$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa File: 2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa (raw, json) Hash identifier: YEgO956wX2Oi4kQ+O+DAOVPgiGJObUBDzm+40LjCSyg= Subject key identifier: 29:27:0C:E7:52:D2:E8:77:94:84:36:E1:DA:18:A9:9C:50:AE:96:CF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE78C123F9E1725636600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e7:8c:12:3f:9e:17:25:63:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7a851741-c676-4c39-afcf-4989060f281b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:7c:82:18:16:c9:e9:08:19:58:7f:7d:46:e5: bf:c7:6f:06:c4:03:ea:52:7d:74:c4:12:30:ef:75: df:53:b4:b1:8d:69:0f:a0:37:b6:7d:9f:4b:5a:39: 76:34:1a:60:7c:bc:6a:08:1e:2f:87:61:8b:f0:1c: 9a:ee:a5:1c:89:85:be:33:53:f1:0f:61:0e:0e:d9: cc:cd:34:d2:24:d9:11:8f:63:74:34:93:b7:ea:01: 2e:0d:93:bd:e2:dc:cf:1a:68:09:ec:e9:f0:0a:32: 9f:a1:27:7b:9e:91:cb:6c:e4:73:d9:61:ac:e9:8f: 83:ea:3c:ec:81:34:37:9e:c2:95:03:7a:24:74:b7: eb:9a:cb:7d:ab:03:c0:29:8e:3f:df:ad:f4:8f:0f: b2:6c:b6:02:10:2e:89:77:6f:ce:8c:01:87:37:a5: 55:a3:39:70:11:3a:85:83:37:fc:50:19:db:55:38: 60:a1:40:fe:b0:d9:b3:7f:89:c5:19:3e:d3:5b:ec: c7:fc:d6:f6:e0:61:5d:35:df:f9:f0:38:21:66:8c: ea:7c:87:99:ef:af:a0:4d:ba:ba:82:d0:09:bf:6e: 28:74:ca:10:1b:ea:e4:d5:c5:e7:57:98:06:9a:14: 4d:cf:4e:a2:e9:a7:88:b7:0c:fa:1d:8d:5b:79:65: 22:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:27:0C:E7:52:D2:E8:77:94:84:36:E1:DA:18:A9:9C:50:AE:96:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2cf58f97-9f7a-3605-9479-6caad20a6fb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:ee:ed:27:73:73:b3:ca:df:ed:50:f3:a2:4c:71:78:07:f4: 2c:e1:9b:f2:9e:71:da:56:be:82:81:89:12:b9:c3:4e:f5:28: 69:9d:89:10:a2:b5:1b:00:7d:27:3e:b4:d3:aa:44:3f:62:f3: fe:56:c5:e3:44:29:ad:28:87:39:d3:38:59:ea:d0:3a:67:cd: d4:d0:c0:38:8a:76:52:1d:aa:79:4f:1b:da:90:a1:22:46:fe: 1a:a2:66:29:30:4f:64:92:da:07:68:03:a3:1e:d1:d8:04:c1: 8e:b6:e4:05:2c:8d:14:5c:0e:3c:7e:29:5f:40:79:de:ec:8a: 93:73:81:1f:de:96:bf:d4:59:45:8f:ff:91:29:78:4b:be:6a: 85:09:ba:47:c2:b2:44:25:0e:1d:40:ec:7d:80:a4:05:e4:9a: fd:b5:0d:22:de:ad:33:b8:a2:ae:6b:11:f4:05:fb:bc:40:98: 0e:01:cc:0f:17:ef:15:ef:e1:e4:bf:a6:d3:f3:d3:a3:2b:c1: e3:a6:56:f5:5e:11:47:5d:c0:33:2a:8a:af:f5:78:ae:7c:c9: 52:79:8c:5a:88:88:0f:51:d8:5a:29:fb:49:5f:3e:bb:d2:1a: 13:74:3c:26:d5:b4:92:49:e8:d6:e8:de:44:83:c5:8c:de:9a: 13:bd:01:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuueMEj+eFyVjZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2E4NTE3NDEtYzY3Ni00YzM5LWFmY2YtNDk4OTA2MGYyODFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi3yCGBbJ6QgZWH99RuW/x28GxAPqUn10xBIw 73XfU7SxjWkPoDe2fZ9LWjl2NBpgfLxqCB4vh2GL8Bya7qUciYW+M1PxD2EODtnM zTTSJNkRj2N0NJO36gEuDZO94tzPGmgJ7OnwCjKfoSd7npHLbORz2WGs6Y+D6jzs gTQ3nsKVA3okdLfrmst9qwPAKY4/3630jw+ybLYCEC6Jd2/OjAGHN6VVozlwETqF gzf8UBnbVThgoUD+sNmzf4nFGT7TW+zH/Nb24GFdNd/58DghZozqfIeZ76+gTbq6 gtAJv24odMoQG+rk1cXnV5gGmhRNz06i6aeItwz6HY1beWUipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCknDOdS0uh3lIQ24doYqZxQrpbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmNmNThmOTctOWY3YS0z NjA1LTk0NzktNmNhYWQyMGE2ZmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK02MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHu7Sdzc7PK3+1Q86JMcXgH9Czhm/KecdpWvoKBiRK5w071KGmdiRCi tRsAfSc+tNOqRD9i8/5WxeNEKa0ohznTOFnq0DpnzdTQwDiKdlIdqnlPG9qQoSJG /hqiZikwT2SS2gdoA6Me0dgEwY625AUsjRRcDjx+KV9Aed7sipNzgR/elr/UWUWP /5EpeEu+aoUJukfCskQlDh1A7H2ApAXkmv21DSLerTO4oq5rEfQF+7xAmA4BzA8X 7xXv4eS/ptPz06MrweOmVvVeEUddwDMqiq/1eK58yVJ5jFqIiA9R2Fop+0lfPrvS GhN0PCbVtJJJ6Nbo3kSDxYzemhO9Aas= -----END CERTIFICATE-----Generated at Sat May 10 09:52:53 2025 by rpki-client