$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa File: e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa (raw, json) Hash identifier: gC4smZJKgyiaVPSvr0CHTS1AJOKvswNHxN8BaGQxdtU= Subject key identifier: 5A:30:03:8A:11:05:85:DA:7C:FA:C5:6D:9D:09:89:75:D1:37:C8:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA6043EDED7C9B0CDB5190 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:60:43:ed:ed:7c:9b:0c:db:51:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b89ed22e-786d-416b-9ab3-3abd602ff3cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:7f:4f:d4:ce:c3:9d:26:9a:81:f8:78:1e:84: 13:ba:19:08:03:78:13:3b:d7:91:42:78:03:a2:dd: 27:f0:2e:10:76:3d:7a:b6:1a:f3:e3:c3:06:cd:9d: 94:f5:9c:eb:70:c0:94:bc:6c:02:63:de:e1:d4:4d: 30:48:86:cd:98:9c:3b:ba:72:46:c7:99:ae:41:f7: 32:44:b3:68:ef:96:19:75:d0:e5:4b:fd:85:2d:ab: 2c:df:43:56:22:c6:01:c9:91:fa:c0:9e:c9:0c:06: b1:3b:16:38:32:6c:fd:a4:48:07:49:cf:90:c9:fd: f4:a3:7b:ab:a1:d5:17:64:ec:15:d4:19:a7:4c:37: 99:d1:1c:a7:38:f3:a8:33:52:0e:9f:50:98:56:df: 9e:41:5a:74:56:8f:ef:de:f9:7f:51:56:93:0f:ba: 3a:01:32:52:0c:14:e9:79:14:3d:00:a9:77:2c:b4: c5:80:ab:73:f0:35:74:6d:76:4b:4e:d6:7f:e7:ec: 9f:5a:86:11:2a:e2:dd:9b:a0:9e:2f:4e:1c:46:ba: 85:e1:a6:b5:81:f4:d1:74:61:df:0e:04:10:8a:8d: da:62:48:33:8a:a2:b2:4f:df:60:99:6c:c7:59:c7: 8f:8a:98:a7:a8:6e:c5:23:d6:c0:48:97:a5:61:b1: 03:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:30:03:8A:11:05:85:DA:7C:FA:C5:6D:9D:09:89:75:D1:37:C8:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:c6:15:83:6a:a0:df:2b:6f:1a:22:37:96:b3:ba:b4:f5:d1: ef:04:10:44:c4:5e:98:9f:d7:6d:35:c4:d9:ce:49:f3:a2:83: 17:b8:c7:63:12:7d:91:75:7a:fd:75:0e:f7:70:de:2b:88:88: db:bf:7a:c6:b3:98:5a:b6:f2:6a:d2:3c:92:63:5e:1b:ac:7f: 51:07:45:d5:b2:fd:4e:b6:5b:2d:53:d6:0f:cc:12:bf:af:66: eb:96:16:39:72:d1:c4:40:6d:9f:c2:e9:2b:ff:e2:2b:c7:64: 80:7d:16:8e:a1:c6:f9:99:7a:8a:e6:0d:c0:c2:38:3e:93:d4: b3:fb:98:40:09:8a:92:78:73:63:af:61:b4:65:50:a7:22:04: 52:81:d7:c0:89:80:01:11:8c:b8:39:99:05:60:30:2f:7d:d0: 8f:b8:38:de:ab:91:d0:5e:c2:6c:6e:29:a7:a7:b5:21:f1:8a: d6:03:05:62:4f:bf:da:ae:49:b8:0e:a3:0f:23:72:f4:67:ca: 0e:25:99:12:c3:7f:c1:47:40:f4:51:28:0b:7e:ec:6f:82:3b: 7a:25:0c:57:67:be:26:ca:68:a5:82:c7:ef:87:0b:6d:ca:36: 51:64:e5:52:c4:4e:7d:90:24:00:d8:8d:ea:e0:32:fc:ce:a0: 8b:6a:e8:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumBD7e18mwzbUZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Yjg5ZWQyMmUtNzg2ZC00MTZiLTlhYjMtM2FiZDYwMmZmM2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn9P1M7DnSaagfh4HoQTuhkIA3gTO9eRQngD ot0n8C4Qdj16thrz48MGzZ2U9ZzrcMCUvGwCY97h1E0wSIbNmJw7unJGx5muQfcy RLNo75YZddDlS/2FLass30NWIsYByZH6wJ7JDAaxOxY4Mmz9pEgHSc+Qyf30o3ur odUXZOwV1BmnTDeZ0RynOPOoM1IOn1CYVt+eQVp0Vo/v3vl/UVaTD7o6ATJSDBTp eRQ9AKl3LLTFgKtz8DV0bXZLTtZ/5+yfWoYRKuLdm6CeL04cRrqF4aa1gfTRdGHf DgQQio3aYkgziqKyT99gmWzHWcePipinqG7FI9bASJelYbEDuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFowA4oRBYXafPrFbZ0JiXXRN8hSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTljMWM5ZjEtYjQ2ZC0z ZmRkLTlhNjgtYjVjOGNjMjhmOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHHGFYNqoN8rbxoiN5azurT10e8EEETEXpif1201xNnOSfOigxe4x2MS fZF1ev11Dvdw3iuIiNu/esazmFq28mrSPJJjXhusf1EHRdWy/U62Wy1T1g/MEr+v ZuuWFjly0cRAbZ/C6Sv/4ivHZIB9Fo6hxvmZeormDcDCOD6T1LP7mEAJipJ4c2Ov YbRlUKciBFKB18CJgAERjLg5mQVgMC990I+4ON6rkdBewmxuKaentSHxitYDBWJP v9quSbgOow8jcvRnyg4lmRLDf8FHQPRRKAt+7G+CO3olDFdnvibKaKWCx++HC23K NlFk5VLETn2QJADYjergMvzOoItq6Cc= -----END CERTIFICATE-----Generated at Sun Apr 27 00:41:58 2025 by rpki-client