$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b060352b-57d0-3d7a-88d1-c404a5282bb2.roa File: b060352b-57d0-3d7a-88d1-c404a5282bb2.roa (raw, json) Hash identifier: bWAsl/DWZb0fr1Xiy/JIrQz0nC6SYm515Idib9pDtzs= Subject key identifier: 33:D8:07:63:21:17:84:8E:37:2E:EA:62:CD:78:40:C7:FB:67:96:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5FCEDAED5FF36B45B9C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b060352b-57d0-3d7a-88d1-c404a5282bb2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.112.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5f:ce:da:ed:5f:f3:6b:45:b9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0be2e754-09db-47f7-8c25-19b859f5b64d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:f4:cd:d6:fe:a8:df:d2:3f:d5:5c:26:ca:10: f9:d0:8a:db:cd:ae:3d:d5:68:67:fe:97:8c:b4:70: b8:48:0a:3e:be:03:30:41:5a:cd:48:22:17:be:ee: cb:07:db:96:33:c8:96:f1:16:3b:a9:d4:9e:e0:5f: 63:14:54:f9:24:9b:35:28:95:8b:d3:85:9a:aa:13: 2a:a8:83:5f:e7:b2:b5:d3:41:8c:ad:a1:7c:c4:ef: 45:4c:dd:a2:bd:d7:b0:ea:dc:bb:15:07:e9:3a:b1: 0d:14:8c:e5:07:7a:83:20:63:28:58:3e:50:d2:81: 39:12:14:48:cb:0f:69:3d:a7:42:38:53:94:b9:5a: 1f:31:a8:31:47:ad:64:a7:c5:d8:3a:43:20:1a:e0: 7d:87:1a:db:71:da:e7:cb:30:68:c7:9a:e7:42:59: 3f:ab:fc:da:af:0d:8b:ba:28:93:66:94:6d:42:4e: 60:55:cf:1c:f2:11:56:58:be:f6:4a:de:24:0e:e3: 93:66:31:cf:68:13:ab:83:b3:45:4b:9d:6c:fe:bf: 72:7e:81:33:61:32:50:f8:c7:51:3e:ba:6b:6d:a4: 5f:cd:9f:e5:d2:eb:38:76:d2:82:28:03:d2:b7:f4: 65:5b:68:d7:79:29:1b:18:fc:68:70:73:5b:81:73: c1:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D8:07:63:21:17:84:8E:37:2E:EA:62:CD:78:40:C7:FB:67:96:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b060352b-57d0-3d7a-88d1-c404a5282bb2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.112.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:5f:98:50:2b:c5:aa:f2:65:50:9f:d8:a9:38:92:44:83:27: a4:3c:35:8d:f1:a5:7c:04:5a:27:d0:38:2d:ac:dc:9d:09:dd: a3:eb:a3:e0:ad:a9:71:f9:d3:3f:6e:65:af:df:b3:2b:45:ae: 2d:ca:85:29:e0:35:1a:9b:10:9a:6e:ec:e6:af:08:21:8b:37: 0c:00:74:87:30:f3:dc:5f:a4:5a:18:b3:68:4b:6d:d0:b0:ac: 96:88:25:57:e7:27:46:e6:79:a8:5c:c0:ca:d9:9e:0b:3b:65: 57:e1:b1:1b:a6:62:ea:5a:71:1d:bf:c7:55:9b:7a:d2:a4:a5: 8f:6f:01:63:1c:19:96:74:96:bd:82:85:a4:97:69:d2:14:b9: 00:c0:78:d8:ab:88:64:ff:7b:db:9c:4e:e9:34:f0:7d:4b:e2: 27:88:26:10:f8:36:2e:f8:b4:40:e5:42:ec:4d:88:07:a1:80: 6b:4b:f1:14:6b:7d:ad:ce:bf:c4:7c:0f:28:51:cb:08:50:98: cc:d7:1b:ca:20:dc:ef:1c:ed:aa:18:46:d6:b1:81:7d:1f:76: c9:d1:75:c1:44:0d:cc:b0:bc:5d:25:3a:7c:35:d6:14:36:8d: 32:57:ba:5b:98:18:7c:e0:d5:04:8f:fb:35:34:ec:d3:3f:44: 99:7b:e1:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul/O2u1f82tFucAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGJlMmU3NTQtMDlkYi00N2Y3LThjMjUtMTliODU5ZjViNjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/TN1v6o39I/1VwmyhD50Irbza491Whn/peM tHC4SAo+vgMwQVrNSCIXvu7LB9uWM8iW8RY7qdSe4F9jFFT5JJs1KJWL04WaqhMq qINf57K100GMraF8xO9FTN2ivdew6ty7FQfpOrENFIzlB3qDIGMoWD5Q0oE5EhRI yw9pPadCOFOUuVofMagxR61kp8XYOkMgGuB9hxrbcdrnyzBox5rnQlk/q/zarw2L uiiTZpRtQk5gVc8c8hFWWL72St4kDuOTZjHPaBOrg7NFS51s/r9yfoEzYTJQ+MdR PrprbaRfzZ/l0us4dtKCKAPSt/RlW2jXeSkbGPxocHNbgXPB5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPYB2MhF4SONy7qYs14QMf7Z5a1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjA2MDM1MmItNTdkMC0z ZDdhLTg4ZDEtYzQwNGE1MjgyYmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBfmFArxaryZVCf2Kk4kkSDJ6Q8NY3xpXwEWifQOC2s3J0J3aPro+Ct qXH50z9uZa/fsytFri3KhSngNRqbEJpu7OavCCGLNwwAdIcw89xfpFoYs2hLbdCw rJaIJVfnJ0bmeahcwMrZngs7ZVfhsRumYupacR2/x1WbetKkpY9vAWMcGZZ0lr2C haSXadIUuQDAeNiriGT/e9ucTuk08H1L4ieIJhD4Ni74tEDlQuxNiAehgGtL8RRr fa3Ov8R8DyhRywhQmMzXG8og3O8c7aoYRtaxgX0fdsnRdcFEDcywvF0lOnw11hQ2 jTJXuluYGHzg1QSP+zU07NM/RJl74VM= -----END CERTIFICATE-----Generated at Thu May 8 17:01:12 2025 by rpki-client