$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa File: 2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa (raw, json) Hash identifier: 4xXspUrUn4E0VqkN965BNQQkDkRtner6DvuE4SLLz+8= Subject key identifier: E3:E4:5C:C2:30:4F:EA:69:43:49:A9:6A:E7:60:07:CF:BD:C2:89:24 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B1ADC07BC32A9A8AEE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b1:ad:c0:7b:c3:2a:9a:8a:ee:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=84d457b3-77a2-43ae-a0aa-1731f99e4706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:20:02:82:c2:39:69:ff:2a:c1:f7:3f:c1:15: 89:ee:70:be:5d:3d:fb:0a:3f:b5:42:65:7c:ec:87: 82:16:ba:02:22:87:54:c9:6c:6e:13:d0:eb:07:81: 86:77:e9:a2:44:78:de:be:d1:97:b6:b3:19:04:3b: 40:8a:54:ed:bc:da:88:a6:34:b2:17:91:72:5f:7c: 9b:46:d0:fb:25:8c:b8:f4:89:fc:9e:31:e3:07:b2: 3c:b6:00:56:00:21:99:45:48:52:29:a3:a3:27:e4: 4c:9d:44:a9:ef:7e:03:19:b5:e6:d6:75:58:8c:56: 51:68:d9:85:01:f2:99:20:0b:18:cd:04:3a:8c:88: a2:eb:2a:37:b9:d3:84:4a:5e:3d:fe:e5:15:4c:a3: 56:eb:a7:c4:d2:b6:f7:d5:34:f3:fa:9b:87:29:8a: 83:71:1e:35:15:8b:68:90:16:20:27:fc:dd:e7:13: ca:72:9d:fd:5c:a3:5a:6e:f6:bd:d9:66:f7:76:08: 20:c4:19:7a:59:39:71:b6:c4:b9:53:33:9e:08:04: 75:41:33:df:88:2b:74:34:76:ee:82:6b:a2:b4:8d: bc:2a:8c:f1:7a:b6:6b:c5:dc:58:90:5c:35:91:19: 9f:4b:2a:33:81:04:ba:1e:bf:e7:eb:a7:08:27:0b: ff:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:E4:5C:C2:30:4F:EA:69:43:49:A9:6A:E7:60:07:CF:BD:C2:89:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:42:a8:2e:a3:e3:b9:54:a2:8a:ad:f4:8b:06:1c:9e:2c:8b: 55:20:d8:e2:e5:c4:64:69:1b:1e:04:fa:f6:97:ce:67:f0:68: b2:35:2b:05:90:d0:02:0f:4b:a1:0c:b7:d0:bc:83:06:3a:84: 71:05:78:92:d6:e0:55:cf:14:9f:ef:c4:47:18:19:03:75:1f: bc:48:6f:5c:57:36:b0:a1:b5:ab:57:48:99:84:d1:45:fa:9a: a7:29:c8:59:9b:cc:96:7e:f1:60:89:97:e8:e6:7e:1c:ee:1a: 8d:a6:40:6b:39:8b:3d:8d:4a:8a:89:de:43:a7:32:e0:d0:e9: 4a:d2:2d:15:9d:bd:65:80:ea:50:3d:02:61:1d:08:67:56:90: aa:8a:7b:bd:f1:74:20:29:be:51:66:97:a5:08:9f:4b:1b:95: 88:2c:7b:be:4b:5d:5c:46:e5:68:af:84:47:d6:98:db:4a:c8: aa:ab:11:34:87:2a:ae:f6:0d:98:bd:97:58:59:cb:ba:3a:64: c0:92:9f:fe:8c:a5:7b:0b:f0:f6:c6:9f:4c:33:89:37:04:0d: c2:59:b3:96:1c:3d:d4:53:3f:44:c4:81:df:4e:fc:7f:1c:de: 16:d4:6d:2d:b0:49:32:12:99:79:5f:c8:ab:ae:f9:4c:2a:74: ff:cc:02:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbGtwHvDKpqK7kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODRkNDU3YjMtNzdhMi00M2FlLWEwYWEtMTczMWY5OWU0NzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSACgsI5af8qwfc/wRWJ7nC+XT37Cj+1QmV8 7IeCFroCIodUyWxuE9DrB4GGd+miRHjevtGXtrMZBDtAilTtvNqIpjSyF5FyX3yb RtD7JYy49In8njHjB7I8tgBWACGZRUhSKaOjJ+RMnUSp734DGbXm1nVYjFZRaNmF AfKZIAsYzQQ6jIii6yo3udOESl49/uUVTKNW66fE0rb31TTz+puHKYqDcR41FYto kBYgJ/zd5xPKcp39XKNabva92Wb3dgggxBl6WTlxtsS5UzOeCAR1QTPfiCt0NHbu gmuitI28KozxerZrxdxYkFw1kRmfSyozgQS6Hr/n66cIJwv/KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPkXMIwT+ppQ0mpaudgB8+9wokkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRkYmQwNDQtZDEzYy0z Y2UyLWFkMjItM2NiMjg1ZDY4YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtCqC6j47lUooqt9IsGHJ4si1Ug2OLlxGRpGx4E+vaXzmfwaLI1KwWQ 0AIPS6EMt9C8gwY6hHEFeJLW4FXPFJ/vxEcYGQN1H7xIb1xXNrChtatXSJmE0UX6 mqcpyFmbzJZ+8WCJl+jmfhzuGo2mQGs5iz2NSoqJ3kOnMuDQ6UrSLRWdvWWA6lA9 AmEdCGdWkKqKe73xdCApvlFml6UIn0sblYgse75LXVxG5WivhEfWmNtKyKqrETSH Kq72DZi9l1hZy7o6ZMCSn/6MpXsL8PbGn0wziTcEDcJZs5YcPdRTP0TEgd9O/H8c 3hbUbS2wSTISmXlfyKuu+UwqdP/MAnM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:00:57 2025 by rpki-client