$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa File: d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa (raw, json) Hash identifier: 3PXHmxmnTmJGujVRzTOkSQ3lGehcGGwO8RIctcDBrzo= Subject key identifier: C7:43:1B:C9:B2:B4:E8:E0:04:2F:31:32:EC:88:CB:B0:8C:B4:A1:35 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA5D0577905FD764D0F800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.11.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:5d:05:77:90:5f:d7:64:d0:f8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=304807b5-94f4-492c-9bae-edba8096e04e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e7:20:d4:9d:52:cb:75:ce:df:55:ee:48:1c: fb:f1:c2:f1:5d:a0:4a:fb:69:0e:32:9e:78:50:4b: 31:4f:ce:09:40:3c:7b:40:12:6a:c1:9d:6a:6c:84: 0b:48:bb:e2:d0:69:c3:f9:af:46:26:40:10:1e:5c: f8:2b:fa:0e:09:55:8d:b2:db:ce:98:12:88:5a:51: ff:32:61:cb:98:13:56:8f:4e:b2:c3:03:33:27:fb: ad:8a:27:71:ff:47:8a:ba:68:39:19:d1:66:51:18: 4f:50:c7:bd:bc:35:11:a6:7b:f5:89:5e:ed:fe:37: 15:16:88:0d:26:af:d4:fe:7c:c6:a9:7c:ec:40:41: 1d:6e:a6:b2:b4:f8:d2:51:21:25:04:f3:67:b4:53: 41:80:89:bb:93:59:c4:5a:fb:29:fe:8e:18:36:5a: 03:f2:b2:98:45:2c:d9:e0:81:61:1f:ed:e6:04:1c: ed:b5:e7:c4:4f:92:b4:f4:e9:23:08:ef:fd:a1:77: 2c:46:49:9d:e3:59:d9:38:6c:b3:f0:98:f7:b3:52: aa:b3:d7:60:b0:a4:a5:c3:11:52:1b:73:c4:44:b6: 0d:23:c4:ff:43:e0:a8:cd:5a:9c:a3:08:75:e9:28: c6:86:27:d1:9b:b0:1a:d6:ea:dc:7e:d5:48:d1:b2: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:43:1B:C9:B2:B4:E8:E0:04:2F:31:32:EC:88:CB:B0:8C:B4:A1:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d533a3db-77f0-3d60-b53d-f9e6ab61d5b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.11.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:2e:87:5a:b6:f3:2f:c8:c7:88:db:e8:8a:6c:2a:4f:17:ed: 12:5d:66:7b:42:6e:44:67:8f:6c:ea:35:ac:39:42:0a:87:75: 80:87:91:6e:9d:93:2c:aa:d4:3d:38:25:b1:96:67:08:68:9b: 20:9d:02:0a:4b:ad:ec:e3:19:03:60:83:9d:80:91:95:0c:65: 69:c8:bd:40:7a:11:73:10:81:7b:4e:58:92:55:df:ca:e9:89: bc:25:e5:83:69:18:0f:d2:71:f4:d4:c8:61:df:38:97:03:e0: 6f:6c:10:46:fa:15:3a:1b:8b:2a:f4:ea:53:56:87:a5:6b:76: c1:d8:ee:93:1a:13:c4:3e:55:75:9c:19:2a:7d:30:f7:25:b1: 2c:3c:8d:3a:b4:2c:63:77:f0:ed:af:cc:2b:f7:99:80:98:72: f9:7d:bc:4f:2a:31:01:6c:36:d1:9a:69:bd:69:cc:c4:c8:5e: 45:9c:b4:a7:84:95:69:98:60:9f:c8:7e:01:4c:e8:db:8c:e6: 01:49:10:99:67:c8:76:06:e8:c8:09:e4:da:44:12:0a:08:6f: f1:b5:99:65:4f:c4:4d:0e:29:52:c1:a3:4c:d6:2f:ee:e4:1a: 78:d8:fe:2a:7f:cf:06:4a:9d:1e:ad:98:7e:c5:00:71:af:12: b8:3f:a1:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkul0Fd5Bf12TQ+AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzA0ODA3YjUtOTRmNC00OTJjLTliYWUtZWRiYTgwOTZlMDRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOcg1J1Sy3XO31XuSBz78cLxXaBK+2kOMp54 UEsxT84JQDx7QBJqwZ1qbIQLSLvi0GnD+a9GJkAQHlz4K/oOCVWNstvOmBKIWlH/ MmHLmBNWj06ywwMzJ/utiidx/0eKumg5GdFmURhPUMe9vDURpnv1iV7t/jcVFogN Jq/U/nzGqXzsQEEdbqaytPjSUSElBPNntFNBgIm7k1nEWvsp/o4YNloD8rKYRSzZ 4IFhH+3mBBzttefET5K09OkjCO/9oXcsRkmd41nZOGyz8Jj3s1Kqs9dgsKSlwxFS G3PERLYNI8T/Q+CozVqcowh16SjGhifRm7Aa1urcftVI0bIx3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdDG8mytOjgBC8xMuyIy7CMtKE1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDUzM2EzZGItNzdmMC0z ZDYwLWI1M2QtZjllNmFiNjFkNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMAuh1q28y/Ix4jb6IpsKk8X7RJdZntCbkRnj2zqNaw5QgqHdYCHkW6d kyyq1D04JbGWZwhomyCdAgpLrezjGQNgg52AkZUMZWnIvUB6EXMQgXtOWJJV38rp ibwl5YNpGA/ScfTUyGHfOJcD4G9sEEb6FTobiyr06lNWh6VrdsHY7pMaE8Q+VXWc GSp9MPclsSw8jTq0LGN38O2vzCv3mYCYcvl9vE8qMQFsNtGaab1pzMTIXkWctKeE lWmYYJ/IfgFM6NuM5gFJEJlnyHYG6MgJ5NpEEgoIb/G1mWVPxE0OKVLBo0zWL+7k GnjY/ip/zwZKnR6tmH7FAHGvErg/oYQ= -----END CERTIFICATE-----Generated at Wed May 7 01:29:44 2025 by rpki-client