$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e06fa9-8297-3647-9f50-b56402a75b83.roa File: 28e06fa9-8297-3647-9f50-b56402a75b83.roa (raw, json) Hash identifier: xBgqeHA12IozFoJ/lvg2g+lQUj/L/n11HsCBgmRDq9M= Subject key identifier: BF:0D:D2:14:FD:3B:A1:0B:A9:4B:60:C1:DB:17:C5:5C:8D:5E:2A:2C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110DCAF17E1E24D9D4BA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e06fa9-8297-3647-9f50-b56402a75b83.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0d:ca:f1:7e:1e:24:d9:d4:ba:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=29d50471-6726-4e6c-a8cf-19cc770ddf23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:2e:e5:d4:21:2d:36:0e:e2:27:7b:5d:c4:60: 08:68:31:9a:34:15:2d:4b:23:0a:83:4a:fd:29:7d: 6d:0b:18:67:c1:1e:6c:34:5e:18:8d:91:5e:d8:05: 04:58:6b:44:ae:ac:2a:a3:1d:ba:33:85:fa:34:82: 96:43:91:bb:8b:bd:ab:2b:fb:75:82:2c:d5:52:61: 70:db:97:9f:54:5d:29:9c:b9:64:f3:ce:97:4e:23: f7:d4:f5:c0:14:5c:5d:e1:28:11:36:7a:15:32:1a: d8:61:61:59:fd:5a:8a:fb:d4:f7:21:dc:39:72:1f: db:f4:b8:8e:e3:bc:2d:a7:c3:12:61:42:d7:ec:ae: 03:a8:d2:0d:dc:c3:76:f8:a6:80:ad:f3:22:1d:69: 6b:b4:5b:c1:a4:2d:f5:20:02:ed:7a:37:1a:e1:ab: 8f:6d:59:a1:f8:0f:ae:8f:e7:f3:83:06:60:a5:ce: 9c:f7:19:60:4f:a8:9e:a8:c6:67:43:39:dd:86:cc: 08:70:fa:a2:bd:d0:29:80:44:70:e0:27:06:c4:e9: bd:98:7b:94:2f:28:79:3e:df:e7:0c:33:f2:e4:28: 27:e9:cd:20:8b:c4:20:e1:02:1e:d2:47:a8:63:fc: 1f:fd:d8:f7:3f:b4:b8:08:07:c8:f3:25:ae:4f:f3: bd:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:0D:D2:14:FD:3B:A1:0B:A9:4B:60:C1:DB:17:C5:5C:8D:5E:2A:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/28e06fa9-8297-3647-9f50-b56402a75b83.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:1e:9c:b2:af:a0:05:d0:09:5d:7c:aa:b0:cb:6b:49:63:d1: a3:6f:8c:2f:57:e5:73:e5:61:95:83:43:30:43:9d:84:72:27: 2c:70:2f:1b:44:cc:22:e9:db:20:5b:b1:73:4d:d9:47:ea:18: 53:c4:a8:56:80:e0:5c:34:10:94:33:71:62:66:7d:ed:0e:ab: 2f:3d:c3:f9:ef:40:15:df:ac:9a:f7:5b:2c:02:bb:ea:af:26: 6f:02:52:18:40:3c:bf:48:16:b4:dd:f2:a0:99:23:1d:8e:57: 17:4e:11:34:ac:de:16:b9:90:4c:43:62:88:6d:8f:f3:68:10: 6b:35:65:0f:23:b6:91:b4:bc:ee:72:ba:50:f2:22:af:81:1a: 0d:08:15:35:00:8a:02:68:d4:fa:cd:e3:dd:b1:a6:46:47:e2: b0:6e:f7:01:10:9f:0f:34:35:cf:ca:42:3f:13:4a:44:34:51: 83:a1:2c:20:33:17:cf:42:de:5e:f9:ad:a6:25:77:d8:41:b5: 01:5a:45:80:5c:1a:d9:a1:ea:53:2c:c4:09:cf:94:bf:4b:30: df:a5:44:9b:73:4e:9d:40:37:e3:26:23:31:2b:97:b7:71:36: db:a1:03:9b:5c:c8:01:1d:2b:59:ec:57:6c:fd:d5:92:d9:db: aa:23:d3:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQ3K8X4eJNnUugAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjlkNTA0NzEtNjcyNi00ZTZjLWE4Y2YtMTljYzc3MGRkZjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAji7l1CEtNg7iJ3tdxGAIaDGaNBUtSyMKg0r9 KX1tCxhnwR5sNF4YjZFe2AUEWGtErqwqox26M4X6NIKWQ5G7i72rK/t1gizVUmFw 25efVF0pnLlk886XTiP31PXAFFxd4SgRNnoVMhrYYWFZ/VqK+9T3Idw5ch/b9LiO 47wtp8MSYULX7K4DqNIN3MN2+KaArfMiHWlrtFvBpC31IALtejca4auPbVmh+A+u j+fzgwZgpc6c9xlgT6ieqMZnQzndhswIcPqivdApgERw4CcGxOm9mHuULyh5Pt/n DDPy5Cgn6c0gi8Qg4QIe0keoY/wf/dj3P7S4CAfI8yWuT/O90wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL8N0hT9O6ELqUtgwdsXxVyNXiosMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjhlMDZmYTktODI5Ny0z NjQ3LTlmNTAtYjU2NDAyYTc1YjgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANEenLKvoAXQCV18qrDLa0lj0aNvjC9X5XPlYZWDQzBDnYRyJyxwLxtE zCLp2yBbsXNN2UfqGFPEqFaA4Fw0EJQzcWJmfe0Oqy89w/nvQBXfrJr3WywCu+qv Jm8CUhhAPL9IFrTd8qCZIx2OVxdOETSs3ha5kExDYohtj/NoEGs1ZQ8jtpG0vO5y ulDyIq+BGg0IFTUAigJo1PrN492xpkZH4rBu9wEQnw80Nc/KQj8TSkQ0UYOhLCAz F89C3l75raYld9hBtQFaRYBcGtmh6lMsxAnPlL9LMN+lRJtzTp1AN+MmIzErl7dx NtuhA5tcyAEdK1nsV2z91ZLZ26oj05o= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:14 2025 by rpki-client