$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa File: d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa (raw, json) Hash identifier: gBisnJFGXWI211jOTr6d9vTBuevzh95lyZkk1d9plPQ= Subject key identifier: 80:C0:A4:98:10:1E:4A:F3:B5:40:AE:95:7B:E7:FE:AA:AF:A1:7E:62 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE7659AE899F7EF0E1800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e7:65:9a:e8:99:f7:ef:0e:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=171b803c-c65b-4c77-bc97-a40ba8cf9a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:5f:67:cb:1d:d5:60:47:19:46:0d:3c:4a:d0: bb:42:7b:c5:3a:44:9a:95:a9:75:57:35:62:d5:8a: 91:c4:6f:7c:09:c5:19:2a:c7:79:fd:cb:8b:f6:99: 3b:98:07:cb:61:3f:1d:fd:50:1a:a2:0d:98:8f:61: cc:36:4b:a9:31:50:f7:94:67:a3:20:85:4b:bc:26: 1f:31:2e:cd:45:02:74:0b:66:2d:f3:fe:07:af:6b: 11:f9:c3:a8:bf:14:0b:b0:7d:91:5d:3c:cf:c1:7c: df:33:9f:d0:04:11:d1:69:32:32:49:2b:c7:7b:3a: e1:02:0f:24:64:c2:77:b5:80:36:1d:58:23:3f:be: 10:4f:39:dd:6e:0f:56:81:2f:06:56:d3:19:d2:90: 55:d4:1c:e8:c5:98:12:c5:b4:47:2a:a4:80:50:b1: 27:2f:5c:35:66:c8:a7:15:41:46:ee:33:b0:92:0c: 25:75:20:25:5e:fc:e0:94:cc:39:f4:b8:64:de:3f: f9:c7:24:47:be:c3:1b:8b:c7:c8:f0:d5:79:17:d0: ed:a2:8c:56:21:32:f9:43:d3:15:7a:aa:b9:89:ea: 5b:6c:86:cc:05:5c:82:0b:e5:b2:45:81:4b:4f:15: 8d:52:c9:e7:6e:bd:03:15:24:38:08:a3:ac:2b:78: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C0:A4:98:10:1E:4A:F3:B5:40:AE:95:7B:E7:FE:AA:AF:A1:7E:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:6d:6f:f8:ca:15:30:74:e4:08:38:07:aa:e8:48:ff:0b:fb: c0:0b:b2:79:a9:7c:c5:a2:c5:4f:53:6d:3f:ea:8c:cb:29:c6: 56:89:86:cc:19:1e:94:46:da:00:92:46:6d:0e:99:42:ec:5b: db:c8:6e:88:56:c3:cb:47:f2:b9:2b:e3:12:5f:82:0f:07:c5: f9:87:bc:03:d4:10:f8:12:b0:f2:1d:09:50:e2:3c:a3:f2:01: 4f:7a:39:2c:1b:c7:34:0f:a1:bb:3f:c9:77:34:8a:14:d7:6a: ac:35:4d:bf:f6:6a:2e:be:d4:a7:11:f8:2f:d6:b0:ab:1b:53: b8:e6:06:10:62:53:20:bd:da:fc:88:f8:57:fb:7e:a5:0f:51: 8e:7d:55:fd:d7:dc:fc:07:41:0b:50:2a:bc:bf:62:4d:55:f0: d1:40:39:9a:59:5f:d2:28:b5:4a:f4:ac:4e:2a:54:90:5e:a2: 64:9b:c3:94:1e:3e:ba:73:64:be:d1:c4:1d:86:f7:ce:8d:d3: f6:20:d2:12:c8:02:b5:db:c3:d0:dc:6e:91:ce:51:39:05:c1: b7:2a:33:bf:b7:c3:77:ee:fd:83:e5:1e:0e:77:23:7e:54:c5: 5c:7a:2e:64:e7:01:fc:34:ca:23:a4:21:52:c0:38:0f:2f:b5: 7c:9c:dc:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuudlmuiZ9+8OGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTcxYjgwM2MtYzY1Yi00Yzc3LWJjOTctYTQwYmE4Y2Y5YThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu19nyx3VYEcZRg08StC7QnvFOkSalal1VzVi 1YqRxG98CcUZKsd5/cuL9pk7mAfLYT8d/VAaog2Yj2HMNkupMVD3lGejIIVLvCYf MS7NRQJ0C2Yt8/4Hr2sR+cOovxQLsH2RXTzPwXzfM5/QBBHRaTIySSvHezrhAg8k ZMJ3tYA2HVgjP74QTzndbg9WgS8GVtMZ0pBV1BzoxZgSxbRHKqSAULEnL1w1Zsin FUFG7jOwkgwldSAlXvzglMw59Lhk3j/5xyRHvsMbi8fI8NV5F9DtooxWITL5Q9MV eqq5iepbbIbMBVyCC+WyRYFLTxWNUsnnbr0DFSQ4CKOsK3gzewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDApJgQHkrztUCulXvn/qqvoX5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDIwMDQ3ZTctMmE2MC0z M2ZkLTg2YjgtY2IwMGJkNTk1MWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFZtb/jKFTB05Ag4B6roSP8L+8ALsnmpfMWixU9TbT/qjMspxlaJhswZ HpRG2gCSRm0OmULsW9vIbohWw8tH8rkr4xJfgg8HxfmHvAPUEPgSsPIdCVDiPKPy AU96OSwbxzQPobs/yXc0ihTXaqw1Tb/2ai6+1KcR+C/WsKsbU7jmBhBiUyC92vyI +Ff7fqUPUY59Vf3X3PwHQQtQKry/Yk1V8NFAOZpZX9IotUr0rE4qVJBeomSbw5Qe PrpzZL7RxB2G986N0/Yg0hLIArXbw9DcbpHOUTkFwbcqM7+3w3fu/YPlHg53I35U xVx6LmTnAfw0yiOkIVLAOA8vtXyc3JQ= -----END CERTIFICATE-----Generated at Sun Apr 27 02:02:11 2025 by rpki-client