$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c04b505e-415b-35b8-ab23-b1ef7004c3cb.roa File: c04b505e-415b-35b8-ab23-b1ef7004c3cb.roa (raw, json) Hash identifier: 08KjL9xwXxZS9kjy+P8UO96XgUtO7iOMEJDEl/T+Eo4= Subject key identifier: BB:96:45:73:DB:A6:1D:9B:99:B7:23:66:BE:C3:4D:0E:E5:4D:B3:88 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE72C1BC17871366BF720 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c04b505e-415b-35b8-ab23-b1ef7004c3cb.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e7:2c:1b:c1:78:71:36:6b:f7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=62f1ee8c-2acb-4854-8f4b-6ad153082eec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d2:83:2a:ad:3d:fa:c8:c6:5c:b8:be:55:2c: f6:77:e3:83:2f:08:ba:f7:13:0e:eb:57:e8:5b:3c: db:3b:a5:3a:1c:da:65:74:a8:f2:04:15:96:35:3f: cf:9b:4f:2d:d6:1f:87:d1:7c:8b:8a:f9:31:08:4f: 7b:07:64:56:f0:67:1d:15:93:ff:77:83:98:6e:74: 2b:28:4f:a4:e4:c4:d6:0a:a5:86:5d:98:5a:83:c9: 10:00:3c:95:ac:57:72:46:a6:6e:fd:0e:74:70:8e: db:66:b0:d1:4c:ca:17:3d:d3:d7:fb:8c:7d:3e:cb: a0:34:e6:1e:13:15:88:c4:ea:01:b6:ab:61:be:7b: f0:9f:97:e4:5b:bd:45:af:0e:74:46:5f:4e:37:ff: 5f:b5:7b:9c:ca:b5:53:83:1d:01:f9:43:9a:47:25: 0f:fa:44:82:75:de:f2:72:2a:c0:29:6a:a1:7f:a9: 55:55:b5:1a:ba:b5:81:98:06:72:26:32:77:28:5c: 0c:8b:ee:cd:dc:5b:3e:77:cb:8c:6a:19:03:35:f2: a9:db:7f:f0:00:60:18:4f:cc:61:d1:b9:00:5b:45: 1e:dc:be:88:ec:84:4d:19:b6:ae:d4:cd:c4:8c:83: 98:cb:8a:7b:24:99:cc:5e:6c:6e:ac:87:fb:81:62: bc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:96:45:73:DB:A6:1D:9B:99:B7:23:66:BE:C3:4D:0E:E5:4D:B3:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c04b505e-415b-35b8-ab23-b1ef7004c3cb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:7f:0a:b9:f9:b4:4e:85:d3:11:ee:65:a0:f3:b8:57:1b:86: b5:5c:22:d8:43:8d:d6:63:9c:b0:3e:73:cd:d5:c4:bf:06:05: 25:16:aa:f5:5c:e6:39:30:8e:6c:58:db:0f:fb:0e:44:40:2a: 16:92:5e:9f:68:5d:f0:09:a9:9c:e8:2d:a3:c4:c7:94:67:80: ce:d5:f1:89:33:d6:c6:58:c4:4d:9b:a9:06:25:f6:03:79:af: 31:1e:73:fa:49:4f:6b:2a:ef:3a:e9:a4:43:61:c7:d3:c5:b4: 1d:2c:14:94:81:3f:6e:3a:84:f8:fc:6c:16:9c:90:ae:ff:5f: 3f:96:46:b9:32:77:5f:03:33:e6:f5:6e:cf:ab:8c:de:52:82: ca:e7:4e:b8:e4:2a:11:89:cd:a7:e8:45:51:b2:40:aa:3f:35: 77:e5:8d:d1:42:f3:0f:3e:d0:76:a4:ce:ee:d8:a3:ee:35:f2: 87:db:06:fc:c4:e8:6e:2e:36:7d:77:af:ce:ba:7b:9d:1e:d3: 87:20:60:3e:ee:87:66:7e:ad:f9:43:35:37:f6:e7:79:56:9c: 8b:a1:d6:08:01:46:a2:65:f2:f9:ce:10:6a:a0:00:76:6c:2b: bb:87:6d:a5:18:43:de:db:11:dc:66:67:a0:af:69:af:b4:5d: e3:30:4b:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuucsG8F4cTZr9yAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NjJmMWVlOGMtMmFjYi00ODU0LThmNGItNmFkMTUzMDgyZWVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNKDKq09+sjGXLi+VSz2d+ODLwi69xMO61fo WzzbO6U6HNpldKjyBBWWNT/Pm08t1h+H0XyLivkxCE97B2RW8GcdFZP/d4OYbnQr KE+k5MTWCqWGXZhag8kQADyVrFdyRqZu/Q50cI7bZrDRTMoXPdPX+4x9PsugNOYe ExWIxOoBtqthvnvwn5fkW71Frw50Rl9ON/9ftXucyrVTgx0B+UOaRyUP+kSCdd7y cirAKWqhf6lVVbUaurWBmAZyJjJ3KFwMi+7N3Fs+d8uMahkDNfKp23/wAGAYT8xh 0bkAW0Ue3L6I7IRNGbau1M3EjIOYy4p7JJnMXmxurIf7gWK8fwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLuWRXPbph2bmbcjZr7DTQ7lTbOIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzA0YjUwNWUtNDE1Yi0z NWI4LWFiMjMtYjFlZjcwMDRjM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMt/Crn5tE6F0xHuZaDzuFcbhrVcIthDjdZjnLA+c83VxL8GBSUWqvVc 5jkwjmxY2w/7DkRAKhaSXp9oXfAJqZzoLaPEx5RngM7V8Ykz1sZYxE2bqQYl9gN5 rzEec/pJT2sq7zrppENhx9PFtB0sFJSBP246hPj8bBackK7/Xz+WRrkyd18DM+b1 bs+rjN5SgsrnTrjkKhGJzafoRVGyQKo/NXfljdFC8w8+0Hakzu7Yo+418ofbBvzE 6G4uNn13r866e50e04cgYD7uh2Z+rflDNTf253lWnIuh1ggBRqJl8vnOEGqgAHZs K7uHbaUYQ97bEdxmZ6Cvaa+0XeMwS5E= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:45 2025 by rpki-client