$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa File: 9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa (raw, json) Hash identifier: ELllMjaKZ921zsikMEyaqS4MVciVr22VN9b47SVNlBY= Subject key identifier: AF:22:3C:8A:22:E0:22:CB:6A:01:EA:3E:B4:2A:0D:1C:3B:92:D5:BA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE922166BCA89DEDB0524 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e9:22:16:6b:ca:89:de:db:05:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d5f31fe2-8d9c-4d41-8b97-4d39becbe156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:e0:48:2d:e4:37:dc:8d:44:4c:1c:0a:61:77: 14:89:d4:68:37:62:8f:d9:7c:62:57:70:d3:ab:00: cb:3b:6b:71:28:9b:d6:f3:67:ec:46:f3:55:93:2e: c4:ab:fc:63:ea:55:d4:d0:9e:2f:d0:6a:d0:34:80: c0:c5:3d:16:19:dd:ef:bf:7f:90:22:91:79:8e:22: 3d:23:f4:fd:17:48:af:c1:b7:05:41:a5:4e:19:f2: 5d:47:aa:c6:cc:23:9b:74:41:26:02:3b:1b:29:be: aa:8c:2e:9d:81:6f:80:97:78:d8:ea:0e:05:61:c3: af:78:9a:3d:fe:be:34:25:0b:c7:17:be:fd:2c:76: 5f:df:b9:4e:72:27:92:18:a4:6e:e4:83:d7:3d:ce: db:89:f4:a1:9e:01:9c:65:28:ea:da:21:bc:f2:b0: 60:da:69:9c:38:ea:90:8b:2d:d7:ff:23:45:ea:9c: 73:e4:e4:59:d2:4f:86:e0:66:09:f3:5d:48:24:80: 2a:c9:57:5b:c3:98:9c:dc:1d:81:02:d8:a3:ad:cb: a0:b1:4b:b8:71:12:45:d5:5c:51:80:98:25:7a:56: 43:07:bc:66:16:bb:2d:8e:ea:80:3a:38:1e:85:f0: 6e:b1:23:ef:bc:aa:58:7f:e6:49:0b:4c:37:9c:0e: d0:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:22:3C:8A:22:E0:22:CB:6A:01:EA:3E:B4:2A:0D:1C:3B:92:D5:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:76:d8:b8:2e:b0:5d:7b:f6:60:63:9d:98:24:ed:27:c4:90: 7e:ac:bd:bd:9a:66:10:2b:54:15:4d:4f:a1:ba:47:05:6c:30: 00:97:ed:bd:9d:81:79:f4:ea:2e:d3:2f:55:6e:05:43:29:17: 93:c6:79:02:7e:8e:ff:d1:65:b3:01:9f:f5:dc:67:ea:6c:c3: 52:d5:d7:d6:83:16:87:e8:86:d1:f7:ea:a3:84:c3:cf:d9:14: e8:9c:0d:2f:c8:82:32:51:6a:08:16:d1:d2:e0:81:6d:0f:18: 69:16:e6:15:73:f9:b0:7c:fd:48:51:03:32:8e:48:44:2a:f0: f1:54:c8:81:09:43:f9:0e:6a:6d:97:61:6d:26:7e:09:fc:7d: 3a:a5:65:6f:42:c4:47:55:28:b0:f0:af:a6:6d:ee:12:c6:03: 40:61:77:3f:65:8f:f5:9e:45:eb:d9:0f:87:a7:f0:97:d8:4a: 7c:6a:fa:8e:d7:91:da:6e:0e:e7:c9:86:0e:2f:74:b1:33:70: 6a:88:7f:36:a9:17:6d:78:47:c1:91:6b:6f:89:40:b0:22:4e: bf:c1:69:43:4e:6a:0b:f3:fc:32:85:ce:0a:21:a5:aa:9c:19: 82:81:00:7a:39:21:21:9c:d1:62:a1:94:4c:98:88:e6:c4:cc: 83:34:97:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuukiFmvKid7bBSQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDVmMzFmZTItOGQ5Yy00ZDQxLThiOTctNGQzOWJlY2JlMTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1eBILeQ33I1ETBwKYXcUidRoN2KP2XxiV3DT qwDLO2txKJvW82fsRvNVky7Eq/xj6lXU0J4v0GrQNIDAxT0WGd3vv3+QIpF5jiI9 I/T9F0ivwbcFQaVOGfJdR6rGzCObdEEmAjsbKb6qjC6dgW+Al3jY6g4FYcOveJo9 /r40JQvHF779LHZf37lOcieSGKRu5IPXPc7bifShngGcZSjq2iG88rBg2mmcOOqQ iy3X/yNF6pxz5ORZ0k+G4GYJ811IJIAqyVdbw5ic3B2BAtijrcugsUu4cRJF1VxR gJglelZDB7xmFrstjuqAOjgehfBusSPvvKpYf+ZJC0w3nA7Q1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK8iPIoi4CLLagHqPrQqDRw7ktW6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWJhYzJkNWItZTJjZi0z NzM3LTkyODctMWJkZDkxNjc0OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd22LgusF179mBjnZgk7SfEkH6svb2aZhArVBVNT6G6RwVsMACX7b2d gXn06i7TL1VuBUMpF5PGeQJ+jv/RZbMBn/XcZ+psw1LV19aDFofohtH36qOEw8/Z FOicDS/IgjJRaggW0dLggW0PGGkW5hVz+bB8/UhRAzKOSEQq8PFUyIEJQ/kOam2X YW0mfgn8fTqlZW9CxEdVKLDwr6Zt7hLGA0Bhdz9lj/WeRevZD4en8JfYSnxq+o7X kdpuDufJhg4vdLEzcGqIfzapF214R8GRa2+JQLAiTr/BaUNOagvz/DKFzgohpaqc GYKBAHo5ISGc0WKhlEyYiObEzIM0l28= -----END CERTIFICATE-----Generated at Sun May 11 04:18:44 2025 by rpki-client