$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d996163-640b-33de-a221-baef81990d2e.roa File: 1d996163-640b-33de-a221-baef81990d2e.roa (raw, json) Hash identifier: Qmn4aGMVsZVDRHsKYennWWJonxuB7NYlfwUG4PXGTWQ= Subject key identifier: 3A:DE:58:B8:B9:85:58:55:85:84:45:BF:5E:13:4D:79:CF:B3:37:19 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA627C9899FEAA12F0F4A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d996163-640b-33de-a221-baef81990d2e.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:7c:98:99:fe:aa:12:f0:f4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d1164c7d-8029-4446-9837-a72aacb84ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:a8:76:ce:17:85:89:4d:d1:81:ca:1a:b2:af: 51:c9:81:c1:a9:60:b4:7e:c9:5d:1a:1b:46:88:c9: 1e:1f:97:db:f2:cb:0e:5e:a7:ac:82:11:77:0f:53: f3:9f:e4:b4:ff:0d:46:00:cf:bc:70:47:5a:57:c3: 8b:e7:f2:d1:42:d7:16:ac:d6:9e:55:c2:2a:13:20: c9:a0:c9:c6:12:9c:c9:2a:7c:cb:e1:81:e2:52:a4: 41:c5:4f:16:52:fd:c1:9c:db:50:35:fd:84:7f:43: 36:23:3b:ee:1d:33:f9:5b:13:4a:45:76:b6:4e:fe: a1:12:98:3c:22:2c:f9:2d:79:d9:a2:0f:27:5a:a0: ea:cd:6c:c1:8c:ea:ff:98:e2:13:f6:ca:0d:e1:11: 62:b7:f1:4c:41:1d:ac:38:af:ce:57:54:aa:51:dc: d0:d5:02:90:81:9b:5c:12:97:5f:bd:c6:dd:77:57: 43:24:d3:59:3f:45:b0:c3:cc:a3:39:b7:87:35:97: 99:46:d2:5a:ed:92:c9:d2:f7:d5:3a:04:80:4f:00: 48:9c:b2:a6:fd:08:b7:65:97:8f:b1:8a:eb:45:74: 89:72:68:da:c7:76:60:f7:0e:6a:fa:ca:6b:fd:a2: 74:af:06:9a:e9:fb:e8:ac:49:aa:c1:da:24:c9:e0: 01:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:DE:58:B8:B9:85:58:55:85:84:45:BF:5E:13:4D:79:CF:B3:37:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1d996163-640b-33de-a221-baef81990d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:9b:42:d3:05:c1:4c:9c:71:aa:21:eb:58:4b:be:d6:75:ac: e1:36:4b:04:82:6c:ce:98:00:d1:67:aa:53:f5:27:02:c8:96: e4:9e:fe:66:fd:83:bf:11:9a:8d:5a:a4:0e:9b:99:73:3e:ce: b4:e9:6a:9b:ac:a0:03:ca:e0:13:58:1a:9c:09:d8:11:54:94: 8b:2b:2d:56:5e:44:5e:7c:9c:d5:c0:f7:91:9a:b4:92:b7:d1: c5:7e:48:16:7f:b1:ea:ba:97:85:e4:2c:47:5f:6d:b0:bf:a9: 87:36:d1:5b:79:0f:65:07:15:db:b1:2f:b5:10:08:85:d5:b1: a9:9e:4d:e8:d8:5a:a6:1e:51:27:46:fc:3c:20:db:d7:b9:9f: 9d:25:d5:ac:d4:90:36:79:32:d9:c3:9e:eb:bd:ca:b2:6c:6d: f1:93:16:71:95:e9:b8:6c:37:de:4a:86:ab:d5:4a:c1:b5:bb: c5:de:da:ff:5d:6a:f1:ec:5c:fb:99:92:25:cf:ef:6b:f6:b7: ae:31:cf:77:d3:5b:37:82:c2:ea:d3:02:34:77:82:e6:35:e9: 7f:5a:56:4f:8b:4d:59:78:2e:5f:47:3e:87:33:c2:a9:d1:62: 95:41:b3:69:99:72:a3:af:d5:dc:68:52:4a:f8:c3:55:3d:b9: 83:e0:55:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumJ8mJn+qhLw9KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDExNjRjN2QtODAyOS00NDQ2LTk4MzctYTcyYWFjYjg0ZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKh2zheFiU3Rgcoasq9RyYHBqWC0fsldGhtG iMkeH5fb8ssOXqesghF3D1Pzn+S0/w1GAM+8cEdaV8OL5/LRQtcWrNaeVcIqEyDJ oMnGEpzJKnzL4YHiUqRBxU8WUv3BnNtQNf2Ef0M2IzvuHTP5WxNKRXa2Tv6hEpg8 Iiz5LXnZog8nWqDqzWzBjOr/mOIT9soN4RFit/FMQR2sOK/OV1SqUdzQ1QKQgZtc Epdfvcbdd1dDJNNZP0Www8yjObeHNZeZRtJa7ZLJ0vfVOgSATwBInLKm/Qi3ZZeP sYrrRXSJcmjax3Zg9w5q+spr/aJ0rwaa6fvorEmqwdokyeABLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDreWLi5hVhVhYRFv14TTXnPszcZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWQ5OTYxNjMtNjQwYi0z M2RlLWEyMjEtYmFlZjgxOTkwZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHObQtMFwUyccaoh61hLvtZ1rOE2SwSCbM6YANFnqlP1JwLIluSe/mb9 g78Rmo1apA6bmXM+zrTpapusoAPK4BNYGpwJ2BFUlIsrLVZeRF58nNXA95GatJK3 0cV+SBZ/seq6l4XkLEdfbbC/qYc20Vt5D2UHFduxL7UQCIXVsameTejYWqYeUSdG /Dwg29e5n50l1azUkDZ5MtnDnuu9yrJsbfGTFnGV6bhsN95KhqvVSsG1u8Xe2v9d avHsXPuZkiXP72v2t64xz3fTWzeCwurTAjR3guY16X9aVk+LTVl4Ll9HPoczwqnR YpVBs2mZcqOv1dxoUkr4w1U9uYPgVQM= -----END CERTIFICATE-----Generated at Sun May 11 17:11:56 2025 by rpki-client