$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa File: 237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa (raw, json) Hash identifier: 5+TnaTTUsOExCRr84ezw1NYV4hshI8LuR0RTWfCXlVA= Subject key identifier: E7:8C:DA:57:24:BD:35:83:C3:B4:77:55:2D:8B:95:68:F6:1C:A1:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110EABE3F94CC1B1450020 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0e:ab:e3:f9:4c:c1:b1:45:00:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=96f4c181-4cc1-4b8e-89f5-5a5bd2614057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:cf:e6:df:e1:57:5b:a3:fb:aa:16:2c:94:1c: 17:df:b5:e1:d8:f1:74:0a:b4:62:56:7f:91:95:63: 3f:eb:6c:a0:22:3f:78:4d:64:a3:92:ad:5b:ba:4c: 0d:e0:53:1a:6d:ce:6d:87:90:d8:86:ac:08:37:e6: 04:c7:2d:31:2d:07:59:bf:8e:67:e0:bb:d4:94:27: c1:88:c0:54:e1:bc:64:7b:28:8f:f4:81:36:74:a0: cf:c1:ff:c5:cc:a6:35:a3:ee:dc:5a:88:62:84:f2: af:4e:75:f4:69:47:d4:fb:c4:9f:2d:20:14:39:e5: 46:56:36:4b:06:68:25:e6:23:7f:3f:db:da:a5:a4: db:88:af:04:03:ee:b6:79:12:80:de:aa:75:3d:32: 0a:92:32:17:2e:02:b4:7e:99:05:3a:15:52:18:b3: e1:df:55:ce:62:a0:45:f6:0a:6c:99:f4:e4:b8:fa: a1:50:d2:fa:4f:c3:1c:ca:ff:bc:a6:c1:6c:61:d6: 99:8a:10:1a:bc:2c:39:9a:96:92:ea:da:30:ad:17: 1d:22:47:b7:8e:1c:cf:de:bc:6f:89:cd:3e:2f:ea: 12:f2:c2:82:26:7b:5e:e8:fb:49:a1:29:f0:e8:a1: 68:04:01:9b:f7:cf:52:74:e8:b1:46:00:3d:32:c2: cd:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8C:DA:57:24:BD:35:83:C3:B4:77:55:2D:8B:95:68:F6:1C:A1:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:32:67:31:24:f3:8e:21:59:92:f1:fd:63:e2:dc:7a:da:b3: 00:20:51:cd:00:7c:5b:01:83:5b:21:41:5d:2d:65:6c:e0:72: 24:5a:60:48:d7:a6:0a:38:0d:fe:25:b0:61:91:93:a2:94:be: 24:7d:a9:60:2f:86:95:e8:86:2e:c8:83:83:d6:3e:10:ab:9e: 0d:58:c5:8b:a1:0b:1e:a2:58:98:ca:78:f2:9d:f3:c8:3c:09: 16:60:90:98:c7:4b:a8:c7:b9:ef:57:20:da:5a:60:19:51:b9: 34:8b:fd:ae:59:d1:80:65:44:52:73:b8:34:e7:24:5e:ef:9f: 6e:23:85:c3:7e:83:ac:43:e7:e7:57:f1:0d:cb:77:f2:ff:ef: ae:26:86:92:aa:82:d0:48:3b:37:d4:c6:ee:3b:19:88:80:d5: 94:33:91:04:08:d8:a3:a7:82:37:d6:5a:5e:cd:6f:f6:c0:93: f4:6d:da:47:db:bf:07:de:b4:26:ae:24:d8:7f:f2:21:1c:be: 16:b3:82:34:54:f2:6e:35:f2:7c:98:39:d7:f0:b6:4c:f4:85: d5:85:6a:6f:12:ba:7a:56:06:0a:38:3c:1a:cc:c6:d6:eb:74: 3a:8f:5f:49:cb:5e:7f:7e:5c:e9:32:e8:0f:a8:73:7c:81:bf: 5b:67:8c:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQ6r4/lMwbFFACAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTZmNGMxODEtNGNjMS00YjhlLTg5ZjUtNWE1YmQyNjE0MDU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnc/m3+FXW6P7qhYslBwX37Xh2PF0CrRiVn+R lWM/62ygIj94TWSjkq1bukwN4FMabc5th5DYhqwIN+YExy0xLQdZv45n4LvUlCfB iMBU4bxkeyiP9IE2dKDPwf/FzKY1o+7cWohihPKvTnX0aUfU+8SfLSAUOeVGVjZL Bmgl5iN/P9vapaTbiK8EA+62eRKA3qp1PTIKkjIXLgK0fpkFOhVSGLPh31XOYqBF 9gpsmfTkuPqhUNL6T8Mcyv+8psFsYdaZihAavCw5mpaS6towrRcdIke3jhzP3rxv ic0+L+oS8sKCJnte6PtJoSnw6KFoBAGb989SdOixRgA9MsLNswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOeM2lckvTWDw7R3VS2LlWj2HKGnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM3YzFkMGQtY2E3Yi0z MWY5LWE1OGItN2FjN2FmM2M1ZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFIyZzEk844hWZLx/WPi3HraswAgUc0AfFsBg1shQV0tZWzgciRaYEjX pgo4Df4lsGGRk6KUviR9qWAvhpXohi7Ig4PWPhCrng1YxYuhCx6iWJjKePKd88g8 CRZgkJjHS6jHue9XINpaYBlRuTSL/a5Z0YBlRFJzuDTnJF7vn24jhcN+g6xD5+dX 8Q3Ld/L/764mhpKqgtBIOzfUxu47GYiA1ZQzkQQI2KOngjfWWl7Nb/bAk/Rt2kfb vwfetCauJNh/8iEcvhazgjRU8m418nyYOdfwtkz0hdWFam8SunpWBgo4PBrMxtbr dDqPX0nLXn9+XOky6A+oc3yBv1tnjNM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:06:58 2025 by rpki-client