$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa File: d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa (raw, json) Hash identifier: D9NmjYyi6LEzU5ezW1A1eajf4VwVtAEBOd8sYw4lS1g= Subject key identifier: 84:BD:A0:6C:EC:D7:C4:71:B5:CF:9C:71:2E:C3:51:CC:84:07:6A:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA6261852561D5279CD400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:61:85:25:61:d5:27:9c:d4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d52a13c9-f1ae-4f24-8213-38ba67b083d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:7e:3c:9c:9d:51:3a:9f:13:d1:76:26:71:7a: 1d:f4:55:f7:ff:0f:6f:fe:45:9b:99:33:a4:12:99: 0a:0d:5c:1b:c2:7f:cd:5a:9a:11:99:47:4b:61:a3: 51:4e:8c:72:00:26:5d:cd:21:02:c0:8e:9f:a8:40: 18:16:ab:b2:28:71:54:84:70:58:2b:2f:49:37:97: 1b:ff:4d:68:5c:bb:10:a3:8d:5a:b5:66:ae:c2:9b: 84:bd:27:1f:d7:13:24:53:cf:66:db:e2:0b:ff:a8: 28:69:20:b6:87:8e:ec:d4:02:05:64:55:70:b0:c8: 88:b6:57:6c:33:a4:9c:a9:72:0d:7a:71:5e:4d:c2: 55:0b:b7:ca:5e:af:77:3e:fc:b1:34:c0:69:b6:27: 3c:1e:b0:bf:0e:57:62:22:f7:7e:9f:8c:24:0b:e9: 78:e5:bd:b9:91:1e:87:c5:ee:df:c0:87:33:49:3a: a9:46:8c:b3:96:99:d0:76:89:a7:6e:59:52:02:0b: ca:07:6d:f8:3f:ba:ef:7c:77:f7:42:54:cc:7a:c3: 87:ac:fa:84:c9:e7:80:98:a3:c2:a9:10:5e:08:80: cb:f3:4e:9f:a6:8e:ef:e6:09:b9:b0:91:a0:68:05: ae:ee:7a:60:34:ca:48:e2:e5:8f:c0:85:0c:50:47: 81:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:BD:A0:6C:EC:D7:C4:71:B5:CF:9C:71:2E:C3:51:CC:84:07:6A:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9faeabf-b8be-3904-9124-0c5c3fc442b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:65:4c:09:2f:be:c1:9f:b6:d4:72:9e:1a:1d:db:e3:f8:a7: dc:2e:ff:78:3c:26:3f:a9:94:df:07:91:fe:9e:87:44:85:58: bf:3d:89:8d:0e:e4:53:6c:86:d8:d2:03:a6:aa:a9:e0:ff:4e: 79:39:21:36:6e:d3:38:84:2f:8f:17:08:80:5d:96:8d:1d:22: 9d:6e:10:59:0f:9e:ce:f1:08:e9:17:37:7b:4a:e9:9f:a3:09: 69:3d:1c:9a:ab:b2:68:44:c3:4d:c3:49:f4:34:bf:6d:71:61: f5:79:38:f9:1a:7a:27:e5:cf:99:84:f6:4f:6c:3a:aa:b0:41: 70:f9:95:df:b8:a8:f9:ad:70:39:6d:22:4a:a4:3c:76:7c:4d: a2:af:39:30:83:b4:3b:6b:c0:32:44:67:93:3e:9a:82:41:f6: 2a:3f:2c:ce:6a:ee:1a:b2:8f:40:da:cb:ec:1a:d2:af:73:66: aa:a6:29:9f:76:34:af:43:14:ef:1f:6d:04:df:49:17:b6:0c: 5a:77:6a:82:71:e8:a2:9f:6b:6d:39:ea:b2:e0:b1:f3:bb:e6: e0:39:8f:8b:bb:63:e8:0a:68:90:ca:48:20:c4:a0:05:b5:66: be:45:e9:b3:3b:d5:46:1a:2e:b9:06:9d:55:b3:60:02:05:41: 84:07:66:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumJhhSVh1Sec1AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDUyYTEzYzktZjFhZS00ZjI0LTgyMTMtMzhiYTY3YjA4M2Q1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt348nJ1ROp8T0XYmcXod9FX3/w9v/kWbmTOk EpkKDVwbwn/NWpoRmUdLYaNRToxyACZdzSECwI6fqEAYFquyKHFUhHBYKy9JN5cb /01oXLsQo41atWauwpuEvScf1xMkU89m2+IL/6goaSC2h47s1AIFZFVwsMiItlds M6ScqXINenFeTcJVC7fKXq93PvyxNMBptic8HrC/DldiIvd+n4wkC+l45b25kR6H xe7fwIczSTqpRoyzlpnQdomnbllSAgvKB234P7rvfHf3QlTMesOHrPqEyeeAmKPC qRBeCIDL806fpo7v5gm5sJGgaAWu7npgNMpI4uWPwIUMUEeB4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIS9oGzs18Rxtc+ccS7DUcyEB2rfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDlmYWVhYmYtYjhiZS0z OTA0LTkxMjQtMGM1YzNmYzQ0MmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNlTAkvvsGfttRynhod2+P4p9wu/3g8Jj+plN8Hkf6eh0SFWL89iY0O 5FNshtjSA6aqqeD/Tnk5ITZu0ziEL48XCIBdlo0dIp1uEFkPns7xCOkXN3tK6Z+j CWk9HJqrsmhEw03DSfQ0v21xYfV5OPkaeiflz5mE9k9sOqqwQXD5ld+4qPmtcDlt IkqkPHZ8TaKvOTCDtDtrwDJEZ5M+moJB9io/LM5q7hqyj0Day+wa0q9zZqqmKZ92 NK9DFO8fbQTfSRe2DFp3aoJx6KKfa2056rLgsfO75uA5j4u7Y+gKaJDKSCDEoAW1 Zr5F6bM71UYaLrkGnVWzYAIFQYQHZsM= -----END CERTIFICATE-----Generated at Sun Apr 27 12:50:52 2025 by rpki-client