$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa File: fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa (raw, json) Hash identifier: 1NXRDdKFW8yY1lT4/wpb6q62vAzRKjBDEQPEGM2esvA= Subject key identifier: 67:D7:60:16:7E:CF:81:5E:C8:24:AD:2F:1A:04:6E:06:57:8B:79:23 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEA87E77628E1166FDB80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ea:87:e7:76:28:e1:16:6f:db:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7eb816bd-997d-405f-9a3a-ba8207fe5a43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2b:c4:40:a9:42:f7:55:d5:41:77:cb:eb:fa: 36:89:fc:5d:04:32:1c:ee:d5:50:57:84:b9:49:49: 6c:99:28:24:61:2d:61:b1:f8:d3:0e:82:d0:1c:75: 33:f1:cf:18:8d:60:d3:03:7b:19:6e:3d:69:ce:17: 87:d3:63:17:7b:cd:fa:4b:f4:0c:38:79:0b:36:88: be:0b:a2:15:8c:69:f2:b8:46:23:cc:d1:b7:cc:30: f4:73:ff:eb:a0:f8:62:4e:f0:f7:c3:6b:7c:f3:6e: 94:ea:72:fd:6a:a6:76:4d:61:c9:69:41:6f:b4:92: a7:95:d6:51:be:f2:86:50:e8:da:20:0a:cb:99:12: f9:1c:c8:29:1d:d4:94:aa:74:f4:d7:b3:1c:3c:f1: f6:e3:0e:09:2b:3c:9d:f3:11:4a:48:90:69:58:70: 00:dd:60:6c:bb:f8:e7:8d:2b:76:15:1e:ab:f6:d0: c6:f5:f8:80:16:e4:4a:3a:9d:0f:52:bc:76:32:bd: 5d:57:55:60:de:d1:39:17:1c:e9:a6:91:e8:ed:65: e6:5c:7e:86:26:53:17:ee:72:e9:b0:49:48:9d:e6: 98:0f:ad:d1:f6:97:81:9c:6b:2f:39:01:9e:14:e7: 11:4e:77:06:b5:85:0d:f9:c1:3e:9d:66:f9:53:97: e3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:D7:60:16:7E:CF:81:5E:C8:24:AD:2F:1A:04:6E:06:57:8B:79:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fe50e68b-6d4f-3eb8-9cb0-8db5ae9f8a6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:8a:ab:0c:08:de:51:88:c3:79:51:cb:d2:8f:e6:d6:96:aa: 2b:7d:88:b2:a4:ce:2f:95:e0:ab:f3:80:f9:92:26:be:6f:5d: b1:ca:a1:27:46:32:66:c5:91:17:d5:a1:78:6f:64:60:d7:e9: 05:82:0e:07:69:21:12:c5:c2:43:a6:50:e6:de:cd:25:df:bc: d8:34:0c:79:3c:b9:73:14:1f:5a:49:6f:f5:1f:77:2a:7a:83: 00:06:63:01:3e:d7:7a:40:52:4d:05:a1:da:d3:6e:c1:e6:82: d8:04:9f:f2:4b:14:a2:f8:0d:75:95:01:bf:53:31:6d:0d:53: 8e:2a:12:df:e1:f1:a6:61:43:d9:fd:48:ac:49:38:8e:6b:c4: 6e:54:32:f4:ca:53:a7:4e:3c:12:ca:6e:88:bb:25:df:81:af: 5d:de:03:cd:c1:81:e1:a3:12:86:ea:92:32:4b:11:cb:56:de: e8:75:73:f7:77:99:5a:04:19:54:7f:e1:33:89:ea:23:f2:d1: ca:47:5f:2c:32:23:c9:4d:2c:79:98:95:57:d9:b8:42:28:88: e3:e9:f2:04:05:af:08:6f:64:d4:6c:f0:65:6c:c3:8d:33:ef: 7c:90:38:bf:ed:e0:8b:3e:ba:be:99:21:67:c9:af:78:9d:a3: 00:ed:6e:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuuqH53Yo4RZv24AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2ViODE2YmQtOTk3ZC00MDVmLTlhM2EtYmE4MjA3ZmU1YTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSvEQKlC91XVQXfL6/o2ifxdBDIc7tVQV4S5 SUlsmSgkYS1hsfjTDoLQHHUz8c8YjWDTA3sZbj1pzheH02MXe836S/QMOHkLNoi+ C6IVjGnyuEYjzNG3zDD0c//roPhiTvD3w2t8826U6nL9aqZ2TWHJaUFvtJKnldZR vvKGUOjaIArLmRL5HMgpHdSUqnT017McPPH24w4JKzyd8xFKSJBpWHAA3WBsu/jn jSt2FR6r9tDG9fiAFuRKOp0PUrx2Mr1dV1Vg3tE5FxzpppHo7WXmXH6GJlMX7nLp sElIneaYD63R9peBnGsvOQGeFOcRTncGtYUN+cE+nWb5U5fjRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGfXYBZ+z4FeyCStLxoEbgZXi3kjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmU1MGU2OGItNmQ0Zi0z ZWI4LTljYjAtOGRiNWFlOWY4YTZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK29MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM2KqwwI3lGIw3lRy9KP5taWqit9iLKkzi+V4KvzgPmSJr5vXbHKoSdG MmbFkRfVoXhvZGDX6QWCDgdpIRLFwkOmUObezSXfvNg0DHk8uXMUH1pJb/Ufdyp6 gwAGYwE+13pAUk0FodrTbsHmgtgEn/JLFKL4DXWVAb9TMW0NU44qEt/h8aZhQ9n9 SKxJOI5rxG5UMvTKU6dOPBLKboi7Jd+Br13eA83BgeGjEobqkjJLEctW3uh1c/d3 mVoEGVR/4TOJ6iPy0cpHXywyI8lNLHmYlVfZuEIoiOPp8gQFrwhvZNRs8GVsw40z 73yQOL/t4Is+ur6ZIWfJr3idowDtbgE= -----END CERTIFICATE-----Generated at Sun Apr 27 11:34:25 2025 by rpki-client