$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa File: d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa (raw, json) Hash identifier: xCCwLpxEnX4LHaYH6+iyFd8yeZYFG3lJX4zvPoZ/ZrQ= Subject key identifier: A4:F0:22:6E:95:98:9D:49:0E:E4:E1:EB:3B:6D:8E:8C:8B:20:24:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA616710D21646DB582A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:61:67:10:d2:16:46:db:58:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=26a8bcc9-114d-4ae9-92fc-df5116376813 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:74:e0:4e:8c:cf:b8:ae:f6:2f:1f:20:24: 07:9e:60:79:07:a4:fd:11:60:5d:ef:36:37:0f:a3: 8b:86:81:4c:87:fb:03:c7:00:b5:02:d9:96:90:1d: b9:86:15:fe:5e:1b:25:3b:b1:5b:04:45:84:4e:28: 1a:bb:82:20:a3:48:b7:7d:5f:ef:52:33:b4:c1:cc: 87:f4:90:e1:31:10:ef:54:0b:8b:43:87:43:a3:05: 5c:5e:2f:33:dd:f2:5e:ab:23:06:bb:c0:cb:08:88: 6e:a7:9d:a6:39:9a:fd:33:5f:9b:2e:4e:a3:5e:80: 1d:1a:5e:84:87:c5:7d:1d:29:da:23:82:51:ef:72: 46:43:7d:4b:74:b2:fc:13:f2:cb:47:fb:9e:5b:bf: bf:50:80:f7:5b:78:c3:94:fa:48:1d:4e:e2:d8:e1: fd:d5:db:d6:4f:6c:9d:81:d1:66:ab:ff:0a:90:49: 16:f7:e7:54:13:ae:83:40:d4:bc:30:91:66:51:61: 24:4f:ed:7d:0a:9c:73:05:1f:f2:62:26:c0:4b:57: 75:27:3c:7e:5d:4d:55:48:25:94:66:b3:ca:2d:cc: 10:46:db:ca:ac:b4:de:24:94:1c:95:7c:52:9e:c1: d7:0f:41:58:9e:e6:32:4f:9e:7a:ea:f7:b5:f2:11: d5:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F0:22:6E:95:98:9D:49:0E:E4:E1:EB:3B:6D:8E:8C:8B:20:24:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:9c:28:02:d7:4e:18:50:7b:d6:a7:25:10:63:65:69:26:b9: 64:18:44:46:44:5d:2f:9e:3e:10:53:82:a1:c5:4f:17:f4:6c: 11:4e:8a:57:2d:91:a2:77:c6:18:01:35:cc:ed:3b:7b:ca:2d: 58:51:ea:61:f5:63:df:44:eb:70:5a:ab:07:e7:ec:ef:61:a6: 1c:d0:0d:e3:ac:fc:82:9b:33:13:f2:f6:1b:b5:54:69:aa:1b: 3e:ef:b1:0f:c3:ea:b6:59:9e:fb:d7:74:42:02:07:22:d7:89: 01:40:d7:8e:94:70:1c:19:c8:d7:a5:37:7f:dc:c8:11:04:cc: 18:84:12:3b:19:81:60:48:c4:57:02:2d:70:c6:9f:a0:d7:30: 80:64:4a:f6:68:cd:58:ee:2e:93:f3:1e:5c:3e:04:22:99:ad: 63:ba:4c:6f:dc:4a:9f:21:d7:4a:07:36:e2:8d:c5:33:55:68: 87:99:0b:c0:17:83:0c:a3:9f:4e:36:13:fa:a8:9d:47:86:e0: 77:08:fc:08:3d:c2:c4:81:bf:fa:f7:e2:5f:07:93:a1:63:27: 64:d9:81:24:58:15:62:b3:78:19:29:ae:08:f0:aa:a3:a4:48: b0:f1:80:ea:48:f1:a1:98:4f:70:4c:be:e8:7d:cd:49:36:6b: 5a:af:25:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumFnENIWRttYKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MjZhOGJjYzktMTE0ZC00YWU5LTkyZmMtZGY1MTE2Mzc2ODEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxZp04E6Mz7iu9i8fICQHnmB5B6T9EWBd7zY3 D6OLhoFMh/sDxwC1AtmWkB25hhX+XhslO7FbBEWETigau4Igo0i3fV/vUjO0wcyH 9JDhMRDvVAuLQ4dDowVcXi8z3fJeqyMGu8DLCIhup52mOZr9M1+bLk6jXoAdGl6E h8V9HSnaI4JR73JGQ31LdLL8E/LLR/ueW7+/UID3W3jDlPpIHU7i2OH91dvWT2yd gdFmq/8KkEkW9+dUE66DQNS8MJFmUWEkT+19CpxzBR/yYibAS1d1Jzx+XU1VSCWU ZrPKLcwQRtvKrLTeJJQclXxSnsHXD0FYnuYyT5566ve18hHVYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTwIm6VmJ1JDuTh6zttjoyLICTyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDNmY2JkZGMtYmY5ZC0z MjBmLTlkNjUtOWExZWMwNjBlZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL2cKALXThhQe9anJRBjZWkmuWQYREZEXS+ePhBTgqHFTxf0bBFOilct kaJ3xhgBNcztO3vKLVhR6mH1Y99E63Baqwfn7O9hphzQDeOs/IKbMxPy9hu1VGmq Gz7vsQ/D6rZZnvvXdEICByLXiQFA146UcBwZyNelN3/cyBEEzBiEEjsZgWBIxFcC LXDGn6DXMIBkSvZozVjuLpPzHlw+BCKZrWO6TG/cSp8h10oHNuKNxTNVaIeZC8AX gwyjn042E/qonUeG4HcI/Ag9wsSBv/r34l8Hk6FjJ2TZgSRYFWKzeBkprgjwqqOk SLDxgOpI8aGYT3BMvuh9zUk2a1qvJa4= -----END CERTIFICATE-----Generated at Sun Apr 27 11:19:12 2025 by rpki-client