d2:77:98:8f:95:c8:09:43:c6:b5:86: 23:37:03:e6:fe:2a:24:5f:a4:85:bd:50:f0:1d:1e: 1c:7a:6d:bc:2b:bc:90:ee:b9:5e:42:9d:a1:20:5b: 8b:11:d0:b0:76:a5:88:44:75:16:e3:30:7a:21:a0: 41:e4:03:40:48:57:19:be:3c:f2:94:2b:61:53:d0: 5a:73:aa:82:2f:17:7b:ee:b1:65:f4:e2:57:71:04: dd:ba:e7:f7:60:3a:dc:c1:dd:8c:c7:6c:b3:a5:8d: 77:8c:db:9f:4a:b5:e2:19:18:25:0e:d2:bc:32:43: 0b:10:bb:81:05:2e:2a:af:1b:72:09:fe:6a:d2:18: d6:4f:cb:03:ec:4a:55:9b:36:39:66:9b:ce:48:22: be:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A5:D0:82:73:C1:BE:D0:EC:03:4D:D3:94:E1:57:61:E7:B7:4C:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/af94c568-033d-3a88-9500-558aeee053a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.93.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bf:5b:40:14:cc:12:4b:e7:a7:b3:7f:34:15:3b:48:2b:20:b8: 38:72:5e:a6:b2:40:2f:f2:88:b6:53:d7:75:66:aa:90:91:68: 8c:15:98:5e:58:e2:89:ad:55:19:6f:0e:55:7a:cb:f8:29:ef: 77:5c:85:92:7f:71:69:68:f4:a2:c0:9d:a5:6f:b3:d2:5e:d9: 8b:4a:57:7f:8b:21:d8:ec:25:de:07:08:22:75:ec:af:d4:eb: 07:be:47:7f:19:ed:a9:47:c1:e0:61:de:f2:67:d0:fc:e7:b5: f3:c4:dd:cc:c2:56:59:77:2f:ff:f6:76:19:1a:dc:0b:98:2c: 58:ea:ea:00:0e:63:cb:86:c3:48:a4:98:8a:df:5c:c8:d2:c2: c5:d4:d9:04:31:a4:f3:e5:b6:cc:b6:0b:b0:26:01:7f:3a:f6: 69:5a:81:86:c2:53:0f:84:99:4b:f8:a6:b0:74:15:02:ff:ad: 6c:41:06:d1:31:05:ed:85:f7:8f:0d:3f:a0:70:0a:16:49:50: ed:53:ae:fd:9c:95:ff:8e:d1:fc:53:6e:82:ec:3d:2d:d3:49: 2c:31:83:51:10:fd:ea:04:38:41:94:7f:2f:74:fd:04:50:33: 20:c8:2e:90:09:6d:fa:81:79:c1:53:c3:ae:21:3f:ee:ac:83: f6:f5:7b:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul8/Oea3CMKqOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWMxZmQ5NzItYzc5ZC00OTRmLWI3OTQtZjA2NDNhYWIxYjZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1TyemWoHvmwIYi+rcvK+2MDgMLa5R9Jl/V6 YxJ0RVDaumhCOuJrsk12/VI6AfreGwq9UMcOcINF0dyOOCDdJzQuxW7Q35FhAgtu Xx1neEMYMs3aSKTmHQSWNo/bmgtmRlLqDy7uusWVaviC0neYj5XICUPGtYYjNwPm /iokX6SFvVDwHR4cem28K7yQ7rleQp2hIFuLEdCwdqWIRHUW4zB6IaBB5ANASFcZ vjzylCthU9Bac6qCLxd77rFl9OJXcQTduuf3YDrcwd2Mx2yzpY13jNufSrXiGRgl DtK8MkMLELuBBS4qrxtyCf5q0hjWT8sD7EpVmzY5ZpvOSCK+eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCl0IJzwb7Q7ANN05ThV2Hnt0y2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWY5NGM1NjgtMDMzZC0z YTg4LTk1MDAtNTU4YWVlZTA1M2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL9bQBTMEkvnp7N/NBU7SCsguDhyXqayQC/yiLZT13VmqpCRaIwVmF5Y 4omtVRlvDlV6y/gp73dchZJ/cWlo9KLAnaVvs9Je2YtKV3+LIdjsJd4HCCJ17K/U 6we+R38Z7alHweBh3vJn0PzntfPE3czCVll3L//2dhka3AuYLFjq6gAOY8uGw0ik mIrfXMjSwsXU2QQxpPPltsy2C7AmAX869mlagYbCUw+EmUv4prB0FQL/rWxBBtEx Be2F948NP6BwChZJUO1Trv2clf+O0fxTboLsPS3TSSwxg1EQ/eoEOEGUfy90/QRQ MyDILpAJbfqBecFTw64hP+6sg/b1ew0= -----END CERTIFICATE-----Generated at Sun Apr 27 03:59:34 2025 by rpki-client