$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/153453fb-4e83-30ed-96bc-b96e677fd344.roa File: 153453fb-4e83-30ed-96bc-b96e677fd344.roa (raw, json) Hash identifier: wAo5Z1zk+7a1yWnNtaJZjkpMGeoUUU4HLhbGf3LoICE= Subject key identifier: AC:5A:7F:9F:D4:0A:BC:A0:0E:23:28:81:54:5B:A6:58:57:96:9B:A5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110D495A2218F526F8EA40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/153453fb-4e83-30ed-96bc-b96e677fd344.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0d:49:5a:22:18:f5:26:f8:ea:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0210600a-6c2c-448e-8432-f0582234a770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b6:0d:a9:60:fd:d4:46:03:a6:a3:eb:9c:a1: ad:fa:d1:d6:cf:9a:ac:10:06:ab:b3:d0:7b:5e:c1: a4:9d:8e:d8:f2:b5:c0:62:21:4d:e6:93:fe:6c:8d: 88:a9:df:79:63:1c:96:b1:ae:b5:d2:3e:10:6a:a0: fb:94:53:ae:09:9e:eb:8a:19:3d:59:07:13:c9:7d: e5:4f:56:97:b2:95:31:fe:a8:40:4b:55:18:72:1a: ef:64:39:28:65:e7:b8:7d:7c:ea:72:24:e8:f0:0f: 66:d1:df:12:51:71:ef:f0:c0:ef:50:dd:8c:19:7c: 5f:6e:e7:06:e5:f3:9c:14:de:74:c9:de:4b:58:36: de:ca:cb:52:b9:a7:1d:28:c0:92:27:ce:7c:aa:6c: a0:d2:44:9c:c4:91:e4:b6:f9:60:75:87:b9:06:a3: ac:f8:96:a7:05:4a:eb:e3:c1:1d:f2:97:70:f0:0c: 7e:71:47:15:20:61:17:a8:4d:c2:8c:9c:bb:49:45: 10:bf:85:60:a0:c1:ba:9b:53:e8:52:ea:5f:ab:be: 53:2b:be:a8:24:eb:ea:24:61:1f:86:89:95:90:d4: dd:1d:50:66:95:0e:1d:d3:84:5b:72:03:94:7b:be: fc:d0:18:41:4b:50:95:e4:bf:db:a0:a8:f7:e6:8f: 8a:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5A:7F:9F:D4:0A:BC:A0:0E:23:28:81:54:5B:A6:58:57:96:9B:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/153453fb-4e83-30ed-96bc-b96e677fd344.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:2e:18:36:c1:37:92:64:06:7b:22:72:45:67:fb:4f:d3:fe: 06:a3:46:09:22:3e:eb:fd:1b:48:e2:45:98:e0:32:c8:f7:03: 67:ba:94:eb:bc:99:15:37:73:9e:28:81:ae:d9:cc:ec:d9:2e: 44:b9:30:71:8a:bd:a2:24:9d:b8:90:59:16:34:f0:32:8b:c8: 9f:dc:b2:43:a9:22:21:03:af:f8:58:13:62:8e:e8:fb:75:9c: bd:21:25:4e:ab:ed:8f:4a:c9:95:c6:99:02:ef:08:9c:be:ba: 24:51:dd:51:2a:28:5f:e2:b3:8b:d2:a0:2a:94:55:c8:50:81: 52:69:fa:c5:cc:2b:8c:7d:6a:8c:11:a5:4c:0b:79:67:da:06: b7:63:0c:2e:c9:7b:24:1a:89:a0:ac:6b:31:3b:16:6a:7c:c6: af:10:06:77:75:4b:8d:d1:ca:7a:19:7d:cf:f0:bc:42:31:37: e8:b9:46:8f:b4:cd:71:63:09:a6:36:91:cb:fe:2f:2f:45:e9: 3a:fd:48:11:62:ff:88:2d:ce:38:00:0a:4c:82:99:70:c2:73: e1:55:ce:3a:7f:2a:84:83:7f:8f:0d:ef:91:60:a9:2d:59:07: 75:c5:86:d4:a0:72:8c:4a:09:44:6e:91:68:a0:99:9c:fa:ae: a2:c7:0b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQ1JWiIY9Sb46kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDIxMDYwMGEtNmMyYy00NDhlLTg0MzItZjA1ODIyMzRhNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrYNqWD91EYDpqPrnKGt+tHWz5qsEAars9B7 XsGknY7Y8rXAYiFN5pP+bI2Iqd95YxyWsa610j4QaqD7lFOuCZ7rihk9WQcTyX3l T1aXspUx/qhAS1UYchrvZDkoZee4fXzqciTo8A9m0d8SUXHv8MDvUN2MGXxfbucG 5fOcFN50yd5LWDbeystSuacdKMCSJ858qmyg0kScxJHktvlgdYe5BqOs+JanBUrr 48Ed8pdw8Ax+cUcVIGEXqE3CjJy7SUUQv4VgoMG6m1PoUupfq75TK76oJOvqJGEf homVkNTdHVBmlQ4d04RbcgOUe7780BhBS1CV5L/boKj35o+KFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKxaf5/UCrygDiMogVRbplhXlpulMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTUzNDUzZmItNGU4My0z MGVkLTk2YmMtYjk2ZTY3N2ZkMzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMuGDbBN5JkBnsickVn+0/T/gajRgkiPuv9G0jiRZjgMsj3A2e6lOu8 mRU3c54oga7ZzOzZLkS5MHGKvaIknbiQWRY08DKLyJ/cskOpIiEDr/hYE2KO6Pt1 nL0hJU6r7Y9KyZXGmQLvCJy+uiRR3VEqKF/is4vSoCqUVchQgVJp+sXMK4x9aowR pUwLeWfaBrdjDC7JeyQaiaCsazE7Fmp8xq8QBnd1S43RynoZfc/wvEIxN+i5Ro+0 zXFjCaY2kcv+Ly9F6Tr9SBFi/4gtzjgACkyCmXDCc+FVzjp/KoSDf48N75FgqS1Z B3XFhtSgcoxKCURukWigmZz6rqLHC9U= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:25 2025 by rpki-client