$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa File: 53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa (raw, json) Hash identifier: 7tV1R7YYqw+DpvFk2Hl1pRkh04imKxsDhSnrZTdLTa8= Subject key identifier: 90:F3:67:48:A3:73:D9:ED:22:72:38:FD:15:DC:D7:01:FE:B8:32:27 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA602D2F8E829E73E1F140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:60:2d:2f:8e:82:9e:73:e1:f1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=34e6fe37-c556-46dd-970e-07a0f51533bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:aa:7b:62:b8:6f:a6:96:7c:bb:3e:c5:68:6f: 22:f2:ee:15:6d:aa:ce:72:c5:59:e4:49:ad:7a:d7: e2:ca:8c:53:88:5a:6f:c0:e5:99:1e:2b:21:5b:f7: a9:dc:a3:15:d6:37:09:2e:71:06:5a:f1:a7:32:09: 35:7c:36:81:19:7e:49:2e:17:3b:9b:c7:ae:95:28: 95:0b:e9:21:f7:7d:a0:a9:e6:98:87:09:dd:7e:51: 68:e6:48:b3:bb:39:0e:05:61:1a:31:c3:b4:87:a8: 45:9b:2c:60:8b:ca:6b:f8:41:af:fd:f3:7b:4d:f1: 53:63:6f:67:2b:c5:2a:01:42:14:9d:10:b0:96:9e: 7f:ee:9c:a5:4f:a4:e0:0f:10:78:8b:27:9d:51:6e: 21:23:ed:4a:f6:84:82:78:65:55:1f:54:7f:27:fc: 01:56:6e:85:08:cf:30:c1:79:b3:86:f1:d4:94:03: ab:b3:d6:07:98:97:99:62:f7:82:2f:79:80:e0:ed: 6b:aa:3a:d2:01:b5:39:6a:cb:71:3a:ba:24:7b:a7: 64:99:11:01:f1:82:a1:c0:0f:df:70:25:f6:a1:f1: 1e:f0:a6:01:2b:50:58:9e:52:8a:91:34:69:dc:2e: 49:ea:5e:00:28:a7:57:70:e5:6e:7e:cf:d9:d9:f8: 36:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:F3:67:48:A3:73:D9:ED:22:72:38:FD:15:DC:D7:01:FE:B8:32:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/53e6dda3-24c2-399b-af6d-a5d40deda8e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:eb:2b:d1:dc:de:97:50:e5:87:6a:8c:11:85:1e:32:87:ca: e1:69:96:09:4d:22:dd:ae:58:3b:d2:03:67:47:9a:80:9d:c0: 00:0f:ab:75:fb:4a:8f:99:db:5a:6d:ff:da:79:3a:46:aa:5a: e2:f0:78:a9:6e:e4:82:b8:83:45:d8:50:3e:0d:04:93:6a:e7: b1:5c:2f:47:68:b3:05:be:16:7f:60:e6:d2:fb:4e:ba:b6:49: 8b:4e:26:bb:01:5d:8f:ac:cd:37:a1:77:53:a7:cd:51:b0:0f: 64:90:7d:05:7d:94:3d:0d:49:62:b7:a5:ea:d9:38:f8:2d:54: 54:da:2c:fc:62:8d:39:f6:f9:67:7a:91:c8:f3:72:5c:8d:7a: 5e:7d:3b:f0:80:4c:99:de:7e:4c:ad:d3:39:8d:91:57:ed:22: 82:0e:65:de:4d:a1:fe:4c:4d:03:da:c5:1a:d4:0b:b4:b0:6c: d2:f5:df:35:1d:eb:71:62:14:0d:29:75:f3:07:8a:74:f0:e0: 2b:e1:64:9a:e9:5e:65:c0:4c:35:85:3c:df:12:47:2c:44:05: 39:8e:d3:34:e4:e9:89:cf:60:19:ef:fa:e3:dc:7b:3a:ea:df: 6e:f5:82:eb:fc:38:d3:0d:d2:f4:9c:0d:92:d8:dc:d3:ad:80: f7:26:96:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumAtL46CnnPh8UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzRlNmZlMzctYzU1Ni00NmRkLTk3MGUtMDdhMGY1MTUzM2JiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6p7YrhvppZ8uz7FaG8i8u4VbarOcsVZ5Emt etfiyoxTiFpvwOWZHishW/ep3KMV1jcJLnEGWvGnMgk1fDaBGX5JLhc7m8eulSiV C+kh932gqeaYhwndflFo5kizuzkOBWEaMcO0h6hFmyxgi8pr+EGv/fN7TfFTY29n K8UqAUIUnRCwlp5/7pylT6TgDxB4iyedUW4hI+1K9oSCeGVVH1R/J/wBVm6FCM8w wXmzhvHUlAOrs9YHmJeZYveCL3mA4O1rqjrSAbU5astxOroke6dkmREB8YKhwA/f cCX2ofEe8KYBK1BYnlKKkTRp3C5J6l4AKKdXcOVufs/Z2fg2HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDzZ0ijc9ntInI4/RXc1wH+uDInMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTNlNmRkYTMtMjRjMi0z OTliLWFmNmQtYTVkNDBkZWRhOGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK18MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGTrK9Hc3pdQ5YdqjBGFHjKHyuFplglNIt2uWDvSA2dHmoCdwAAPq3X7 So+Z21pt/9p5OkaqWuLweKlu5IK4g0XYUD4NBJNq57FcL0doswW+Fn9g5tL7Trq2 SYtOJrsBXY+szTehd1OnzVGwD2SQfQV9lD0NSWK3perZOPgtVFTaLPxijTn2+Wd6 kcjzclyNel59O/CATJnefkyt0zmNkVftIoIOZd5Nof5MTQPaxRrUC7SwbNL13zUd 63FiFA0pdfMHinTw4CvhZJrpXmXATDWFPN8SRyxEBTmO0zTk6YnPYBnv+uPcezrq 3271guv8ONMN0vScDZLY3NOtgPcmlsY= -----END CERTIFICATE-----Generated at Tue May 6 03:18:06 2025 by rpki-client