$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa File: dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa (raw, json) Hash identifier: p/22n3pl4zFFM6+wI4CKgyp3vnoOgQeTDvQ8+/nmeTU= Subject key identifier: B2:DF:6C:B5:14:30:BF:A4:26:7E:1A:F5:FE:AA:19:58:9D:95:6A:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEB1C75B99E1D435F5100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.214.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:eb:1c:75:b9:9e:1d:43:5f:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d1ab55f0-6057-4297-999b-038c266c3115 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:62:ad:68:cc:c2:47:a0:21:c7:07:16:a2:01: 19:c2:94:b8:35:98:ac:e7:df:0b:17:aa:7a:41:e0: 9b:76:5f:51:70:74:ed:34:e1:af:52:fa:1c:fe:86: ea:44:a8:da:5c:ac:29:08:ba:4c:f5:6b:11:b0:0b: e4:1b:b1:06:89:b9:b4:e3:83:ac:d3:e3:f1:48:c2: 92:44:41:8b:1b:37:08:4d:01:37:0a:b4:c0:d7:ba: 9b:4d:5a:b2:cd:42:69:e3:39:97:54:b9:77:9b:d1: 35:cc:e8:53:cb:52:5c:89:01:26:74:ee:30:36:5d: 08:71:a9:15:f3:db:2a:1c:22:db:57:db:c2:66:4f: be:d8:12:d8:20:43:7d:7c:d1:2c:bd:5d:06:2e:30: 3b:65:df:22:47:6e:be:e9:b5:d2:d0:ff:01:62:fc: 15:9f:9e:46:0c:54:d8:8e:b6:6c:3d:b6:2b:a9:92: 0f:50:58:da:f5:27:81:63:58:38:74:a2:54:43:94: 9e:06:74:c4:4a:34:fa:fd:bc:eb:4f:a5:ba:f7:39: 73:7b:1a:5a:c2:18:17:de:e7:6d:84:6a:e9:57:41: 6e:c3:ad:f5:18:76:26:34:4d:7e:8b:7f:ba:41:e8: 6b:49:92:d7:59:29:33:ca:61:0c:56:12:7a:3d:50: 97:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DF:6C:B5:14:30:BF:A4:26:7E:1A:F5:FE:AA:19:58:9D:95:6A:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dc49fc26-20a2-316e-b2ca-f517b4cc4a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.214.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:97:40:43:7f:61:76:23:f7:f5:2c:26:fe:5e:c0:9d:dc:5f: b7:ce:34:93:a7:f0:18:1a:46:67:f4:44:ef:65:39:8d:0c:1c: 21:37:8c:1d:24:12:b1:c1:20:ac:05:11:83:d9:cd:c4:f5:e5: 79:ce:88:b8:24:07:e6:b1:55:54:b2:18:09:c4:f6:f3:e2:53: ae:73:1f:1e:ae:34:39:c7:01:ee:50:75:fd:80:ca:4b:ea:d2: 97:14:09:4f:4d:16:26:a3:1e:01:34:bf:3d:45:bc:5a:1d:a4: 53:e9:9e:38:5b:e5:4d:76:b8:c2:73:67:c1:05:96:7f:e2:e8: cc:ec:28:f4:48:cc:e2:0d:b1:68:b5:b2:4f:0a:f8:73:8c:6f: 55:35:18:1f:f4:ff:88:66:c5:17:84:3a:68:69:28:55:fc:6c: b6:0f:41:0f:7c:39:d8:82:ba:d0:41:12:c5:e6:dd:25:09:a0: 3f:2b:36:72:20:ec:37:8d:1b:46:b0:62:d5:08:ec:06:2e:65: 18:bd:a9:fd:ce:ed:f6:05:5c:95:64:e2:d0:d9:a2:64:f5:10: e7:7d:d8:45:0b:f0:5f:44:49:b4:e9:1f:5a:0b:d1:e1:ba:77: 7e:f6:07:b6:e1:59:3c:2a:81:29:c2:fb:0d:5c:fb:15:95:1d: 9d:eb:8f:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuscdbmeHUNfUQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDFhYjU1ZjAtNjA1Ny00Mjk3LTk5OWItMDM4YzI2NmMzMTE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm2KtaMzCR6AhxwcWogEZwpS4NZis598LF6p6 QeCbdl9RcHTtNOGvUvoc/obqRKjaXKwpCLpM9WsRsAvkG7EGibm044Os0+PxSMKS REGLGzcITQE3CrTA17qbTVqyzUJp4zmXVLl3m9E1zOhTy1JciQEmdO4wNl0IcakV 89sqHCLbV9vCZk++2BLYIEN9fNEsvV0GLjA7Zd8iR26+6bXS0P8BYvwVn55GDFTY jrZsPbYrqZIPUFja9SeBY1g4dKJUQ5SeBnTESjT6/bzrT6W69zlzexpawhgX3udt hGrpV0Fuw631GHYmNE1+i3+6QehrSZLXWSkzymEMVhJ6PVCX0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLfbLUUML+kJn4a9f6qGVidlWphMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGM0OWZjMjYtMjBhMi0z MTZlLWIyY2EtZjUxN2I0Y2M0YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmXQEN/YXYj9/UsJv5ewJ3cX7fONJOn8BgaRmf0RO9lOY0MHCE3jB0k ErHBIKwFEYPZzcT15XnOiLgkB+axVVSyGAnE9vPiU65zHx6uNDnHAe5Qdf2Aykvq 0pcUCU9NFiajHgE0vz1FvFodpFPpnjhb5U12uMJzZ8EFln/i6MzsKPRIzOINsWi1 sk8K+HOMb1U1GB/0/4hmxReEOmhpKFX8bLYPQQ98OdiCutBBEsXm3SUJoD8rNnIg 7DeNG0awYtUI7AYuZRi9qf3O7fYFXJVk4tDZomT1EOd92EUL8F9ESbTpH1oL0eG6 d372B7bhWTwqgSnC+w1c+xWVHZ3rj84= -----END CERTIFICATE-----Generated at Mon Apr 28 01:28:12 2025 by rpki-client