$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa File: d197b3d6-542b-36cb-baa2-2b0446a590d4.roa (raw, json) Hash identifier: MCDfdEUA5CZm3KFsFj3qVPAGe/ZWcrdDKg5o6gDdUws= Subject key identifier: 03:F6:90:A1:A5:A0:74:FE:5F:BA:46:D9:9A:24:2F:52:2F:D7:DD:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE8FF6F73357F49B31000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e8:ff:6f:73:35:7f:49:b3:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=039436f8-41cd-41ea-8518-4c1a79eebdc1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:74:a5:bf:68:80:c0:df:f3:0f:24:54:a9:26: b0:49:6d:42:91:ef:47:7d:e6:ac:89:aa:fa:1d:bc: 2f:a2:ea:ef:32:2e:ff:cf:2a:c5:c0:02:31:5e:ab: a6:11:73:98:40:c8:a9:8e:16:ab:2f:4d:16:5e:54: 3f:a1:0e:f9:f8:9a:18:13:78:d3:20:3e:54:c1:96: 4a:e9:d0:61:f1:19:1a:c0:8b:d4:1c:0a:47:1e:3e: 92:a5:ab:c7:98:04:a6:80:92:bf:83:33:3c:6e:35: 73:7a:95:67:f6:a3:a7:60:8e:04:5a:b1:73:ee:71: 1d:ae:e7:18:75:3f:c1:fb:53:fe:52:05:2b:d7:5c: 0b:49:67:f8:9f:eb:24:23:71:f5:e8:ec:8c:04:7f: 48:64:71:60:34:c6:02:00:4f:6f:1f:a9:44:a8:b9: 36:71:dd:dc:2c:cb:5a:a2:af:83:66:7f:20:11:94: 50:b9:8a:4a:09:46:f8:9f:09:70:3e:77:d3:11:ad: 28:2b:81:ae:52:f8:57:39:83:6d:83:63:c6:16:35: 6b:79:62:cc:d3:69:44:25:55:60:d4:42:05:30:b7: 8d:91:c7:fe:af:93:8a:fb:60:09:b4:54:ad:e4:bd: d1:fc:5c:a9:b2:51:1c:02:3f:de:68:48:13:8d:03: 84:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:F6:90:A1:A5:A0:74:FE:5F:BA:46:D9:9A:24:2F:52:2F:D7:DD:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d197b3d6-542b-36cb-baa2-2b0446a590d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:d2:5d:b9:84:1d:9a:c0:c7:af:f7:06:e9:e1:7a:ad:23:f4: 8c:af:e8:d9:c2:95:8b:52:f3:ab:d2:19:42:11:62:80:09:54: a5:c9:bc:f6:9c:7b:b1:87:62:75:ee:0b:69:50:fa:75:0a:75: 39:46:12:48:76:de:8d:e6:1d:b6:a1:45:aa:83:51:3f:ee:a5: 6a:15:23:62:9e:89:51:a4:85:cd:47:36:ba:f1:6f:06:75:a4: 5d:7d:38:e8:76:53:84:42:1b:a5:37:2c:32:1b:e0:6e:f9:88: 9b:ab:8d:32:3c:25:2d:82:f7:2e:4d:86:1f:8c:1d:fc:f5:32: 02:50:9c:57:51:d9:73:55:49:3e:52:4c:20:c8:6a:99:2d:e3: 1b:64:e7:18:12:2d:11:9f:7b:48:9c:1b:fc:7b:c9:ae:b9:0b: 6f:87:a0:df:17:94:ba:25:f4:55:34:b8:d9:64:01:04:47:83: be:e5:33:95:d7:9f:11:66:82:b4:75:09:c7:87:9b:ff:ef:89: 65:e5:c0:b1:f0:dc:80:57:a6:7c:e9:a5:d8:f5:e9:8d:12:00: 08:89:44:be:10:9f:e6:1a:02:7e:38:dd:c8:6c:ae:d0:0c:41: d7:ec:c5:84:56:9d:a5:84:dc:0b:23:de:64:6f:30:58:fa:08: e4:a9:5f:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuj/b3M1f0mzEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDM5NDM2ZjgtNDFjZC00MWVhLTg1MTgtNGMxYTc5ZWViZGMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23Slv2iAwN/zDyRUqSawSW1Cke9Hfeasiar6 HbwvourvMi7/zyrFwAIxXqumEXOYQMipjharL00WXlQ/oQ75+JoYE3jTID5UwZZK 6dBh8RkawIvUHApHHj6SpavHmASmgJK/gzM8bjVzepVn9qOnYI4EWrFz7nEdrucY dT/B+1P+UgUr11wLSWf4n+skI3H16OyMBH9IZHFgNMYCAE9vH6lEqLk2cd3cLMta oq+DZn8gEZRQuYpKCUb4nwlwPnfTEa0oK4GuUvhXOYNtg2PGFjVreWLM02lEJVVg 1EIFMLeNkcf+r5OK+2AJtFSt5L3R/FypslEcAj/eaEgTjQOEYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAP2kKGloHT+X7pG2ZokL1Iv190JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDE5N2IzZDYtNTQyYi0z NmNiLWJhYTItMmIwNDQ2YTU5MGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADLSXbmEHZrAx6/3Bunheq0j9Iyv6NnClYtS86vSGUIRYoAJVKXJvPac e7GHYnXuC2lQ+nUKdTlGEkh23o3mHbahRaqDUT/upWoVI2KeiVGkhc1HNrrxbwZ1 pF19OOh2U4RCG6U3LDIb4G75iJurjTI8JS2C9y5Nhh+MHfz1MgJQnFdR2XNVST5S TCDIapkt4xtk5xgSLRGfe0icG/x7ya65C2+HoN8XlLol9FU0uNlkAQRHg77lM5XX nxFmgrR1CceHm//viWXlwLHw3IBXpnzppdj16Y0SAAiJRL4Qn+YaAn443chsrtAM QdfsxYRWnaWE3Asj3mRvMFj6COSpXwY= -----END CERTIFICATE-----Generated at Sun Apr 27 00:24:57 2025 by rpki-client