$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f10da2ad-48bf-316a-aa25-d5236150ce21.roa File: f10da2ad-48bf-316a-aa25-d5236150ce21.roa (raw, json) Hash identifier: ILXC7Z8NIOHlW1cRXQLkO2JScT/8LdBhiiCVKHDC2vc= Subject key identifier: B7:CF:90:E7:93:6A:AF:8A:13:11:2D:44:5D:B2:78:72:59:59:E2:5A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BADA35E9F258A0640169E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f10da2ad-48bf-316a-aa25-d5236150ce21.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 72.173.176.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:da:35:e9:f2:58:a0:64:01:69:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=9ee040af-ba95-46de-830a-8bc0d9f12a7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:45:da:b7:5a:ed:16:a5:d0:bf:17:0b:e9:f4: 7f:f2:88:67:0b:1d:e6:f7:6e:bf:e6:c1:2d:53:9e: 8e:f2:12:f7:17:d5:10:8c:45:ab:8f:6c:ad:02:55: 82:9b:79:00:79:94:ff:34:88:e4:88:72:8d:4c:33: 9b:18:37:e1:ce:67:cb:20:f8:05:1b:bf:bc:07:44: 8d:bc:58:cb:db:c3:42:fe:58:1d:01:77:77:ba:a9: 7a:09:86:8e:c6:71:5e:3f:9b:97:71:be:a6:b9:34: 57:85:49:59:48:08:9c:9c:9b:84:aa:1f:40:fc:69: db:e8:e0:91:f0:ab:26:8e:ed:2c:9a:8c:d9:65:c4: 1f:cd:f4:14:df:7c:db:40:50:2f:98:36:b6:09:73: 2a:55:db:48:23:81:0f:a1:40:86:3a:97:26:e1:03: dc:2c:e3:7b:84:55:7e:f3:39:e2:93:6f:9c:c7:e8: c8:a8:4f:35:6d:38:9e:86:12:7a:59:49:f7:52:6e: fe:75:59:52:3e:28:6f:a6:dc:4a:3f:31:79:96:8d: e1:1d:41:d5:f1:73:f8:38:d1:0b:07:d5:98:4a:c4: 91:4a:78:1c:4a:97:23:49:13:da:b3:a6:17:2d:b6: ca:c4:8b:5e:39:53:21:b9:4e:0d:b6:30:9c:24:d3: b0:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:CF:90:E7:93:6A:AF:8A:13:11:2D:44:5D:B2:78:72:59:59:E2:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f10da2ad-48bf-316a-aa25-d5236150ce21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.176.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:f7:58:bd:a6:13:01:49:66:06:86:ec:b1:f3:b8:d7:cd:10: 5e:d6:4c:d6:4e:e8:b2:be:af:d9:d7:a9:99:b9:2f:42:f6:d8: d7:8b:a3:b1:3e:6a:00:25:17:22:55:25:1d:da:27:02:49:85: ab:0e:e6:2e:de:9b:cb:d3:fe:18:3a:68:08:fb:c0:a2:5e:04: b7:95:20:42:10:ac:c1:19:bf:2d:80:9c:89:2f:c2:54:e0:ab: fb:8d:c9:16:9c:3e:98:a7:d0:83:66:ae:96:e6:ad:7c:c7:64: f8:34:95:33:11:9b:06:95:65:64:1c:ad:f0:17:f3:24:ae:48: 47:c0:d5:cf:6a:6f:08:86:80:fb:fd:96:60:0a:78:22:ed:fe: 0e:c1:2a:fd:f1:01:5c:a3:17:69:a0:93:51:dd:5e:d3:60:f4: 2a:e9:1d:67:14:f5:56:38:2a:3e:e8:4b:2c:3d:92:c1:c1:ec: 9e:13:62:f4:42:15:12:10:24:08:d2:eb:81:ed:c6:e5:da:5c: e2:ff:c9:90:c4:e3:89:2e:4e:85:76:eb:c8:fd:77:a3:36:1b: db:dc:9b:7d:c1:18:55:51:27:15:df:1f:bf:38:e7:63:25:ec: 70:e9:08:07:dc:b9:1a:38:71:c1:70:92:1a:d5:40:fb:d1:cc: da:fa:74:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuto16fJYoGQBaeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OWVlMDQwYWYtYmE5NS00NmRlLTgzMGEtOGJjMGQ5ZjEyYTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUXat1rtFqXQvxcL6fR/8ohnCx3m926/5sEt U56O8hL3F9UQjEWrj2ytAlWCm3kAeZT/NIjkiHKNTDObGDfhzmfLIPgFG7+8B0SN vFjL28NC/lgdAXd3uql6CYaOxnFeP5uXcb6muTRXhUlZSAicnJuEqh9A/Gnb6OCR 8Ksmju0smozZZcQfzfQU33zbQFAvmDa2CXMqVdtII4EPoUCGOpcm4QPcLON7hFV+ 8znik2+cx+jIqE81bTiehhJ6WUn3Um7+dVlSPihvptxKPzF5lo3hHUHV8XP4ONEL B9WYSsSRSngcSpcjSRPas6YXLbbKxIteOVMhuU4NtjCcJNOwSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfPkOeTaq+KExEtRF2yeHJZWeJaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjEwZGEyYWQtNDhiZi0z MTZhLWFhMjUtZDUyMzYxNTBjZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSK2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANb3WL2mEwFJZgaG7LHzuNfNEF7WTNZO6LK+r9nXqZm5L0L22NeLo7E+ agAlFyJVJR3aJwJJhasO5i7em8vT/hg6aAj7wKJeBLeVIEIQrMEZvy2AnIkvwlTg q/uNyRacPpin0INmrpbmrXzHZPg0lTMRmwaVZWQcrfAX8ySuSEfA1c9qbwiGgPv9 lmAKeCLt/g7BKv3xAVyjF2mgk1HdXtNg9CrpHWcU9VY4Kj7oSyw9ksHB7J4TYvRC FRIQJAjS64HtxuXaXOL/yZDE44kuToV268j9d6M2G9vcm33BGFVRJxXfH78452Ml 7HDpCAfcuRo4ccFwkhrVQPvRzNr6dJc= -----END CERTIFICATE-----Generated at Sun Apr 27 04:10:19 2025 by rpki-client