$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa File: f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa (raw, json) Hash identifier: nP3zb8y5ZkJkbIIQL6N9Fqo2/6A+dvXyz89XEbR31Xo= Subject key identifier: 2E:54:43:B8:44:64:08:2A:BF:4B:7E:DA:27:70:B1:37:ED:96:95:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5D4090793D48309F0A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5d:40:90:79:3d:48:30:9f:0a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2e93b115-c895-4132-92d6-8824b849d6a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:25:79:41:15:9d:9c:69:b0:72:35:12:a4:b2: 30:c2:e9:a7:43:b3:6b:8f:aa:9d:9b:85:9e:b2:58: b1:b4:92:e7:9a:b2:bc:57:29:06:7b:61:c9:6f:d6: 32:bd:c6:c7:0c:c3:0c:a4:d6:f3:fb:38:c3:c2:15: 40:02:20:ea:3e:5d:44:c0:d8:ec:7b:e8:a7:e7:f1: 89:82:be:5c:ac:42:6f:9c:81:bb:6d:34:d4:11:5d: 81:7d:ce:59:00:a0:ac:90:6b:69:6c:32:04:a3:47: 64:49:30:01:0b:fc:5b:da:84:50:39:5c:83:fa:15: 4d:a4:6d:b6:5b:6b:c1:07:c9:75:fa:4c:2c:10:f0: f9:4a:76:7b:a3:f8:4a:c2:06:4f:ff:23:d4:70:74: eb:9b:37:a8:28:5c:a7:7f:49:9c:7d:2c:39:36:df: ab:5d:e3:06:8a:2b:16:70:58:93:ca:30:58:a6:38: 73:9c:96:76:51:b6:80:2e:d1:f7:e8:01:a7:1f:01: 54:62:62:18:b7:02:75:6c:15:ae:ab:81:19:54:b1: 0a:a2:30:08:2a:26:3f:c1:d9:b0:ee:4d:55:81:1e: 75:83:49:40:72:b9:ba:65:9b:ba:d8:3a:b7:85:06: f1:f0:36:79:dc:1c:1f:39:b6:64:01:0d:cc:c0:b1: f4:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:54:43:B8:44:64:08:2A:BF:4B:7E:DA:27:70:B1:37:ED:96:95:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:62:85:89:3d:49:61:45:5a:82:f3:ec:b8:dc:ef:0a:a0:85: e7:99:41:ca:c6:ad:89:7d:65:9e:86:f5:7b:84:30:d2:d5:42: bc:60:db:2b:30:4f:b0:12:c3:50:49:6d:cb:ee:06:d1:14:66: 77:7c:ce:9a:ca:6a:8a:85:1a:51:4a:1e:18:4f:b6:1a:db:ac: da:a4:50:58:d5:40:7b:62:3e:76:3a:12:9c:9a:86:28:4a:38: 16:63:eb:8a:91:b2:38:57:76:6f:7d:69:d7:2a:6f:fc:8e:d8: 02:9b:4a:ae:80:b1:79:c2:e2:8f:94:a8:3e:aa:ec:c3:5b:ba: 68:6b:42:67:5d:72:b0:b6:f6:96:36:5a:c8:d2:8d:7d:3d:df: 41:9c:64:f6:e0:2f:b0:16:c0:40:d8:62:55:39:4e:94:ff:83: 0b:a9:53:e6:1a:34:54:8a:50:4a:72:ff:11:be:1f:99:65:b5: 96:ef:01:4e:f6:f7:16:59:88:6b:6f:b8:4a:d8:7b:08:08:15: 64:7d:f2:b2:2b:09:70:e7:5f:b9:9e:ac:40:69:97:75:0f:3a: c1:2b:b5:79:d2:6f:69:d8:bc:ec:f0:2a:21:a7:9b:b6:b3:ea: bd:e5:f7:59:2f:1a:99:35:78:07:84:24:b8:72:5c:bd:17:c2: c3:71:b8:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul1AkHk9SDCfCoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmU5M2IxMTUtYzg5NS00MTMyLTkyZDYtODgyNGI4NDlkNmE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyyV5QRWdnGmwcjUSpLIwwumnQ7Nrj6qdm4We slixtJLnmrK8VykGe2HJb9YyvcbHDMMMpNbz+zjDwhVAAiDqPl1EwNjse+in5/GJ gr5crEJvnIG7bTTUEV2Bfc5ZAKCskGtpbDIEo0dkSTABC/xb2oRQOVyD+hVNpG22 W2vBB8l1+kwsEPD5SnZ7o/hKwgZP/yPUcHTrmzeoKFynf0mcfSw5Nt+rXeMGiisW cFiTyjBYpjhznJZ2UbaALtH36AGnHwFUYmIYtwJ1bBWuq4EZVLEKojAIKiY/wdmw 7k1VgR51g0lAcrm6ZZu62Dq3hQbx8DZ53BwfObZkAQ3MwLH0EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5UQ7hEZAgqv0t+2idwsTftlpV6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjYxOTU5YTEtNmFmOC0z ZDFjLTljNzktM2QxOTI0ZmI5YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRihYk9SWFFWoLz7Ljc7wqgheeZQcrGrYl9ZZ6G9XuEMNLVQrxg2ysw T7ASw1BJbcvuBtEUZnd8zprKaoqFGlFKHhhPthrbrNqkUFjVQHtiPnY6EpyahihK OBZj64qRsjhXdm99adcqb/yO2AKbSq6AsXnC4o+UqD6q7MNbumhrQmddcrC29pY2 WsjSjX0930GcZPbgL7AWwEDYYlU5TpT/gwupU+YaNFSKUEpy/xG+H5lltZbvAU72 9xZZiGtvuErYewgIFWR98rIrCXDnX7merEBpl3UPOsErtXnSb2nYvOzwKiGnm7az 6r3l91kvGpk1eAeEJLhyXL0XwsNxuGA= -----END CERTIFICATE-----Generated at Sun Apr 27 09:15:29 2025 by rpki-client