$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c080914d-3433-3b78-b2b6-7db35cd93827.roa File: c080914d-3433-3b78-b2b6-7db35cd93827.roa (raw, json) Hash identifier: el1895S8yj3SOUCbeaoorcEljsGIKk1LT2gD4QyMmss= Subject key identifier: 23:0B:49:A7:B2:0A:3C:5C:B4:F8:AE:EA:A9:A3:71:A9:73:C8:5F:5A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEB0746626F683E810600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c080914d-3433-3b78-b2b6-7db35cd93827.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:eb:07:46:62:6f:68:3e:81:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4cba1421-3fb8-4b9d-8823-450bc2a1eae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:6b:a8:1c:61:90:2e:c1:8d:22:b6:ea:46:6e: 5c:a7:22:7a:a4:6b:ef:61:b9:fa:9c:38:cc:a9:c6: 8f:1c:69:46:ad:71:06:a0:f1:14:06:9a:9a:52:b7: 6e:6a:84:e9:71:55:4b:14:29:30:98:7a:17:85:bd: 9a:df:84:b4:eb:79:59:35:19:e5:74:97:e8:32:52: d3:ae:72:36:ad:23:83:dc:2e:16:38:7f:33:f5:d2: 9c:ab:f1:ba:81:33:30:26:0e:6b:e4:56:8b:6b:83: 4a:dd:74:df:b0:0c:ca:e4:fd:b3:fc:36:2d:f7:64: 05:29:a9:10:da:4f:ff:d2:58:0d:3c:73:fe:80:43: 22:cf:3c:b6:0a:e8:37:2b:18:96:62:a3:2c:be:8e: f3:87:18:d0:2a:41:1e:25:8a:e7:78:7d:59:25:e3: 75:85:28:f4:6a:f4:7a:79:db:20:e6:f3:8e:b7:50: 2f:9d:b1:b6:ac:a3:f3:cc:0f:b3:68:d7:15:ff:6c: 27:92:b5:a4:91:11:76:7f:70:69:bf:0e:cb:01:b5: a1:4c:1a:f0:40:b3:e5:e9:6a:cf:47:7f:90:70:3d: 25:b7:c3:b4:b0:0a:db:fa:d7:63:78:c9:b4:8c:2b: ed:79:55:6b:06:9f:8f:f1:ba:f8:01:3f:e9:70:13: 6f:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:0B:49:A7:B2:0A:3C:5C:B4:F8:AE:EA:A9:A3:71:A9:73:C8:5F:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c080914d-3433-3b78-b2b6-7db35cd93827.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:a3:69:1b:9e:de:89:a2:c1:6c:18:fa:df:86:b3:da:59:6e: 56:fa:c6:f4:1f:8b:16:0d:81:62:d2:cf:37:24:d6:79:ec:32: 44:7f:80:28:f0:cc:32:70:66:28:2b:44:04:8e:8e:80:9e:3e: 79:16:8f:f0:37:0c:6c:cd:88:b9:af:1e:c6:8d:47:47:71:0c: ee:6e:e7:8c:ae:0f:21:0a:47:62:78:8a:7c:f8:84:d4:97:f0: 66:7a:f8:ac:9c:fb:bf:61:15:f9:53:90:6a:2d:83:63:48:70: 1a:34:bd:e8:37:2e:58:32:55:2c:c1:58:6d:d6:15:9b:c4:18: b1:9e:87:51:85:6f:18:65:40:ef:40:6f:f7:49:39:fb:46:48: 77:37:72:42:79:b9:ef:e5:1c:ae:e6:4f:b7:9e:77:5d:72:cb: 18:6b:fe:77:f3:3c:3e:24:dd:6d:58:e8:1d:ee:5f:d6:3b:71: 86:4d:3d:e3:5f:47:ce:e0:c7:15:4c:54:9a:eb:f7:2e:3e:37: 3f:8f:bd:ae:0d:70:8b:4c:03:42:c3:12:38:47:15:05:8a:10: 94:d8:b3:02:8b:9f:26:2e:25:06:ab:68:e6:02:6f:47:12:20: bb:a1:c4:d8:a1:76:7c:17:68:12:50:4d:62:2b:0a:8b:3c:ac: e0:ca:03:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuusHRmJvaD6BBgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGNiYTE0MjEtM2ZiOC00YjlkLTg4MjMtNDUwYmMyYTFlYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2uoHGGQLsGNIrbqRm5cpyJ6pGvvYbn6nDjM qcaPHGlGrXEGoPEUBpqaUrduaoTpcVVLFCkwmHoXhb2a34S063lZNRnldJfoMlLT rnI2rSOD3C4WOH8z9dKcq/G6gTMwJg5r5FaLa4NK3XTfsAzK5P2z/DYt92QFKakQ 2k//0lgNPHP+gEMizzy2Cug3KxiWYqMsvo7zhxjQKkEeJYrneH1ZJeN1hSj0avR6 edsg5vOOt1AvnbG2rKPzzA+zaNcV/2wnkrWkkRF2f3Bpvw7LAbWhTBrwQLPl6WrP R3+QcD0lt8O0sArb+tdjeMm0jCvteVVrBp+P8br4AT/pcBNvIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCMLSaeyCjxctPiu6qmjcalzyF9aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzA4MDkxNGQtMzQzMy0z Yjc4LWIyYjYtN2RiMzVjZDkzODI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA2jaRue3omiwWwY+t+Gs9pZblb6xvQfixYNgWLSzzck1nnsMkR/gCjw zDJwZigrRASOjoCePnkWj/A3DGzNiLmvHsaNR0dxDO5u54yuDyEKR2J4inz4hNSX 8GZ6+Kyc+79hFflTkGotg2NIcBo0veg3LlgyVSzBWG3WFZvEGLGeh1GFbxhlQO9A b/dJOftGSHc3ckJ5ue/lHK7mT7eed11yyxhr/nfzPD4k3W1Y6B3uX9Y7cYZNPeNf R87gxxVMVJrr9y4+Nz+Pva4NcItMA0LDEjhHFQWKEJTYswKLnyYuJQaraOYCb0cS ILuhxNihdnwXaBJQTWIrCos8rODKA34= -----END CERTIFICATE-----Generated at Sun Apr 27 02:02:27 2025 by rpki-client