$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c085c2b5-c77c-334d-a618-742fa0e29ee8.roa File: c085c2b5-c77c-334d-a618-742fa0e29ee8.roa (raw, json) Hash identifier: 9S6zDt6oFVM08LkN0OKH/mmOC/7Y4o0pgQZ9SryW1tE= Subject key identifier: CC:E2:16:BD:D2:B8:A1:15:34:40:6C:2F:40:C6:0D:BE:21:B0:B1:27 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA62243D881A469C7A75E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c085c2b5-c77c-334d-a618-742fa0e29ee8.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.219.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 May 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:24:3d:88:1a:46:9c:7a:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fc537b49-daa0-40c6-8dab-28615e91fb59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:79:1a:17:6b:aa:4d:95:4a:b9:97:6c:6d:24: 6c:62:e1:48:92:ec:2b:a8:7e:24:4f:9e:27:db:db: 1c:47:29:36:6c:03:d3:f9:d5:2d:91:fa:32:89:56: 73:b4:95:57:de:bc:07:3f:93:2d:b9:05:42:ff:1c: 54:ee:0e:d2:8f:f3:b7:8f:7a:d3:f7:63:80:22:ae: 5b:32:fc:2d:50:19:d3:ba:41:40:4b:98:51:41:09: c4:ed:fa:81:0d:23:7c:e6:00:5e:a1:43:c7:e5:87: 02:1a:e7:74:13:bf:62:6d:c5:95:2f:e1:f3:a7:92: df:30:f8:24:da:34:c9:5a:9c:8d:00:48:9c:60:aa: 7c:84:a6:0e:27:15:1f:67:d5:55:d8:eb:eb:75:7d: 04:32:ec:22:0b:48:bb:22:7f:dd:78:f3:6b:36:b4: 58:9c:cb:5a:b9:da:df:55:89:e6:e3:04:de:d3:78: 95:a2:69:d6:67:2e:9e:78:c7:17:f8:f6:75:fb:f3: 78:70:de:35:9e:6d:37:71:0b:09:b4:a1:40:69:6a: 61:e3:44:c0:5c:ea:34:10:6a:b7:b7:63:f0:44:2e: 93:24:1e:55:84:33:a1:e4:8f:8a:9a:17:0e:b0:44: 4d:d3:28:4b:3c:e5:78:10:85:35:1f:70:09:63:1f: 5f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:E2:16:BD:D2:B8:A1:15:34:40:6C:2F:40:C6:0D:BE:21:B0:B1:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c085c2b5-c77c-334d-a618-742fa0e29ee8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.219.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:50:c3:37:1f:09:42:2a:67:56:01:a1:d0:0f:23:53:37:5d: 4e:57:55:c7:04:ff:95:a2:b5:33:ad:57:25:60:25:36:2d:30: 93:5c:10:1b:17:89:fe:4d:5c:0d:e5:64:cc:85:76:3d:ef:ff: 48:c0:10:57:f2:b9:f3:1b:02:0d:cb:08:8b:75:b0:35:49:79: 33:f1:4b:7f:bd:ab:07:28:73:14:ca:78:eb:f7:fc:70:65:ad: 1a:3d:04:74:8e:c4:b5:d9:60:aa:ea:1f:6b:b9:78:1d:4a:e6: 63:54:7f:f2:3a:94:52:b3:c7:b9:83:6f:5b:61:e4:77:49:09: 86:4d:12:c3:8a:26:71:e2:ea:10:d8:4f:e5:9e:d6:30:ce:6d: d8:8a:ec:a8:b3:76:05:a7:77:f7:26:3c:e4:ae:a4:b6:fe:59: c6:72:40:06:aa:47:6e:aa:d9:fa:2a:b3:c7:f3:61:44:43:91: ef:7d:f6:2f:b3:6c:ac:56:ff:59:ed:98:a1:05:33:93:1e:cb: cc:d5:80:be:a4:c3:9c:e7:58:d0:8d:c2:4c:5d:0e:99:63:6b: 4a:50:68:cd:89:1c:44:19:5b:ca:7a:4a:b4:e7:d3:f4:51:09: 06:d2:7f:90:7a:18:c2:db:df:d1:e9:09:29:ff:72:46:43:fd: 2e:36:9e:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumIkPYgaRpx6deAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmM1MzdiNDktZGFhMC00MGM2LThkYWItMjg2MTVlOTFmYjU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5XkaF2uqTZVKuZdsbSRsYuFIkuwrqH4kT54n 29scRyk2bAPT+dUtkfoyiVZztJVX3rwHP5MtuQVC/xxU7g7Sj/O3j3rT92OAIq5b MvwtUBnTukFAS5hRQQnE7fqBDSN85gBeoUPH5YcCGud0E79ibcWVL+Hzp5LfMPgk 2jTJWpyNAEicYKp8hKYOJxUfZ9VV2OvrdX0EMuwiC0i7In/dePNrNrRYnMtaudrf VYnm4wTe03iVomnWZy6eeMcX+PZ1+/N4cN41nm03cQsJtKFAaWph40TAXOo0EGq3 t2PwRC6TJB5VhDOh5I+KmhcOsERN0yhLPOV4EIU1H3AJYx9fiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMziFr3SuKEVNEBsL0DGDb4hsLEnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzA4NWMyYjUtYzc3Yy0z MzRkLWE2MTgtNzQyZmEwZTI5ZWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3bMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMtQwzcfCUIqZ1YBodAPI1M3XU5XVccE/5WitTOtVyVgJTYtMJNcEBsX if5NXA3lZMyFdj3v/0jAEFfyufMbAg3LCIt1sDVJeTPxS3+9qwcocxTKeOv3/HBl rRo9BHSOxLXZYKrqH2u5eB1K5mNUf/I6lFKzx7mDb1th5HdJCYZNEsOKJnHi6hDY T+We1jDObdiK7KizdgWnd/cmPOSupLb+WcZyQAaqR26q2foqs8fzYURDke999i+z bKxW/1ntmKEFM5Mey8zVgL6kw5znWNCNwkxdDplja0pQaM2JHEQZW8p6SrTn0/RR CQbSf5B6GMLb39HpCSn/ckZD/S42njQ= -----END CERTIFICATE-----Generated at Tue May 6 16:19:51 2025 by rpki-client