$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa File: 0304701b-f7af-3dfb-8187-c57bac2f5c32.roa (raw, json) Hash identifier: 5mNYmBncg2/iOMSTAKVMP2mqQBINZZpyRvKL+8jLh/s= Subject key identifier: 5A:44:51:48:21:F1:3B:66:C2:B5:A7:21:05:17:EA:A0:10:79:85:CD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B7060CD71DC7B595A880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b7:06:0c:d7:1d:c7:b5:95:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e893dd4c-a792-49e9-a092-cef5a3a680d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:88:77:83:41:d5:0c:84:19:8b:45:3c:9d:df: d1:d6:2d:df:fc:ec:6c:ec:66:0b:d9:02:87:05:67: 3d:e9:bf:ca:22:71:e7:d3:ef:93:2f:7a:cd:d6:7d: 8d:99:d0:4b:d0:aa:47:48:47:f3:5e:f9:59:51:b1: 4d:ef:c3:e7:d5:93:14:02:e0:cd:0d:eb:f0:0e:b4: df:a7:7f:86:d1:ee:68:1c:cc:a2:61:25:c9:1a:1b: db:6b:56:67:b3:46:8b:b2:60:ea:29:0a:50:d8:5e: 61:b1:6c:1e:48:e5:b0:ed:37:33:fa:4d:c1:2a:7b: 99:12:be:44:95:27:5e:a7:22:bf:f0:c7:62:6a:ff: 42:42:a0:6e:a2:28:a4:00:55:53:b4:1c:49:21:31: 1d:ce:44:b8:68:a7:c3:e2:3e:6a:ec:18:10:1e:3e: 63:74:62:a6:9b:d6:6b:72:de:39:d4:b0:df:4e:6b: 18:27:fe:92:49:bd:d6:22:58:0f:d3:c0:96:c6:b1: bc:ba:af:49:58:76:cd:d1:1e:a5:94:7b:f2:26:82: 58:25:c4:71:97:5e:ce:ef:ee:5a:13:a5:2d:9b:85: 58:d6:46:c6:43:cb:09:1e:04:7f:47:8c:e2:0d:75: b2:ea:ec:a5:3b:8a:22:1e:13:1c:cf:c6:f0:3d:02: c0:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:44:51:48:21:F1:3B:66:C2:B5:A7:21:05:17:EA:A0:10:79:85:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0304701b-f7af-3dfb-8187-c57bac2f5c32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:77:05:69:70:a9:f6:0d:db:0d:2f:a0:8d:88:c5:1c:74:ec: d1:cd:54:f7:bb:62:26:e0:f8:76:2e:87:06:6f:05:a0:73:96: 53:94:c9:7e:0b:14:a5:08:eb:96:5c:59:0c:3b:de:40:ba:48: 96:d6:8e:78:37:78:9a:b7:c7:62:a1:25:46:c3:42:6e:60:90: b8:56:45:47:5a:0c:ae:c3:7f:2c:3d:24:5d:19:78:0b:64:94: b8:d9:73:58:9e:c4:5c:66:5a:bc:5d:1e:c7:39:99:c1:5c:04: 86:a0:49:d8:ab:60:68:6c:81:4f:d9:de:45:55:70:5d:31:b4: 65:69:0b:44:7a:d0:18:4a:a4:33:d5:12:8c:6c:aa:80:ce:ba: 78:6d:79:c6:06:a6:b7:a6:cf:a0:99:f5:90:44:46:42:80:9c: 6a:68:b1:1a:f2:99:7c:30:e4:15:05:4a:fe:bd:28:01:6c:3b: 70:44:45:89:d8:fc:4f:0d:66:3f:60:82:47:cf:a6:6b:1d:0c: 4e:04:28:43:96:9d:29:2e:8b:33:eb:7e:0d:ff:02:08:0f:84: 0d:a7:e7:44:c5:35:c9:0b:e1:24:d1:17:36:56:cf:2b:18:2c: d0:ed:32:b5:70:67:ec:a8:80:a0:35:6d:c2:45:3a:66:ae:d1: 05:d3:0a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbcGDNcdx7WVqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTg5M2RkNGMtYTc5Mi00OWU5LWEwOTItY2VmNWEzYTY4MGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiIh3g0HVDIQZi0U8nd/R1i3f/Oxs7GYL2QKH BWc96b/KInHn0++TL3rN1n2NmdBL0KpHSEfzXvlZUbFN78Pn1ZMUAuDNDevwDrTf p3+G0e5oHMyiYSXJGhvba1Zns0aLsmDqKQpQ2F5hsWweSOWw7Tcz+k3BKnuZEr5E lSdepyK/8Mdiav9CQqBuoiikAFVTtBxJITEdzkS4aKfD4j5q7BgQHj5jdGKmm9Zr ct451LDfTmsYJ/6SSb3WIlgP08CWxrG8uq9JWHbN0R6llHvyJoJYJcRxl17O7+5a E6Utm4VY1kbGQ8sJHgR/R4ziDXWy6uylO4oiHhMcz8bwPQLA/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpEUUgh8TtmwrWnIQUX6qAQeYXNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDMwNDcwMWItZjdhZi0z ZGZiLTgxODctYzU3YmFjMmY1YzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ3BWlwqfYN2w0voI2IxRx07NHNVPe7Yibg+HYuhwZvBaBzllOUyX4L FKUI65ZcWQw73kC6SJbWjng3eJq3x2KhJUbDQm5gkLhWRUdaDK7Dfyw9JF0ZeAtk lLjZc1iexFxmWrxdHsc5mcFcBIagSdirYGhsgU/Z3kVVcF0xtGVpC0R60BhKpDPV EoxsqoDOunhtecYGpremz6CZ9ZBERkKAnGposRrymXww5BUFSv69KAFsO3BERYnY /E8NZj9ggkfPpmsdDE4EKEOWnSkuizPrfg3/AggPhA2n50TFNckL4STRFzZWzysY LNDtMrVwZ+yogKA1bcJFOmau0QXTCk4= -----END CERTIFICATE-----Generated at Sat Jul 26 20:09:46 2025 by rpki-client