$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fb81a50-16ee-3005-9407-beb5e3ce4106.roa File: 0fb81a50-16ee-3005-9407-beb5e3ce4106.roa (raw, json) Hash identifier: Xle7ivQWiO64O6NtiPsGIyDNW4/qiZACD2b496q6kXE= Subject key identifier: D8:00:33:E0:EA:A0:72:59:D8:AB:CE:1C:67:25:23:A3:8D:71:01:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411081A50E2F0F1DA83F880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fb81a50-16ee-3005-9407-beb5e3ce4106.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:08:1a:50:e2:f0:f1:da:83:f8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=985da24d-7ab1-4905-98df-3f5ec4dacd0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:3f:9e:c8:dc:48:6e:18:ce:a8:5a:95:8e:7b: 2f:21:52:ee:cf:bb:a8:c6:5a:38:2e:0d:c2:22:d6: a0:48:d0:75:2e:b1:12:54:c2:3c:7a:9d:98:66:5a: a0:99:28:9a:0e:aa:d7:a9:91:86:2c:fa:14:b4:1a: dc:86:af:5a:73:0f:c9:cc:ab:8d:80:82:dc:63:7f: 6a:f4:4f:f5:b9:e3:56:2e:4f:b3:9c:a0:cd:7c:08: 46:39:b3:5c:58:7c:7f:2b:14:a9:e9:c0:d8:9f:bd: 70:f6:95:d6:fb:00:fc:d7:76:68:74:55:76:f4:bc: 8a:b1:4b:fc:46:26:95:67:34:12:52:fd:e0:c3:e4: 3b:bb:ae:f0:c1:cb:07:30:30:c8:12:fc:dd:55:f1: dc:0f:e6:8b:38:0b:6c:89:f6:80:59:cf:2d:44:5f: 73:9f:0f:f9:11:eb:28:46:36:0e:36:35:ba:8e:23: 92:09:b3:63:72:14:9d:68:c8:5f:9b:50:01:de:cb: 65:4b:b2:31:fa:b0:c6:22:d5:e3:25:4f:23:54:96: 39:10:22:18:a9:2a:be:5c:9e:06:bf:1c:93:67:8b: ad:f1:9f:a8:6f:31:3a:24:5e:22:f3:be:0b:0b:fa: 41:f6:16:9c:78:d0:9f:f9:e3:ae:ed:84:bf:a4:ae: 2e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:00:33:E0:EA:A0:72:59:D8:AB:CE:1C:67:25:23:A3:8D:71:01:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0fb81a50-16ee-3005-9407-beb5e3ce4106.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:5b:f1:25:51:9b:2e:49:ce:bd:00:14:84:71:44:8e:27:c2: b6:8d:40:67:fa:97:b2:83:1e:96:fd:89:d7:8d:49:09:2f:c9: 09:6c:24:54:c5:66:23:bb:c9:a4:1d:93:93:77:1a:2c:43:84: 6d:92:98:b1:e9:3b:9b:3e:11:fe:e7:e6:b7:34:87:3c:7f:29: cf:bc:44:d0:44:cf:8e:0d:fc:ed:3e:ea:c7:b7:f4:73:9a:c7: c2:25:9f:8e:1a:f4:1c:2f:35:10:d0:97:bf:6e:1a:f8:d0:3f: 7e:24:0f:47:2d:e8:fa:bd:6a:ee:9b:52:26:9e:c6:d8:1a:e6: d4:bd:5e:8f:f9:66:dd:40:21:04:7b:57:fb:62:44:d8:e6:19: 9e:45:09:2b:b9:91:43:bb:0a:59:8f:85:45:92:0a:64:98:b2: fa:9b:54:88:70:39:d7:f9:bb:4c:9b:b6:a5:c4:9a:06:00:c4: c9:40:48:38:b7:44:c9:b0:de:92:15:d6:8a:f9:9f:1c:c4:18: 12:f8:8f:a3:27:8f:fc:ea:f8:57:f4:f5:b5:92:d1:92:84:82: ad:75:31:30:83:c7:ca:c9:da:5c:04:82:4f:2b:ba:d5:8f:8d: 3d:d8:2d:e2:9c:93:f9:02:df:aa:5a:a8:90:d9:b5:b3:56:8c: e0:fa:2a:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQgaUOLw8dqD+IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTg1ZGEyNGQtN2FiMS00OTA1LTk4ZGYtM2Y1ZWM0ZGFjZDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhz+eyNxIbhjOqFqVjnsvIVLuz7uoxlo4Lg3C ItagSNB1LrESVMI8ep2YZlqgmSiaDqrXqZGGLPoUtBrchq9acw/JzKuNgILcY39q 9E/1ueNWLk+znKDNfAhGObNcWHx/KxSp6cDYn71w9pXW+wD813ZodFV29LyKsUv8 RiaVZzQSUv3gw+Q7u67wwcsHMDDIEvzdVfHcD+aLOAtsifaAWc8tRF9znw/5Eeso RjYONjW6jiOSCbNjchSdaMhfm1AB3stlS7Ix+rDGItXjJU8jVJY5ECIYqSq+XJ4G vxyTZ4ut8Z+obzE6JF4i874LC/pB9haceNCf+eOu7YS/pK4uFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgAM+DqoHJZ2KvOHGclI6ONcQH6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGZiODFhNTAtMTZlZS0z MDA1LTk0MDctYmViNWUzY2U0MTA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1b8SVRmy5Jzr0AFIRxRI4nwraNQGf6l7KDHpb9ideNSQkvyQlsJFTF ZiO7yaQdk5N3GixDhG2SmLHpO5s+Ef7n5rc0hzx/Kc+8RNBEz44N/O0+6se39HOa x8Iln44a9BwvNRDQl79uGvjQP34kD0ct6Pq9au6bUiaextga5tS9Xo/5Zt1AIQR7 V/tiRNjmGZ5FCSu5kUO7ClmPhUWSCmSYsvqbVIhwOdf5u0ybtqXEmgYAxMlASDi3 RMmw3pIV1or5nxzEGBL4j6Mnj/zq+Ff09bWS0ZKEgq11MTCDx8rJ2lwEgk8rutWP jT3YLeKck/kC36paqJDZtbNWjOD6Kh4= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:47 2025 by rpki-client