$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa File: b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa (raw, json) Hash identifier: 77YO+StqSuIUo9ePbDSt2raiP3qEVoQ5SgASOmab1c4= Subject key identifier: EA:61:31:F5:AC:3E:D9:D6:50:9C:1E:29:F1:F4:03:86:5E:4A:ED:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BAE8E8ABE576D8D69CB900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:e8:e8:ab:e5:76:d8:d6:9c:b9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=97b1e0a4-68a2-4846-98d4-5159bdcf5827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:f3:45:de:99:da:c4:69:b6:88:3e:37:f1:5f: 7e:cd:91:c3:c8:a0:85:70:fe:c3:35:4e:65:c7:46: e1:a5:11:e7:00:9a:85:0c:0a:8b:df:92:ff:28:7f: e2:23:c4:90:5f:36:24:db:3e:ca:9b:ad:de:d1:d6: ea:d1:f5:0a:d4:26:79:9a:e9:75:67:58:a1:d3:88: 03:85:10:22:f2:a0:8c:85:f0:48:8e:49:03:c3:fe: 8d:0b:d2:75:a1:37:d0:d6:c4:2e:d7:00:06:05:7d: 7c:ec:d9:4f:af:22:56:ec:4d:84:7d:b0:95:45:16: ab:8c:fc:17:03:26:22:ef:5a:02:da:0b:72:c2:77: 2c:32:fd:85:40:e3:73:b6:e4:eb:02:6c:fd:d1:08: ad:df:d5:c7:8a:40:d8:9d:f9:50:64:db:45:41:7a: 78:46:23:61:38:c7:88:58:c8:b0:aa:54:1d:35:20: 5f:b0:85:88:a3:75:b0:a1:6b:f1:ab:39:e3:5e:7d: a6:9d:b7:e9:d1:5c:fe:69:3e:56:56:ab:60:d7:4d: fe:81:87:66:55:58:d4:31:3c:bb:a8:1e:20:73:26: c8:af:8d:44:be:43:07:2e:84:bf:96:4d:38:a4:f0: d6:90:5e:5e:d9:bd:66:91:d7:97:aa:a4:ad:6a:44: 39:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:61:31:F5:AC:3E:D9:D6:50:9C:1E:29:F1:F4:03:86:5E:4A:ED:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7bd45c6-0058-3832-9e21-ee7bba5f3539.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c9:27:de:d5:de:d8:31:a1:1e:71:6c:f8:cb:9b:8e:3b:25: 30:c4:29:5a:27:34:38:bf:ad:54:90:3a:1e:ec:aa:db:71:92: 24:17:a3:45:be:c7:0a:7b:48:6a:f6:ce:8e:c8:74:4e:ba:0a: d4:01:59:f3:f9:6b:54:42:e1:59:c8:02:53:77:4f:0b:22:ca: 6a:bf:6d:de:87:43:f5:aa:8d:5d:0b:c0:f9:d5:ed:55:0f:d2: 7e:2b:ec:69:19:84:14:52:04:ba:53:7b:ff:21:c2:fc:ec:74: 07:df:2c:53:9b:1a:68:a8:03:38:a1:f3:bb:c5:0e:0e:22:44: 17:51:89:a6:cf:d6:f6:c7:3a:f1:38:7c:42:de:d6:8f:25:27: c3:6f:59:fb:a4:b0:28:a2:05:07:aa:7c:7d:ec:98:97:89:ed: 93:45:4b:10:04:9f:51:22:54:4c:c6:14:38:5e:60:0d:3b:ff: 4b:35:0b:b7:0e:f2:ca:91:4d:4e:d4:d2:8b:7b:08:c9:a7:1c: 58:79:a6:f4:30:4e:71:5c:e1:16:88:bf:0c:7e:14:90:42:77: 39:61:10:8b:a3:31:32:57:39:1a:91:c6:61:63:ad:48:7b:c8: 13:4e:c7:b0:d3:b1:0a:ea:ef:9c:ac:43:1f:0d:5a:04:ea:6c: 43:b7:8e:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuujoq+V22NacuQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OTdiMWUwYTQtNjhhMi00ODQ2LTk4ZDQtNTE1OWJkY2Y1ODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPNF3pnaxGm2iD438V9+zZHDyKCFcP7DNU5l x0bhpRHnAJqFDAqL35L/KH/iI8SQXzYk2z7Km63e0dbq0fUK1CZ5mul1Z1ih04gD hRAi8qCMhfBIjkkDw/6NC9J1oTfQ1sQu1wAGBX187NlPryJW7E2EfbCVRRarjPwX AyYi71oC2gtywncsMv2FQONztuTrAmz90Qit39XHikDYnflQZNtFQXp4RiNhOMeI WMiwqlQdNSBfsIWIo3WwoWvxqznjXn2mnbfp0Vz+aT5WVqtg103+gYdmVVjUMTy7 qB4gcybIr41EvkMHLoS/lk04pPDWkF5e2b1mkdeXqqStakQ5WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOphMfWsPtnWUJweKfH0A4ZeSu1DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdiZDQ1YzYtMDA1OC0z ODMyLTllMjEtZWU3YmJhNWYzNTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXJJ97V3tgxoR5xbPjLm447JTDEKVonNDi/rVSQOh7sqttxkiQXo0W+ xwp7SGr2zo7IdE66CtQBWfP5a1RC4VnIAlN3Twsiymq/bd6HQ/WqjV0LwPnV7VUP 0n4r7GkZhBRSBLpTe/8hwvzsdAffLFObGmioAzih87vFDg4iRBdRiabP1vbHOvE4 fELe1o8lJ8NvWfuksCiiBQeqfH3smJeJ7ZNFSxAEn1EiVEzGFDheYA07/0s1C7cO 8sqRTU7U0ot7CMmnHFh5pvQwTnFc4RaIvwx+FJBCdzlhEIujMTJXORqRxmFjrUh7 yBNOx7DTsQrq75ysQx8NWgTqbEO3juU= -----END CERTIFICATE-----Generated at Sat May 10 21:11:12 2025 by rpki-client