$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa File: c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa (raw, json) Hash identifier: mG3Hys6dHH/kC1ORBn1wqTRAQkPyCvF/EDXW+UzQai4= Subject key identifier: 1F:4E:D1:29:1F:52:FD:18:7F:13:B8:22:20:91:FF:AA:27:F9:D2:D5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA610AE6BEC8668842D340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:61:0a:e6:be:c8:66:88:42:d3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=5a7c305d-0eaf-4bcd-a4d4-af1ee4b18507 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:bd:2b:d0:6e:bb:2b:51:59:67:14:63:ec:39: 4a:f4:e1:6b:a0:bf:78:7c:74:b8:01:18:93:1e:a5: 43:5f:a4:a7:53:1b:bf:af:f6:eb:cd:06:e1:45:2a: b4:e8:7c:4f:24:39:07:62:ac:92:6f:b1:bd:ca:41: 4d:9c:1c:f5:9f:92:14:83:c6:9e:a6:06:8e:f6:0d: ca:64:2b:fa:4e:7f:aa:0c:0a:61:b5:64:3d:d3:1f: 75:46:77:d1:99:4d:ec:53:60:b3:af:fe:38:34:89: a3:eb:08:f7:1d:f9:e0:35:f8:ef:16:16:6c:a4:c3: e7:61:22:c5:01:9b:e6:68:5a:05:b4:d1:ea:91:dd: d0:24:bc:55:2e:68:4d:da:4d:dd:e1:0d:27:8a:ed: 8e:4f:7c:fb:b7:b4:33:04:e5:5b:37:10:30:05:b4: 08:66:52:12:b5:1b:75:c2:be:6f:14:05:5e:ba:78: 56:9e:65:80:bb:89:05:ff:12:28:83:6c:b2:0f:14: 97:b5:c5:cd:bb:c0:e5:c1:aa:98:3f:f7:a3:8f:29: c0:43:47:22:2c:a2:02:49:c4:58:00:3d:42:c5:71: 3f:c9:eb:3b:3d:68:a1:51:1e:23:22:38:15:41:46: 7f:e0:53:e7:ec:39:fd:57:ef:7f:0d:7a:73:8d:08: 05:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:4E:D1:29:1F:52:FD:18:7F:13:B8:22:20:91:FF:AA:27:F9:D2:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:ea:ab:e0:0b:7b:92:0f:83:a2:d8:87:7e:46:ca:01:72:5b: 3f:2b:c7:7f:28:a4:17:63:ab:9a:6b:88:1a:14:4c:4d:30:fb: cc:a3:ef:50:4e:29:16:74:d8:e9:4d:6e:63:ed:5e:00:65:fb: 60:c1:bb:5e:c6:b3:32:bd:7a:0e:bc:19:26:e9:72:e6:ca:5c: 08:5d:9f:9b:5f:21:92:ef:45:4f:f4:b7:63:ec:34:f3:fa:3e: 5a:22:db:68:e6:5c:35:08:30:7a:26:11:0d:d6:c1:9f:75:38: a6:e4:aa:c5:19:89:d3:68:bc:14:a5:10:a3:1e:3d:c3:77:0c: 14:7c:dd:55:90:ce:54:8c:64:b0:72:d6:f9:18:b4:30:ee:48: 40:a3:bf:71:d0:80:25:7f:26:60:d7:f7:9e:a5:a7:eb:d2:48: 03:16:be:96:82:54:9b:3e:22:cd:96:d5:8e:3d:36:8b:97:fe: db:4f:e7:3c:65:0a:69:83:46:ee:6d:9d:73:c3:df:4e:42:f9: 69:ba:2a:f0:10:e3:8c:4c:c3:af:c6:e1:55:1e:41:8c:55:a4: 87:31:08:78:7b:57:8d:1f:4f:e8:79:1e:62:15:87:3a:3d:7e: e5:fc:3c:33:2a:f3:54:5a:1d:e9:36:25:af:42:b3:e5:f7:c6: 3a:3e:77:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumEK5r7IZohC00AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NWE3YzMwNWQtMGVhZi00YmNkLWE0ZDQtYWYxZWU0YjE4NTA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArr0r0G67K1FZZxRj7DlK9OFroL94fHS4ARiT HqVDX6SnUxu/r/brzQbhRSq06HxPJDkHYqySb7G9ykFNnBz1n5IUg8aepgaO9g3K ZCv6Tn+qDAphtWQ90x91RnfRmU3sU2Czr/44NImj6wj3HfngNfjvFhZspMPnYSLF AZvmaFoFtNHqkd3QJLxVLmhN2k3d4Q0niu2OT3z7t7QzBOVbNxAwBbQIZlIStRt1 wr5vFAVeunhWnmWAu4kF/xIog2yyDxSXtcXNu8DlwaqYP/ejjynAQ0ciLKICScRY AD1CxXE/yes7PWihUR4jIjgVQUZ/4FPn7Dn9V+9/DXpzjQgFWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9O0SkfUv0YfxO4IiCR/6on+dLVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzFmNmE3YTYtMDdkYy0z NTRkLTlmYTYtMGExYzRjMTc3ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvqq+ALe5IPg6LYh35GygFyWz8rx38opBdjq5priBoUTE0w+8yj71BO KRZ02OlNbmPtXgBl+2DBu17GszK9eg68GSbpcubKXAhdn5tfIZLvRU/0t2PsNPP6 Ploi22jmXDUIMHomEQ3WwZ91OKbkqsUZidNovBSlEKMePcN3DBR83VWQzlSMZLBy 1vkYtDDuSECjv3HQgCV/JmDX956lp+vSSAMWvpaCVJs+Is2W1Y49NouX/ttP5zxl CmmDRu5tnXPD305C+Wm6KvAQ44xMw6/G4VUeQYxVpIcxCHh7V40fT+h5HmIVhzo9 fuX8PDMq81RaHek2Ja9Cs+X3xjo+d5A= -----END CERTIFICATE-----Generated at Sun Apr 27 01:51:22 2025 by rpki-client