$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a428d3-0555-3771-b307-e77bf2f2e905.roa File: b7a428d3-0555-3771-b307-e77bf2f2e905.roa (raw, json) Hash identifier: JehIodDtrmUH0U5+ceyn5m37t+UJcz7RHILN+vCT9ss= Subject key identifier: B2:46:B1:84:2B:91:D5:CE:A5:93:49:11:28:25:0A:CD:05:4F:DE:47 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5F88F2C529487CB30A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a428d3-0555-3771-b307-e77bf2f2e905.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5f:88:f2:c5:29:48:7c:b3:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=55641762-e9a6-436d-a0fd-833209531a78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:0e:eb:e2:65:59:0a:44:2a:00:e8:2e:d1:13: b0:05:91:f1:7c:0b:5a:64:cc:f3:ce:b2:ec:52:8d: c2:ac:d1:59:27:5a:70:7a:9c:2e:04:75:d4:ad:bf: d2:24:b7:cd:7d:25:52:73:1a:17:40:58:98:6f:eb: 2f:fe:b5:f9:c7:9e:7c:24:3a:d0:8a:8d:a6:00:cb: 3f:93:01:1a:49:99:3b:a9:07:9d:1c:2a:66:bf:3b: 41:e1:a9:09:0f:3d:e2:2b:70:46:71:dc:43:f4:2c: e9:53:2f:26:ea:d0:cc:65:9f:d8:19:8f:c6:53:37: e6:17:3e:10:07:e1:65:c8:f6:75:f2:f6:c7:34:98: 5d:a3:ed:7d:6a:f4:c4:64:6b:42:5f:6e:ef:36:58: d2:d4:de:ff:ee:67:46:76:bc:e1:a2:6e:e0:a8:73: f1:99:13:d3:53:f0:61:65:cb:72:69:5a:ff:d6:4a: 7c:39:89:c1:17:e3:ce:36:d9:37:49:48:2c:82:f8: 9a:8e:6c:fd:9e:07:28:0a:07:2d:e2:54:21:de:d1: 8d:b8:91:67:d4:4a:a6:09:65:ea:d6:29:f4:45:b8: 89:ad:95:3d:f8:1b:8e:bb:af:ea:81:d5:7b:cf:7e: b6:b4:51:fd:90:37:cb:13:67:ec:23:ab:83:5a:96: ce:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:46:B1:84:2B:91:D5:CE:A5:93:49:11:28:25:0A:CD:05:4F:DE:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a428d3-0555-3771-b307-e77bf2f2e905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:19:13:41:3d:8d:4e:d7:8b:d0:58:d9:5c:b6:d6:db:fe:f6: ac:0a:e9:a8:69:ba:00:ac:6c:3f:ef:d9:2e:ef:6f:48:ce:60: 6e:a9:4a:d7:a6:82:b2:a0:c0:7b:ec:5d:0d:5e:4b:b6:81:6c: eb:cc:c3:ff:b9:bf:39:33:12:76:fd:f8:d6:74:7b:59:2f:e6: d8:85:85:a4:c6:00:8a:e4:64:47:31:e1:a3:ef:b8:95:7a:42: b1:61:89:98:4d:f7:c6:a7:b8:d6:9d:17:81:d9:9e:46:f8:1e: c4:b9:c5:20:74:6e:29:23:e9:68:4c:01:cd:b9:ae:da:24:b3: c8:55:e1:66:6a:d3:7e:f5:dc:0c:e2:04:89:3b:37:37:5c:7c: 16:53:14:dc:b4:88:9c:a0:e9:cc:ea:c0:ee:4a:88:c5:f3:0e: 91:0e:7d:09:09:7c:3d:b9:71:fc:ab:88:79:28:86:10:6a:68: 2b:b8:77:28:96:29:33:e8:20:e0:83:ea:27:91:07:d5:31:c0: 7d:ef:e4:ca:f2:d3:6a:86:63:30:23:be:bc:15:5a:5c:b9:7e: 33:3a:df:c5:7c:14:91:06:d8:28:89:a8:54:c8:8e:4d:23:3b: b6:b9:b2:54:9f:e3:36:ca:e1:41:c9:27:93:ec:73:05:3d:81: df:84:4c:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul+I8sUpSHyzCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTU2NDE3NjItZTlhNi00MzZkLWEwZmQtODMzMjA5NTMxYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiA7r4mVZCkQqAOgu0ROwBZHxfAtaZMzzzrLs Uo3CrNFZJ1pwepwuBHXUrb/SJLfNfSVScxoXQFiYb+sv/rX5x558JDrQio2mAMs/ kwEaSZk7qQedHCpmvztB4akJDz3iK3BGcdxD9CzpUy8m6tDMZZ/YGY/GUzfmFz4Q B+FlyPZ18vbHNJhdo+19avTEZGtCX27vNljS1N7/7mdGdrzhom7gqHPxmRPTU/Bh ZctyaVr/1kp8OYnBF+PONtk3SUgsgviajmz9ngcoCgct4lQh3tGNuJFn1EqmCWXq 1in0RbiJrZU9+BuOu6/qgdV7z362tFH9kDfLE2fsI6uDWpbOVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLJGsYQrkdXOpZNJESglCs0FT95HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdhNDI4ZDMtMDU1NS0z NzcxLWIzMDctZTc3YmYyZjJlOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQZE0E9jU7Xi9BY2Vy21tv+9qwK6ahpugCsbD/v2S7vb0jOYG6pStem grKgwHvsXQ1eS7aBbOvMw/+5vzkzEnb9+NZ0e1kv5tiFhaTGAIrkZEcx4aPvuJV6 QrFhiZhN98anuNadF4HZnkb4HsS5xSB0bikj6WhMAc25rtoks8hV4WZq03713Azi BIk7NzdcfBZTFNy0iJyg6czqwO5KiMXzDpEOfQkJfD25cfyriHkohhBqaCu4dyiW KTPoIOCD6ieRB9UxwH3v5Mry02qGYzAjvrwVWly5fjM638V8FJEG2CiJqFTIjk0j O7a5slSf4zbK4UHJJ5PscwU9gd+ETGg= -----END CERTIFICATE-----Generated at Sun Apr 27 04:06:11 2025 by rpki-client