$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4c82cdd-4849-3974-853f-c12a013145db.roa File: f4c82cdd-4849-3974-853f-c12a013145db.roa (raw, json) Hash identifier: K4ogMHlvi6EIujhkX2y7X2BIsVs+QYC8msP1r9HwszQ= Subject key identifier: FD:67:7C:BA:84:80:69:BC:B7:09:A5:51:32:3B:7A:65:09:C9:22:2F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEB9897C8DF31F2DEDC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4c82cdd-4849-3974-853f-c12a013145db.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:eb:98:97:c8:df:31:f2:de:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=09987599-30fc-4b70-951f-87caf2de8b85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:87:3a:7c:67:99:68:0f:ec:4f:e2:ca:e2:dc: b4:46:fc:d0:86:31:c0:9a:60:24:a3:fe:9a:22:17: 21:83:ec:e0:95:65:b9:ff:79:dd:b9:5c:40:19:ab: 34:c6:60:15:1d:64:47:43:a1:92:d2:2d:69:6d:ca: 27:35:07:04:c2:b5:21:8e:6b:9e:3d:01:95:8e:0b: 3d:09:e3:db:37:46:f1:6f:72:71:b9:81:9d:ba:73: 09:c7:18:f2:c8:6d:4a:24:2c:b4:fc:75:e8:ac:be: 37:37:dc:fa:78:2c:9a:45:9f:06:dc:38:d8:3e:b6: ff:af:e7:f7:f8:bf:db:b1:19:08:bb:05:ff:09:fc: 54:b3:57:92:6d:6f:6f:85:4a:97:d8:b1:fa:13:9f: 49:f5:de:35:80:63:d9:f4:2e:fc:86:b7:8c:5e:f4: 4b:85:6d:17:c4:46:11:ef:cc:9a:10:99:13:10:95: 25:7a:44:11:93:bd:49:36:e7:97:30:01:9b:42:1c: fd:4a:dd:44:da:1a:2e:65:ad:53:4d:ac:02:70:0a: 51:3f:0f:50:8d:ed:10:61:0b:9a:12:93:3a:aa:68: 5a:8b:71:6f:b8:6e:f8:26:9f:3a:66:e9:e7:79:f4: 67:56:67:2c:7e:65:f0:c7:e5:eb:e2:23:c1:6d:bc: 8f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:67:7C:BA:84:80:69:BC:B7:09:A5:51:32:3B:7A:65:09:C9:22:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4c82cdd-4849-3974-853f-c12a013145db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:b3:37:e1:f8:1b:4e:06:27:c3:49:3c:0e:b2:3a:cc:37:27: 19:08:70:1a:64:92:f7:99:22:8f:1c:e7:cb:35:7b:5b:11:63: c1:2a:26:5e:02:7d:8e:a3:c4:58:85:11:71:b0:12:8c:89:c1: 46:65:86:3a:2f:1a:10:bd:b6:56:4a:76:e5:53:f1:c5:db:29: 0f:b0:57:da:ec:4c:99:1f:5a:24:67:8a:c3:77:33:af:b2:00: 62:f4:15:e9:71:e2:da:9b:bb:c9:40:c8:ae:3d:dd:98:31:59: bb:82:e2:fe:61:9f:8a:fe:9f:20:17:a9:5c:e1:b3:c7:a9:ca: 7b:71:50:48:c7:d0:be:fc:7c:1b:1e:58:f1:0e:35:c7:aa:ed: c7:4d:f5:76:e8:77:d6:58:8b:6d:84:87:31:23:eb:e8:4f:f0: 6d:c4:4a:91:1a:1a:a8:bd:3b:53:50:0c:56:63:53:87:4c:5e: 41:57:4a:f3:a7:82:a3:83:9e:e1:5f:77:27:c6:c6:94:51:e9: a7:00:71:90:2e:27:92:79:f4:5e:d8:5d:c4:f2:67:e1:9d:49: 61:2f:d0:55:d5:91:68:02:35:20:d2:03:8c:34:f5:80:b8:66: 6b:48:06:c2:30:e4:bf:a1:cf:98:c0:27:58:62:51:d3:fb:44: 40:77:9a:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuuYl8jfMfLe3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDk5ODc1OTktMzBmYy00YjcwLTk1MWYtODdjYWYyZGU4Yjg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4c6fGeZaA/sT+LK4ty0RvzQhjHAmmAko/6a Ihchg+zglWW5/3nduVxAGas0xmAVHWRHQ6GS0i1pbconNQcEwrUhjmuePQGVjgs9 CePbN0bxb3JxuYGdunMJxxjyyG1KJCy0/HXorL43N9z6eCyaRZ8G3DjYPrb/r+f3 +L/bsRkIuwX/CfxUs1eSbW9vhUqX2LH6E59J9d41gGPZ9C78hreMXvRLhW0XxEYR 78yaEJkTEJUlekQRk71JNueXMAGbQhz9St1E2houZa1TTawCcApRPw9Qje0QYQua EpM6qmhai3FvuG74Jp86ZunnefRnVmcsfmXwx+Xr4iPBbbyPTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP1nfLqEgGm8twmlUTI7emUJySIvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjRjODJjZGQtNDg0OS0z OTc0LTg1M2YtYzEyYTAxMzE0NWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKazN+H4G04GJ8NJPA6yOsw3JxkIcBpkkveZIo8c58s1e1sRY8EqJl4C fY6jxFiFEXGwEoyJwUZlhjovGhC9tlZKduVT8cXbKQ+wV9rsTJkfWiRnisN3M6+y AGL0Felx4tqbu8lAyK493ZgxWbuC4v5hn4r+nyAXqVzhs8epyntxUEjH0L78fBse WPEONceq7cdN9Xbod9ZYi22EhzEj6+hP8G3ESpEaGqi9O1NQDFZjU4dMXkFXSvOn gqODnuFfdyfGxpRR6acAcZAuJ5J59F7YXcTyZ+GdSWEv0FXVkWgCNSDSA4w09YC4 ZmtIBsIw5L+hz5jAJ1hiUdP7REB3mrc= -----END CERTIFICATE-----Generated at Sun Apr 27 02:21:37 2025 by rpki-client