$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa File: 2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa (raw, json) Hash identifier: wUuA+MIOwZcS8gzEgUZEvCgACir/q/nrLnM1T1zUs7M= Subject key identifier: 30:DB:80:1F:2D:F2:CB:85:EB:6D:32:E8:4B:E8:07:CF:45:DB:DD:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAEB4B9BC407AC6EBA0100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:eb:4b:9b:c4:07:ac:6e:ba:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=089e4985-f802-4813-919c-1ab709ccd713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:c8:de:fd:4c:af:6d:0a:af:b5:1a:14:3d:e1: 7d:d9:25:38:00:bf:47:18:01:f9:f9:65:cc:04:4d: ba:0a:ee:ca:f6:8f:26:7a:05:90:9c:e9:54:cb:01: 1c:58:95:dc:23:a2:3f:0d:1b:6f:14:40:80:23:69: 95:15:91:c4:02:08:24:40:d0:82:63:11:6f:18:13: 85:73:ba:9c:44:e1:ab:ef:81:6f:57:c9:bf:ef:43: b6:5d:e1:72:44:7b:98:e2:08:0b:1b:53:36:e0:3c: 75:1f:24:5d:cc:33:32:ca:89:e2:fa:77:86:7b:f5: d7:48:c5:dc:92:63:e9:85:3d:01:c6:55:b0:92:80: 0e:29:cf:9c:f7:7e:e5:d1:08:e9:5a:4c:57:a3:eb: d8:b9:b2:33:29:20:f0:d3:a2:32:d5:31:d4:ea:c6: ec:5e:ed:76:ce:19:17:84:66:ff:ae:ef:e5:ec:d2: 16:39:43:7e:93:19:c8:d7:e4:ef:53:c4:8b:86:02: ee:32:e4:e7:5d:17:32:90:7b:da:8d:da:ec:7b:68: 50:69:67:0f:94:1d:b9:9f:c2:da:c8:e1:1d:5c:d3: cf:4a:61:ea:02:77:cd:0e:42:a3:65:75:89:c7:86: 3c:96:74:3b:70:8a:70:e4:26:80:a4:aa:6e:5c:ef: 2a:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:DB:80:1F:2D:F2:CB:85:EB:6D:32:E8:4B:E8:07:CF:45:DB:DD:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:95:6a:ad:91:5d:08:fb:67:ef:e2:4f:cb:5d:c8:93:8f:b6: 54:d4:d4:d7:da:bb:df:ec:88:d8:cb:ba:41:ab:ae:1e:2c:7f: 33:2c:2b:2f:6c:db:2f:54:4b:2f:d5:a9:59:5a:94:28:f0:d5: 31:e8:9d:2c:7b:cf:ac:05:22:8d:99:0b:9a:b4:e8:8b:82:7c: 1e:a1:1d:8e:22:9c:c3:b1:bd:76:cc:b0:94:61:bf:44:af:15: bf:51:c4:67:65:3d:8a:5f:de:b3:84:01:44:58:b4:7a:5e:f3: 6c:b2:23:7c:d9:95:a4:21:37:95:ae:62:4a:f0:2a:64:45:50: 1a:d3:e1:02:5e:d7:66:96:24:77:23:38:86:4d:d1:c2:dc:f2: 80:c9:f2:d4:48:06:f5:22:50:f4:df:95:5a:29:95:be:66:5d: 77:f2:b9:28:4c:b8:41:f1:01:a9:eb:4e:b8:c5:d8:98:b7:40: 3b:65:dc:e0:f0:5a:60:af:75:45:94:af:90:89:13:fe:96:6c: fb:37:1b:44:4a:b5:6c:a5:7c:04:3c:54:47:41:bf:be:62:7a: 20:79:2e:b2:45:6d:59:b2:72:b9:e6:c1:d4:de:86:8e:fa:7c: 6d:6f:51:be:93:8b:51:08:2a:4c:1b:bf:6f:ac:bf:72:34:89: 43:c0:c1:24 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuutLm8QHrG66AQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDg5ZTQ5ODUtZjgwMi00ODEzLTkxOWMtMWFiNzA5Y2NkNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8je/UyvbQqvtRoUPeF92SU4AL9HGAH5+WXM BE26Cu7K9o8megWQnOlUywEcWJXcI6I/DRtvFECAI2mVFZHEAggkQNCCYxFvGBOF c7qcROGr74FvV8m/70O2XeFyRHuY4ggLG1M24Dx1HyRdzDMyyoni+neGe/XXSMXc kmPphT0BxlWwkoAOKc+c937l0QjpWkxXo+vYubIzKSDw06Iy1THU6sbsXu12zhkX hGb/ru/l7NIWOUN+kxnI1+TvU8SLhgLuMuTnXRcykHvajdrse2hQaWcPlB25n8La yOEdXNPPSmHqAnfNDkKjZXWJx4Y8lnQ7cIpw5CaApKpuXO8qZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDbgB8t8suF620y6EvoB89F2936MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmM1NWZmZjgtZjU1ZS0z NTNiLWEzZTUtYzZiMmRmZjkzNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFuVaq2RXQj7Z+/iT8tdyJOPtlTU1Nfau9/siNjLukGrrh4sfzMsKy9s 2y9USy/VqVlalCjw1THonSx7z6wFIo2ZC5q06IuCfB6hHY4inMOxvXbMsJRhv0Sv Fb9RxGdlPYpf3rOEAURYtHpe82yyI3zZlaQhN5WuYkrwKmRFUBrT4QJe12aWJHcj OIZN0cLc8oDJ8tRIBvUiUPTflVoplb5mXXfyuShMuEHxAanrTrjF2Ji3QDtl3ODw WmCvdUWUr5CJE/6WbPs3G0RKtWylfAQ8VEdBv75ieiB5LrJFbVmycrnmwdTeho76 fG1vUb6Ti1EIKkwbv2+sv3I0iUPAwSQ= -----END CERTIFICATE-----Generated at Tue May 6 18:00:43 2025 by rpki-client