$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa File: ef3bb060-55cf-3033-a86b-5a573f947a0d.roa (raw, json) Hash identifier: ZSAFP5f3/XTOLb4zu/NYsjan05alQ00cAhLdzoChvEA= Subject key identifier: 13:18:7F:48:68:4C:1D:53:C4:7E:03:56:E5:60:17:17:97:E2:B3:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE7BBCA6C1E5C67287380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e7:bb:ca:6c:1e:5c:67:28:73:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=346207e7-35fc-4572-bd99-3a490ae713e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:c2:f4:39:67:f9:32:45:4e:fc:94:3a:7c: c6:3f:ee:f4:14:69:df:67:a7:e2:48:b3:ff:41:ea: 3a:b5:7d:bb:40:cc:69:99:c3:44:7f:db:3c:33:04: c0:71:05:fe:6f:e1:a1:6d:b7:2e:82:92:d1:96:47: 17:f5:17:ed:84:fb:17:7f:fd:04:3e:47:77:4e:da: 71:0c:bf:58:03:22:c8:fe:fc:98:eb:06:97:3a:fd: 07:45:99:12:86:34:93:28:6c:da:56:94:72:28:1f: 2e:cb:b1:af:1f:68:65:79:21:59:03:78:a9:35:10: 05:37:e7:ed:e3:08:a8:a2:22:21:fc:88:19:a0:52: 2b:4a:c3:da:c6:0b:7d:c7:c1:aa:23:7a:46:27:26: 09:e7:75:f0:83:74:71:1d:ed:ab:ac:dd:48:0d:0e: b5:87:0c:9d:d8:f7:84:c8:38:83:e4:d7:fb:3e:89: 89:54:02:42:f5:11:26:c5:04:60:0d:50:d6:e7:e3: 9d:cd:4e:99:95:27:92:b8:cd:7c:34:bc:ea:f8:da: fe:7a:8a:7b:9c:3d:69:36:d5:dd:4b:c6:a3:f0:5f: 08:b4:40:3e:5e:ae:f2:e3:87:c9:b7:40:47:e5:d7: c7:ca:55:69:c5:f7:3c:e4:65:d2:4a:f9:5c:1f:00: 51:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:18:7F:48:68:4C:1D:53:C4:7E:03:56:E5:60:17:17:97:E2:B3:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:97:74:77:14:31:ab:a1:a5:93:f9:27:59:06:89:6b:eb:25: 4a:8a:3c:0c:e8:05:a6:3b:da:8d:41:5e:40:fa:e3:c7:91:d0: 64:1a:9d:40:c0:db:c6:04:5f:9e:b3:63:43:32:a2:9e:dc:d1: 6b:a3:fd:f0:8d:65:78:02:f1:fa:17:68:fb:91:ff:c3:32:00: 8a:b0:dd:3f:26:00:49:5c:05:64:e7:ea:16:68:e9:42:f7:71: 7a:40:2a:eb:96:cc:d6:b3:5e:a3:4b:91:92:4c:4d:5c:c3:45: e0:ef:0a:dd:4d:3b:58:44:d4:6f:f3:38:ca:ea:41:89:f8:9b: 19:e1:2c:32:eb:d5:d2:27:ff:36:82:f0:10:8b:0e:8e:27:05: d7:17:e3:58:ad:d6:97:f2:d1:54:1e:9e:71:8a:cb:65:cf:35: f9:48:81:51:6b:8c:35:9d:0f:f8:12:b3:10:04:da:66:3a:ba: a8:b1:04:c9:57:ea:65:7b:f1:e1:da:dc:52:4a:16:3c:e4:0c: 6f:29:0e:e5:06:d0:12:43:d5:e5:a5:a0:0a:e0:e0:9a:b8:dc: 42:c1:e3:53:fd:d4:94:a6:3c:5b:27:5d:0f:ca:7a:eb:d9:b3: e1:ad:ec:57:b4:a7:e6:5a:39:6f:43:24:79:50:64:3f:ca:10: f5:2e:99:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuue7ymweXGcoc4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzQ2MjA3ZTctMzVmYy00NTcyLWJkOTktM2E0OTBhZTcxM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/C9Dln+TJFTvyUOnzGP+70FGnfZ6fiSLP/ Qeo6tX27QMxpmcNEf9s8MwTAcQX+b+GhbbcugpLRlkcX9RfthPsXf/0EPkd3Ttpx DL9YAyLI/vyY6waXOv0HRZkShjSTKGzaVpRyKB8uy7GvH2hleSFZA3ipNRAFN+ft 4wiooiIh/IgZoFIrSsPaxgt9x8GqI3pGJyYJ53Xwg3RxHe2rrN1IDQ61hwyd2PeE yDiD5Nf7PomJVAJC9REmxQRgDVDW5+OdzU6ZlSeSuM18NLzq+Nr+eop7nD1pNtXd S8aj8F8ItEA+Xq7y44fJt0BH5dfHylVpxfc85GXSSvlcHwBRtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMYf0hoTB1TxH4DVuVgFxeX4rMIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWYzYmIwNjAtNTVjZi0z MDMzLWE4NmItNWE1NzNmOTQ3YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADiXdHcUMauhpZP5J1kGiWvrJUqKPAzoBaY72o1BXkD648eR0GQanUDA 28YEX56zY0Myop7c0Wuj/fCNZXgC8foXaPuR/8MyAIqw3T8mAElcBWTn6hZo6UL3 cXpAKuuWzNazXqNLkZJMTVzDReDvCt1NO1hE1G/zOMrqQYn4mxnhLDLr1dIn/zaC 8BCLDo4nBdcX41it1pfy0VQennGKy2XPNflIgVFrjDWdD/gSsxAE2mY6uqixBMlX 6mV78eHa3FJKFjzkDG8pDuUG0BJD1eWloArg4Jq43ELB41P91JSmPFsnXQ/KeuvZ s+Gt7Fe0p+ZaOW9DJHlQZD/KEPUumW8= -----END CERTIFICATE-----Generated at Sun Apr 27 12:57:37 2025 by rpki-client