$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa File: daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa (raw, json) Hash identifier: AIJEmjdPsL06UFJWLmCDHoGUA0LL9hKR2yOtHvPkiYM= Subject key identifier: 76:1C:FE:B1:53:F5:0A:52:61:97:F5:C4:F4:37:25:37:B6:61:6A:D4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADB7CD4DE677594C27E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 72.173.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:db:7c:d4:de:67:75:94:c2:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4d631e7a-fa97-4c72-b9ad-33c2f6a58c1a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:67:f0:ec:22:f1:55:75:49:8d:1b:67:70:26: 01:ed:ac:de:ed:6d:c4:78:ea:fb:d2:1b:57:9d:ec: 3b:8d:d4:d4:b1:22:3b:41:f2:6a:8f:e2:5c:75:cd: c8:1e:db:21:07:6f:ce:9c:52:de:9b:8d:cb:d8:b1: 14:a6:3b:7f:16:70:ee:fc:dc:04:27:22:b7:6e:e1: 78:68:5e:4b:72:8b:76:9e:41:df:5a:a1:01:05:12: 70:6d:d3:5d:f2:d1:7d:68:f3:9d:58:fe:7e:97:8d: 00:44:10:24:c4:b0:52:ae:4b:57:04:06:de:d9:31: ee:ee:8b:18:41:c5:41:56:99:bd:be:17:f0:43:f4: 65:24:b6:69:6c:6c:c7:42:ad:54:58:31:d6:bb:90: c5:9c:1b:43:b9:4d:5e:47:b0:a0:21:65:a3:5b:8f: 35:e4:c8:42:86:25:9a:14:33:0f:1f:03:06:08:4e: 84:4d:20:c5:04:fd:2e:90:76:b0:d2:8c:6b:03:f5: 2d:56:a0:03:f4:df:20:bd:74:ee:f2:af:f2:2f:f5: 0d:39:b1:35:6b:ad:55:95:34:93:48:48:ee:37:63: f0:4a:c3:20:3b:04:cf:13:c6:94:42:aa:1f:f2:84: 67:2c:8c:ac:0d:6b:5b:48:b8:12:9c:ba:91:27:e9: ec:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:FE:B1:53:F5:0A:52:61:97:F5:C4:F4:37:25:37:B6:61:6A:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:94:df:c5:4c:78:36:3a:a3:8e:25:75:8e:c1:80:9f:c5:44: 26:06:a5:ac:3c:55:d9:3e:48:25:17:8a:5b:36:c4:0f:24:17: ba:24:04:0d:69:59:fc:90:c9:46:02:46:65:ba:cc:77:25:f6: c9:e0:6d:46:1d:72:d3:79:89:f7:8a:61:24:bf:f3:8b:10:1a: b7:f8:5a:77:9b:11:5b:14:64:75:c6:e3:e4:1a:ea:e7:b0:93: 93:47:1f:32:df:34:59:e5:f6:de:a7:4e:1e:08:92:f8:4e:9e: fd:65:99:20:38:aa:76:c2:bb:4a:4c:e2:ce:60:21:f4:cf:8f: 38:3d:b7:e6:47:1a:1d:5e:cb:f1:99:a8:79:28:d2:49:02:95: b3:9d:e7:44:aa:78:91:95:86:1d:6e:a3:8d:ac:8a:db:02:1d: e0:1e:77:ab:40:cf:59:6f:bb:9c:18:57:a6:bd:bd:25:0c:26: 97:70:d1:21:40:56:06:d5:b3:eb:d8:78:86:29:87:42:43:f9: 7e:33:4d:18:3d:68:18:15:6e:21:7d:83:ff:47:45:5a:30:e5: f0:38:d8:66:3f:5a:cd:58:ca:05:dd:3e:50:ae:03:03:aa:bf: 9d:a2:2e:aa:70:2c:24:2a:89:36:78:cb:92:42:63:46:01:7c: 06:b8:d8:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkutt81N5ndZTCfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGQ2MzFlN2EtZmE5Ny00YzcyLWI5YWQtMzNjMmY2YTU4YzFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGfw7CLxVXVJjRtncCYB7aze7W3EeOr70htX new7jdTUsSI7QfJqj+Jcdc3IHtshB2/OnFLem43L2LEUpjt/FnDu/NwEJyK3buF4 aF5Lcot2nkHfWqEBBRJwbdNd8tF9aPOdWP5+l40ARBAkxLBSrktXBAbe2THu7osY QcVBVpm9vhfwQ/RlJLZpbGzHQq1UWDHWu5DFnBtDuU1eR7CgIWWjW4815MhChiWa FDMPHwMGCE6ETSDFBP0ukHaw0oxrA/UtVqAD9N8gvXTu8q/yL/UNObE1a61VlTST SEjuN2PwSsMgOwTPE8aUQqof8oRnLIysDWtbSLgSnLqRJ+nsTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHYc/rFT9QpSYZf1xPQ3JTe2YWrUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGFlYzQzOWItNjU0Zi0z YzNlLWFkY2ItMmEwMmE5YTRhYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeU38VMeDY6o44ldY7BgJ/FRCYGpaw8Vdk+SCUXils2xA8kF7okBA1p WfyQyUYCRmW6zHcl9sngbUYdctN5ifeKYSS/84sQGrf4WnebEVsUZHXG4+Qa6uew k5NHHzLfNFnl9t6nTh4IkvhOnv1lmSA4qnbCu0pM4s5gIfTPjzg9t+ZHGh1ey/GZ qHko0kkClbOd50SqeJGVhh1uo42sitsCHeAed6tAz1lvu5wYV6a9vSUMJpdw0SFA VgbVs+vYeIYph0JD+X4zTRg9aBgVbiF9g/9HRVow5fA42GY/Ws1YygXdPlCuAwOq v52iLqpwLCQqiTZ4y5JCY0YBfAa42Po= -----END CERTIFICATE-----Generated at Sun Apr 27 10:41:19 2025 by rpki-client