$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa File: d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa (raw, json) Hash identifier: Fqt351AEDlgbsy0IoqVffrmR0to2+pWaXkt43sSC/04= Subject key identifier: F2:54:73:FB:0A:FD:2A:52:F2:77:C9:81:A3:0D:9D:42:A8:5A:F4:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA62AB3B61C2B210E48280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:ab:3b:61:c2:b2:10:e4:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=83ee3659-a043-4f0c-903c-dc4bffa35ca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:e8:9a:ed:ef:6b:e4:c3:43:ed:5b:ee:6a:33: 07:66:b1:40:f8:ba:1e:17:db:30:73:ca:12:f1:6c: 05:00:44:e4:51:57:57:49:fe:44:f3:25:e8:dc:cc: 7f:a3:fd:51:5e:c2:6d:93:84:f5:bb:3a:7d:de:ac: 2a:c2:e9:d1:b7:5f:cb:fe:30:54:42:b9:06:21:9b: 2a:98:a2:c4:08:2d:60:24:70:b6:31:48:5a:47:32: 4d:12:2f:32:28:80:ba:94:5f:da:0e:1c:17:6f:06: 17:85:3a:a3:72:b7:ed:42:c0:a1:52:08:71:17:fd: be:33:42:a1:02:98:92:b9:78:04:fe:2e:d2:7e:d2: ec:30:b3:8c:2d:d2:64:4b:a0:3f:95:88:4f:9b:d7: 99:55:19:0d:e2:ed:aa:b0:ca:92:74:e7:e7:fa:c8: 4d:12:5c:32:a2:61:ac:15:09:8c:b1:38:e2:c2:a3: 46:be:32:fb:32:ee:59:7a:22:e5:23:a2:91:db:4d: 92:25:07:3f:46:8c:2e:43:69:0c:95:ea:b0:c8:08: a0:26:ca:53:ea:f7:43:be:7e:6e:f7:c8:3c:19:6c: b3:0b:77:02:a8:48:63:6d:c8:16:06:59:88:1f:dd: 9c:8c:f9:b6:34:5c:ca:f5:07:53:55:35:73:d1:a7: 35:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:54:73:FB:0A:FD:2A:52:F2:77:C9:81:A3:0D:9D:42:A8:5A:F4:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d8b2421e-1f44-30ea-bbe2-059c816eafe7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:c6:0b:e3:3d:f6:50:4a:e9:5f:02:29:29:4c:e8:29:67:44: 4a:b6:c5:f9:9a:75:58:64:c0:ab:6c:25:68:8c:85:95:3c:a2: f5:22:f6:d4:88:b1:d1:36:5b:7b:cb:a7:f8:e7:19:74:1b:ef: bb:05:35:46:e4:b1:23:ea:21:34:f2:41:94:d3:f9:6f:57:81: c7:85:9c:22:29:7e:85:74:fb:6d:b5:3a:8b:53:df:16:e6:31: 0a:b0:cc:fc:f8:d8:de:23:eb:d0:bc:8d:2b:7a:47:64:fd:7a: 58:a9:46:46:13:ee:31:e4:b0:6e:ef:1f:86:9d:f2:d9:09:58: ab:57:92:94:d8:00:4e:a3:84:f4:e6:09:b8:7a:fc:5f:7f:8e: b4:fc:41:05:b0:5f:80:1a:3f:4a:83:0c:0e:20:3b:c1:54:ab: b7:c1:32:03:d6:0a:69:c1:d5:26:23:61:c1:33:6a:59:12:93: 7d:6f:83:ec:9e:bc:d5:2e:97:fe:73:d2:9a:63:9b:69:ee:9a: 1b:46:21:01:e8:2a:03:56:9d:02:ca:0b:ba:fe:74:15:b5:b3: d0:07:7e:01:5b:6e:2d:5f:a3:5a:2b:22:b5:71:ad:a6:6e:5d: 29:c0:c1:ac:4c:4b:db:fe:ee:65:d0:c7:61:07:81:fb:db:e4: c8:c5:85:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumKrO2HCshDkgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODNlZTM2NTktYTA0My00ZjBjLTkwM2MtZGM0YmZmYTM1Y2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+ia7e9r5MND7VvuajMHZrFA+LoeF9swc8oS 8WwFAETkUVdXSf5E8yXo3Mx/o/1RXsJtk4T1uzp93qwqwunRt1/L/jBUQrkGIZsq mKLECC1gJHC2MUhaRzJNEi8yKIC6lF/aDhwXbwYXhTqjcrftQsChUghxF/2+M0Kh ApiSuXgE/i7SftLsMLOMLdJkS6A/lYhPm9eZVRkN4u2qsMqSdOfn+shNElwyomGs FQmMsTjiwqNGvjL7Mu5ZeiLlI6KR202SJQc/RowuQ2kMleqwyAigJspT6vdDvn5u 98g8GWyzC3cCqEhjbcgWBlmIH92cjPm2NFzK9QdTVTVz0ac1BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJUc/sK/SpS8nfJgaMNnUKoWvRdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDhiMjQyMWUtMWY0NC0z MGVhLWJiZTItMDU5YzgxNmVhZmU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvGC+M99lBK6V8CKSlM6ClnREq2xfmadVhkwKtsJWiMhZU8ovUi9tSI sdE2W3vLp/jnGXQb77sFNUbksSPqITTyQZTT+W9XgceFnCIpfoV0+221OotT3xbm MQqwzPz42N4j69C8jSt6R2T9elipRkYT7jHksG7vH4ad8tkJWKtXkpTYAE6jhPTm Cbh6/F9/jrT8QQWwX4AaP0qDDA4gO8FUq7fBMgPWCmnB1SYjYcEzalkSk31vg+ye vNUul/5z0ppjm2numhtGIQHoKgNWnQLKC7r+dBW1s9AHfgFbbi1fo1orIrVxraZu XSnAwaxMS9v+7mXQx2EHgfvb5MjFhWI= -----END CERTIFICATE-----Generated at Sun Apr 27 21:35:35 2025 by rpki-client