$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65bdf332-173b-3f95-87e0-e5fe62a8633a.roa File: 65bdf332-173b-3f95-87e0-e5fe62a8633a.roa (raw, json) Hash identifier: jh9ooI921YAFU/k8vHCHtSZScmQ5+1bwzfjM64ikLA0= Subject key identifier: BA:66:C5:C3:EF:3F:D2:09:B9:AC:AE:F6:E2:8D:82:28:4B:15:9C:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA51359E1F2A7127533300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65bdf332-173b-3f95-87e0-e5fe62a8633a.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 40306 IP address blocks: 72.173.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:51:35:9e:1f:2a:71:27:53:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=4f2bb41a-0f69-4d3b-b377-473772007701 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ea:ce:c7:0d:a9:f6:c6:d1:71:15:09:29:67: 65:14:41:cd:63:0a:5f:e3:ee:d8:e4:a8:fa:43:29: c3:bd:c0:59:62:17:fa:0b:53:93:80:74:70:d2:eb: 49:ef:be:ef:c3:03:e2:34:ce:9e:ea:e5:66:d6:ca: 6e:30:a9:9b:09:76:cd:06:ca:2e:15:09:38:56:5f: a4:f1:82:6f:34:09:58:ad:02:e2:a6:b5:e0:71:fd: 46:a2:5a:2c:b7:d4:75:7d:e5:24:73:6f:6e:ee:39: 22:d9:c5:02:a4:dd:ed:70:dc:d2:22:b0:d9:5c:93: 85:80:0e:b4:67:c2:85:11:9a:37:1c:52:f8:d3:1b: 0b:c9:3e:00:9a:6c:a4:0e:4e:aa:62:a8:e1:f3:6e: b0:04:ec:7d:43:ad:7f:dc:94:fe:00:20:c2:a3:d8: 20:9d:9c:3e:48:9c:ea:c8:f6:88:6c:2a:48:6b:35: 11:94:fc:c5:20:2e:f0:31:ce:af:98:6f:72:03:89: 0b:12:4b:4b:6c:8f:dd:3a:d2:03:f6:a6:40:40:36: 8e:5e:d8:e0:34:17:bc:c6:a9:38:9f:89:ca:7e:d9: 7e:81:5b:d1:78:ce:14:01:5d:ee:d7:28:2f:90:43: 9a:58:64:e5:53:91:eb:da:de:c8:64:f4:2c:d2:bb: f2:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:66:C5:C3:EF:3F:D2:09:B9:AC:AE:F6:E2:8D:82:28:4B:15:9C:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65bdf332-173b-3f95-87e0-e5fe62a8633a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:66:84:82:10:e3:c8:40:46:b5:cf:0e:8e:8a:39:74:f3:6c: dc:43:b1:5c:f4:47:29:b4:02:dd:1d:c9:13:a5:dc:79:5c:ae: aa:3b:d1:c5:22:45:2a:83:5c:93:24:15:65:94:39:eb:92:60: c2:c4:a9:d6:c5:41:21:96:e4:8b:ad:03:0a:b3:1c:49:67:66: ef:e4:77:54:2a:89:b5:99:c2:22:91:07:f1:89:62:af:34:a0: 5d:23:e4:69:5d:b8:77:ae:81:a1:13:d5:df:98:85:d9:db:51: 9d:70:f6:bf:b4:52:eb:15:e8:37:23:d3:7d:0c:27:3f:d2:dd: 8b:21:89:dc:a1:dc:f0:f2:a0:09:6a:9d:45:82:d6:6e:5c:23: 6c:d9:3d:d7:cd:2b:6c:84:b1:a7:ae:8c:75:59:95:ac:4c:3e: c6:ef:32:c5:2f:10:14:15:de:3e:08:75:be:c3:38:3d:c2:af: 02:47:ec:3e:03:3b:d9:70:4f:e5:a7:2b:b5:8d:dc:c2:ae:4d: 34:96:53:dc:fe:cf:a4:e8:b2:3e:a3:cf:13:c2:39:2c:4f:c4: e3:3b:13:3b:ae:de:69:61:9e:7a:1c:4b:82:82:f7:1a:56:54: b7:04:0f:a8:25:a8:b0:73:b7:e9:c8:69:65:21:a3:ad:56:6e: 49:cf:90:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkulE1nh8qcSdTMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NGYyYmI0MWEtMGY2OS00ZDNiLWIzNzctNDczNzcyMDA3NzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuurOxw2p9sbRcRUJKWdlFEHNYwpf4+7Y5Kj6 QynDvcBZYhf6C1OTgHRw0utJ777vwwPiNM6e6uVm1spuMKmbCXbNBsouFQk4Vl+k 8YJvNAlYrQLiprXgcf1Golost9R1feUkc29u7jki2cUCpN3tcNzSIrDZXJOFgA60 Z8KFEZo3HFL40xsLyT4AmmykDk6qYqjh826wBOx9Q61/3JT+ACDCo9ggnZw+SJzq yPaIbCpIazURlPzFIC7wMc6vmG9yA4kLEktLbI/dOtID9qZAQDaOXtjgNBe8xqk4 n4nKftl+gVvReM4UAV3u1ygvkEOaWGTlU5Hr2t7IZPQs0rvyIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLpmxcPvP9IJuayu9uKNgihLFZynMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjViZGYzMzItMTczYi0z Zjk1LTg3ZTAtZTVmZTYyYTg2MzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxmhIIQ48hARrXPDo6KOXTzbNxDsVz0Rym0At0dyROl3Hlcrqo70cUi RSqDXJMkFWWUOeuSYMLEqdbFQSGW5IutAwqzHElnZu/kd1QqibWZwiKRB/GJYq80 oF0j5GlduHeugaET1d+YhdnbUZ1w9r+0UusV6Dcj030MJz/S3Yshidyh3PDyoAlq nUWC1m5cI2zZPdfNK2yEsaeujHVZlaxMPsbvMsUvEBQV3j4Idb7DOD3CrwJH7D4D O9lwT+WnK7WN3MKuTTSWU9z+z6Tosj6jzxPCOSxPxOM7Ezuu3mlhnnocS4KC9xpW VLcED6glqLBzt+nIaWUho61WbknPkA8= -----END CERTIFICATE-----Generated at Sat May 10 19:50:12 2025 by rpki-client