$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c82b9149-06c9-311a-ad6d-f180e960971d.roa File: c82b9149-06c9-311a-ad6d-f180e960971d.roa (raw, json) Hash identifier: MEbo0TIk+uK6XCWDKGAkEk917Jv6Y39m2TbiQmvX0z4= Subject key identifier: 98:39:B5:18:35:21:F4:F5:2D:A1:FB:67:32:27:AA:DC:20:F0:FF:D6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5F7D01972213BF334C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c82b9149-06c9-311a-ad6d-f180e960971d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5f:7d:01:97:22:13:bf:33:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0db2e11c-49af-4f5b-ade8-02ff043e9689 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:b5:e6:74:40:ae:9f:bb:41:29:18:eb:a9:49: d1:ae:1d:b6:e9:b0:1b:0c:84:4f:a6:a2:3c:c8:d6: 20:e5:fd:b0:c5:dc:d9:8f:ec:33:1f:d6:e6:7f:10: 7c:4d:21:38:a3:86:c5:1f:1c:f5:4b:65:ff:ca:e1: f2:92:a2:b6:86:6e:07:6a:9a:e9:92:07:51:eb:4a: d0:c9:a5:22:6a:60:dd:88:28:85:42:89:58:1e:fc: 85:53:6e:a6:e5:8c:ec:9a:34:da:e1:19:ce:b5:2a: 14:75:4b:59:28:ca:8d:51:a3:8f:e2:a0:e4:74:3f: d4:af:60:ea:61:10:ff:dd:63:ee:0f:a0:99:2c:98: c2:37:dd:25:9a:8b:be:e4:89:e6:6b:60:b2:e1:8f: 04:59:e4:c1:4d:d7:e7:67:9a:f0:85:25:a0:05:8c: 6f:28:9c:7d:f2:f5:22:83:54:05:63:6a:d5:36:77: 8d:b2:fe:26:ec:c1:40:d8:f7:2a:e2:20:10:0c:95: 93:d3:26:38:cf:66:55:be:b8:d9:37:7f:57:b7:f5: 86:69:ce:82:20:66:41:2f:66:69:a1:53:9f:89:b0: 18:8a:f2:66:b3:37:29:02:33:d8:ce:d3:1c:61:d5: ce:09:71:8d:22:16:ca:b3:f8:7c:7c:8d:c5:21:55: 56:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:39:B5:18:35:21:F4:F5:2D:A1:FB:67:32:27:AA:DC:20:F0:FF:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c82b9149-06c9-311a-ad6d-f180e960971d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:9b:c3:b9:e6:e7:02:10:d2:43:2d:7f:51:67:be:6b:af:3e: 1c:47:6b:3c:e0:24:c2:c4:ee:58:97:54:8b:f7:79:11:c3:fd: 3c:94:b8:a6:6b:c3:18:f5:bd:16:ff:93:28:ab:37:7d:cc:9d: f7:17:e8:72:04:cd:50:8c:66:25:d7:fd:f2:01:ae:63:7e:65: 84:21:d4:0d:04:04:2c:da:b2:68:32:34:c7:d5:ca:bf:ff:2a: d3:79:d3:43:e8:4b:b5:99:5a:c1:e7:8b:25:6b:1e:d2:64:61: 13:fd:e0:4c:d2:4b:29:16:78:7e:64:4b:b9:ee:b1:30:0a:43: 51:ad:75:5a:57:b1:74:8f:c4:f5:99:1e:c2:3d:44:09:58:5c: 2e:13:ad:c8:71:e7:90:71:8d:eb:13:87:4d:8e:3d:e5:cd:92: 52:40:81:a3:37:34:35:6b:a8:38:d5:71:0b:76:e4:9d:d2:96: 9c:15:00:71:2d:04:89:c7:a7:f5:8f:9b:af:86:b2:40:8a:56: af:5e:49:f2:99:0d:eb:c0:f8:47:3b:b3:a4:89:2a:c9:7e:e2: 52:0e:be:d4:af:f8:9a:f4:db:a7:c2:7f:63:87:5b:20:f8:4c: 92:24:5f:8e:fc:86:0d:b6:95:64:43:33:ab:b4:ab:f8:d8:38: b3:6d:6c:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul99AZciE78zTAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGRiMmUxMWMtNDlhZi00ZjViLWFkZTgtMDJmZjA0M2U5Njg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrXmdECun7tBKRjrqUnRrh226bAbDIRPpqI8 yNYg5f2wxdzZj+wzH9bmfxB8TSE4o4bFHxz1S2X/yuHykqK2hm4HaprpkgdR60rQ yaUiamDdiCiFQolYHvyFU26m5YzsmjTa4RnOtSoUdUtZKMqNUaOP4qDkdD/Ur2Dq YRD/3WPuD6CZLJjCN90lmou+5Inma2Cy4Y8EWeTBTdfnZ5rwhSWgBYxvKJx98vUi g1QFY2rVNneNsv4m7MFA2Pcq4iAQDJWT0yY4z2ZVvrjZN39Xt/WGac6CIGZBL2Zp oVOfibAYivJmszcpAjPYztMcYdXOCXGNIhbKs/h8fI3FIVVWVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJg5tRg1IfT1LaH7ZzInqtwg8P/WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzgyYjkxNDktMDZjOS0z MTFhLWFkNmQtZjE4MGU5NjA5NzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALabw7nm5wIQ0kMtf1FnvmuvPhxHazzgJMLE7liXVIv3eRHD/TyUuKZr wxj1vRb/kyirN33MnfcX6HIEzVCMZiXX/fIBrmN+ZYQh1A0EBCzasmgyNMfVyr// KtN500PoS7WZWsHniyVrHtJkYRP94EzSSykWeH5kS7nusTAKQ1GtdVpXsXSPxPWZ HsI9RAlYXC4Trchx55BxjesTh02OPeXNklJAgaM3NDVrqDjVcQt25J3SlpwVAHEt BInHp/WPm6+GskCKVq9eSfKZDevA+Ec7s6SJKsl+4lIOvtSv+Jr026fCf2OHWyD4 TJIkX478hg22lWRDM6u0q/jYOLNtbAA= -----END CERTIFICATE-----Generated at Sun Apr 27 05:41:41 2025 by rpki-client