$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa File: 19a62d2b-da55-3be0-b433-46859e2a5d3e.roa (raw, json) Hash identifier: ut6X4ZDevHUgmyK6zFUfxyE6quAnXOgRT9T09BbxPks= Subject key identifier: 6C:28:73:1A:66:9F:6C:06:2B:2C:7C:92:3A:B7:42:DB:8B:0A:0C:E8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B278877B0E909C4FF780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b2:78:87:7b:0e:90:9c:4f:f7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8643fbbd-32d8-471f-bb27-bc78c31640e8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ba:c0:a7:1c:ea:24:33:83:3a:b7:e6:84:44: 91:79:7e:56:dc:8d:1b:38:65:be:52:9d:db:bd:0b: e9:df:7b:21:6a:84:0d:ca:7d:91:05:29:71:f3:c7: fa:58:8b:e7:a6:15:2c:14:50:88:89:2c:4c:90:09: 8c:44:59:2e:24:a4:6f:91:52:c2:a4:4b:85:c9:c8: 11:f8:79:28:68:aa:7f:fe:43:8a:d9:0d:3d:ef:ca: 73:89:a4:3b:8c:36:f3:c5:6c:92:0a:e7:1b:75:f8: 76:94:93:f6:82:c5:6a:b5:44:77:e7:bb:09:f9:e7: e3:9b:ef:20:6c:6c:16:b7:b9:20:d2:3d:6b:6e:52: a3:ac:24:a9:43:7d:e2:47:2a:ba:a5:68:4d:63:06: bf:30:eb:b9:0c:4a:68:1b:e1:6d:bc:ab:3a:7a:28: c9:04:1c:e7:db:f7:c7:c6:30:41:69:40:9b:8d:ae: f1:0f:27:87:6a:8d:08:50:a4:d1:b7:9c:b8:e8:68: b5:f0:8d:6a:a1:12:2c:3f:cd:eb:d8:92:60:70:54: f0:c4:e9:59:84:43:5b:e6:1b:ef:fc:e4:41:e9:1a: 73:3a:ec:e5:0b:29:09:9a:fd:a0:8b:99:cd:18:e3: 41:6e:72:24:74:3c:2a:69:48:9d:97:76:11:0b:ff: e0:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:28:73:1A:66:9F:6C:06:2B:2C:7C:92:3A:B7:42:DB:8B:0A:0C:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/19a62d2b-da55-3be0-b433-46859e2a5d3e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:14:e1:0b:17:f0:2d:97:56:24:5f:94:d3:a6:f1:d3:e7:6f: ff:d5:f8:8f:cf:00:f4:de:35:ab:67:ea:b3:c7:16:cf:97:3f: 2d:0d:59:0d:f6:20:a9:60:e8:2d:ee:f3:2d:9d:a8:67:9a:f5: b3:6e:41:ba:38:4c:07:b3:5b:e5:ee:20:1a:65:5f:1c:c0:d1: a5:2f:55:b5:f8:cb:bb:c3:71:f7:c7:ed:bb:28:05:1c:62:0b: f0:d3:c1:49:8b:65:3e:a8:18:e3:85:61:85:84:ee:4a:38:da: 18:dd:ab:ad:98:ff:89:b9:f9:6a:d9:13:14:d4:30:cc:8d:43: 86:40:2d:f4:b6:49:ed:6e:e8:8f:95:00:37:a2:0e:be:73:e4: 88:55:0d:4f:ee:29:9e:49:fa:9a:7b:2d:83:d6:ca:b6:5f:42: 6f:77:ef:7d:74:42:7e:1a:af:17:7f:9f:36:49:13:a1:6d:85: 3e:07:29:4d:3a:73:4b:92:f2:d8:55:02:de:8e:60:78:e0:3e: 11:47:3e:d9:47:f4:e1:68:62:b8:cd:90:36:1a:ac:83:87:7e: 67:98:a4:eb:c8:e6:b2:9a:ae:e2:2b:f9:6d:89:a6:9d:db:06: bc:6e:b6:62:1a:99:c3:43:1e:7f:5b:b0:2d:73:81:81:ae:e2: da:23:e7:45 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbJ4h3sOkJxP94AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODY0M2ZiYmQtMzJkOC00NzFmLWJiMjctYmM3OGMzMTY0MGU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrrApxzqJDODOrfmhESReX5W3I0bOGW+Up3b vQvp33shaoQNyn2RBSlx88f6WIvnphUsFFCIiSxMkAmMRFkuJKRvkVLCpEuFycgR +HkoaKp//kOK2Q0978pziaQ7jDbzxWySCucbdfh2lJP2gsVqtUR357sJ+efjm+8g bGwWt7kg0j1rblKjrCSpQ33iRyq6pWhNYwa/MOu5DEpoG+FtvKs6eijJBBzn2/fH xjBBaUCbja7xDyeHao0IUKTRt5y46Gi18I1qoRIsP83r2JJgcFTwxOlZhENb5hvv /ORB6RpzOuzlCykJmv2gi5nNGONBbnIkdDwqaUidl3YRC//g9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwocxpmn2wGKyx8kjq3QtuLCgzoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTlhNjJkMmItZGE1NS0z YmUwLWI0MzMtNDY4NTllMmE1ZDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK11MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ4U4QsX8C2XViRflNOm8dPnb//V+I/PAPTeNatn6rPHFs+XPy0NWQ32 IKlg6C3u8y2dqGea9bNuQbo4TAezW+XuIBplXxzA0aUvVbX4y7vDcffH7bsoBRxi C/DTwUmLZT6oGOOFYYWE7ko42hjdq62Y/4m5+WrZExTUMMyNQ4ZALfS2Se1u6I+V ADeiDr5z5IhVDU/uKZ5J+pp7LYPWyrZfQm937310Qn4arxd/nzZJE6FthT4HKU06 c0uS8thVAt6OYHjgPhFHPtlH9OFoYrjNkDYarIOHfmeYpOvI5rKaruIr+W2Jpp3b BrxutmIamcNDHn9bsC1zgYGu4toj50U= -----END CERTIFICATE-----Generated at Sat Jul 26 11:35:06 2025 by rpki-client