$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08ea6e2f-adac-3e05-8c71-7a86b061972f.roa File: 08ea6e2f-adac-3e05-8c71-7a86b061972f.roa (raw, json) Hash identifier: wZhTzWalgBeg0JQ8OVFtupo3MhVRTGEZzjqEJB0WQ9s= Subject key identifier: 16:7F:A8:3B:23:AA:BE:1F:8C:31:10:11:5C:E9:BE:DE:7D:2D:D2:2A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B240A9CA4099D274C300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08ea6e2f-adac-3e05-8c71-7a86b061972f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b2:40:a9:ca:40:99:d2:74:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a5eb20ee-649c-4f8a-b8fa-7076ef5a806e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d2:4f:cc:c4:65:69:6a:17:f7:30:08:62:c3: 2f:6c:71:13:d6:96:33:02:8f:0c:5a:9b:19:ff:e5: ac:6c:1e:07:2e:f9:70:02:d4:f5:89:80:df:67:7a: 74:0e:72:c2:43:2f:36:cc:2e:9e:c5:a1:df:46:58: 92:10:bf:f4:65:a9:61:43:60:bf:84:f0:19:08:8e: e3:61:bb:7f:f8:da:75:20:37:de:3d:33:58:e5:09: 91:a4:99:16:f8:08:f3:ec:ad:fb:c9:cf:2a:8a:34: 66:fe:06:bd:c5:05:9b:3a:a6:f7:10:6a:cd:34:38: 78:b7:3e:8f:b0:d3:7e:04:ad:41:9d:17:34:80:c6: ce:17:fa:3b:fa:bb:32:1e:db:29:fa:83:ce:eb:ab: 65:0f:49:65:68:96:e5:7e:13:9f:9f:c0:9d:11:6e: e5:10:1c:05:99:34:e6:5e:b8:51:fa:d9:98:23:cd: 60:fa:7e:09:e7:be:21:41:34:f0:78:87:d1:77:98: 5e:fa:cd:f3:81:88:c3:f6:ce:c2:dd:95:a4:1d:81: 33:93:1b:b6:fd:b4:15:cf:f6:8d:f9:36:a8:a3:8c: 95:7d:91:ce:40:99:f2:47:8d:a6:07:75:3b:7a:fe: ed:0f:f7:67:e8:d7:6b:fb:38:87:84:8b:87:48:29: 91:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:7F:A8:3B:23:AA:BE:1F:8C:31:10:11:5C:E9:BE:DE:7D:2D:D2:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/08ea6e2f-adac-3e05-8c71-7a86b061972f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:41:14:c3:e4:14:0c:74:de:38:87:fc:1b:ad:c2:e9:74:2e: 09:42:b6:85:06:46:5c:99:54:e8:d5:36:ec:d4:73:28:4e:62: 5c:c5:44:a8:fd:e4:f4:a6:2e:f9:b5:9e:e8:70:6a:00:6d:ec: da:a4:37:0d:58:49:df:f2:82:8d:d2:4c:69:b4:7d:97:31:44: 2c:41:1f:9f:4a:34:f3:45:7c:88:5a:7c:6b:ed:16:64:70:b2: 10:c2:c9:93:c3:50:77:47:a0:36:b2:41:8b:14:59:5b:47:5f: 21:39:3d:62:78:05:5f:8b:6d:c7:83:76:96:ba:18:d7:56:eb: c8:31:7c:97:fc:3c:64:17:a3:f3:ba:4a:d0:bf:bb:d1:75:7f: 97:a1:fb:23:e8:dd:49:4a:68:18:d0:74:ec:2f:8b:62:02:ca: 2b:7f:70:38:65:60:90:b2:61:e2:f0:4b:df:84:34:ff:fe:ef: 3d:a0:14:b9:0c:46:54:5a:58:dc:13:ad:96:83:61:62:4e:e0: ec:97:f6:d2:04:71:36:f7:9f:d0:a7:cf:9b:2d:fd:25:0d:22: 83:30:1e:c1:40:1d:cf:b5:61:52:29:b1:12:60:21:f5:0b:4b: 95:71:bb:96:73:4c:60:86:3d:7a:14:57:ff:de:69:48:66:15: 13:da:4d:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbJAqcpAmdJ0wwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTVlYjIwZWUtNjQ5Yy00ZjhhLWI4ZmEtNzA3NmVmNWE4MDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNJPzMRlaWoX9zAIYsMvbHET1pYzAo8MWpsZ /+WsbB4HLvlwAtT1iYDfZ3p0DnLCQy82zC6exaHfRliSEL/0ZalhQ2C/hPAZCI7j Ybt/+Np1IDfePTNY5QmRpJkW+Ajz7K37yc8qijRm/ga9xQWbOqb3EGrNNDh4tz6P sNN+BK1BnRc0gMbOF/o7+rsyHtsp+oPO66tlD0llaJblfhOfn8CdEW7lEBwFmTTm XrhR+tmYI81g+n4J574hQTTweIfRd5he+s3zgYjD9s7C3ZWkHYEzkxu2/bQVz/aN +Taoo4yVfZHOQJnyR42mB3U7ev7tD/dn6Ndr+ziHhIuHSCmRiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZ/qDsjqr4fjDEQEVzpvt59LdIqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDhlYTZlMmYtYWRhYy0z ZTA1LThjNzEtN2E4NmIwNjE5NzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZBFMPkFAx03jiH/Butwul0LglCtoUGRlyZVOjVNuzUcyhOYlzFRKj9 5PSmLvm1nuhwagBt7NqkNw1YSd/ygo3STGm0fZcxRCxBH59KNPNFfIhafGvtFmRw shDCyZPDUHdHoDayQYsUWVtHXyE5PWJ4BV+LbceDdpa6GNdW68gxfJf8PGQXo/O6 StC/u9F1f5eh+yPo3UlKaBjQdOwvi2ICyit/cDhlYJCyYeLwS9+ENP/+7z2gFLkM RlRaWNwTrZaDYWJO4OyX9tIEcTb3n9Cnz5st/SUNIoMwHsFAHc+1YVIpsRJgIfUL S5Vxu5ZzTGCGPXoUV//eaUhmFRPaTcI= -----END CERTIFICATE-----Generated at Sat Jul 26 11:35:01 2025 by rpki-client