$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa File: f8345415-3ea1-3302-af18-e89348c9eac5.roa (raw, json) Hash identifier: CF/jpaHflPdpUcOEkougj6mog+YSmHh0H6QPQ50v0OE= Subject key identifier: 95:9D:5A:2C:3B:08:86:65:A3:98:A1:F3:E1:1E:43:EC:E9:2A:84:E3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA628887B3857966994000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:88:87:b3:85:79:66:99:40:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2d93972c-4dcd-45ca-98c2-a5c28f29feb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:22:19:a0:c6:13:2d:85:7c:82:4f:2c:23:6b: 42:8b:4f:6a:54:7e:3e:ca:d2:f5:e4:df:c7:ea:cc: 01:cc:c1:cf:64:5f:3d:ea:01:32:f7:0c:75:0d:9d: 24:e3:07:fb:d3:53:e9:36:e9:96:e1:58:75:89:f3: 9d:c8:80:ea:e5:72:6b:0b:7a:03:10:9c:08:2e:7d: ed:1d:ee:00:a9:8c:48:d5:a6:be:9c:43:e7:71:27: 68:47:5b:f0:bd:ee:f6:53:fa:1d:b6:ed:94:a3:8e: 95:d6:ce:36:b6:e4:1c:af:08:ce:02:90:83:75:74: 97:1c:80:77:6e:2e:ab:58:56:aa:87:e6:ba:8c:d4: 73:a7:13:3e:ce:2e:fc:92:35:2c:b2:e3:10:e5:37: 3d:68:03:df:1c:d6:4f:2d:c2:02:b7:2e:93:af:db: e3:65:40:b8:91:ec:cf:6d:6e:03:02:12:83:63:1a: c3:ac:65:06:01:db:b4:40:a7:8e:a9:18:e5:24:63: 10:67:a8:d3:7b:68:20:bc:02:fe:c4:41:c3:5f:a5: 7e:4b:d7:fe:fc:3d:10:b2:27:e0:d8:a9:a9:b9:59: 83:b2:31:a0:cb:f4:31:1e:df:4b:3e:2a:26:47:0a: 76:db:06:05:c2:22:d3:50:62:ad:8f:4e:a1:aa:2e: 5b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:9D:5A:2C:3B:08:86:65:A3:98:A1:F3:E1:1E:43:EC:E9:2A:84:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f8345415-3ea1-3302-af18-e89348c9eac5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:3d:f5:46:b7:fe:01:8f:7f:e8:82:7e:d5:51:c7:82:23:bf: 1b:04:c4:87:4d:f2:dc:ac:9f:63:a4:e9:3d:e1:be:d1:79:fa: 8e:56:cf:2d:87:f7:3b:97:e0:0b:73:ad:1a:67:dc:24:38:30: 38:b9:cd:65:e5:08:e6:1f:a8:7e:73:4a:40:00:d4:5d:36:0e: e8:9e:5e:9c:65:0b:54:51:2d:73:0c:c2:75:cc:39:50:28:35: 55:be:f7:72:9f:5e:b8:5a:34:17:fd:a4:7a:7f:08:d2:83:63: 9a:29:da:a3:40:39:d2:27:f7:df:42:a9:67:fd:51:3d:64:5d: 09:46:9b:f8:15:94:89:d1:3f:24:ad:4d:5f:c4:c6:9c:7e:9a: d8:b2:d2:30:34:e8:09:da:29:8b:0a:eb:33:c1:6b:e5:8b:ab: 08:63:1e:cb:48:bf:37:37:ce:fe:41:74:2a:76:5e:88:04:ba: 31:cb:c3:3e:57:36:64:1c:f4:6b:90:b2:f2:08:42:0f:10:c6: 37:a0:e3:3a:9a:56:61:d6:73:ec:dc:82:35:9b:3b:84:b1:14: b5:54:be:1b:5d:82:35:96:6d:aa:e9:67:77:74:75:ec:45:60: b6:a6:af:1c:19:14:8f:e9:da:0e:b2:67:34:e5:4c:d4:fa:71: 4b:c7:5e:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumKIh7OFeWaZQAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmQ5Mzk3MmMtNGRjZC00NWNhLTk4YzItYTVjMjhmMjlmZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCIZoMYTLYV8gk8sI2tCi09qVH4+ytL15N/H 6swBzMHPZF896gEy9wx1DZ0k4wf701PpNumW4Vh1ifOdyIDq5XJrC3oDEJwILn3t He4AqYxI1aa+nEPncSdoR1vwve72U/odtu2Uo46V1s42tuQcrwjOApCDdXSXHIB3 bi6rWFaqh+a6jNRzpxM+zi78kjUssuMQ5Tc9aAPfHNZPLcICty6Tr9vjZUC4kezP bW4DAhKDYxrDrGUGAdu0QKeOqRjlJGMQZ6jTe2ggvAL+xEHDX6V+S9f+/D0Qsifg 2KmpuVmDsjGgy/QxHt9LPiomRwp22wYFwiLTUGKtj06hqi5bVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWdWiw7CIZlo5ih8+EeQ+zpKoTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjgzNDU0MTUtM2VhMS0z MzAyLWFmMTgtZTg5MzQ4YzllYWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3nMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK899Ua3/gGPf+iCftVRx4IjvxsExIdN8tysn2Ok6T3hvtF5+o5Wzy2H 9zuX4AtzrRpn3CQ4MDi5zWXlCOYfqH5zSkAA1F02DuieXpxlC1RRLXMMwnXMOVAo NVW+93KfXrhaNBf9pHp/CNKDY5op2qNAOdIn999CqWf9UT1kXQlGm/gVlInRPySt TV/Expx+mtiy0jA06AnaKYsK6zPBa+WLqwhjHstIvzc3zv5BdCp2XogEujHLwz5X NmQc9GuQsvIIQg8Qxjeg4zqaVmHWc+zcgjWbO4SxFLVUvhtdgjWWbarpZ3d0dexF YLamrxwZFI/p2g6yZzTlTNT6cUvHXpE= -----END CERTIFICATE-----Generated at Sun May 11 01:29:05 2025 by rpki-client