$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa File: 2f3ad59c-eada-3be0-952f-428ebee1b82d.roa (raw, json) Hash identifier: buvnwg1m3VEbicXuNwRXr1zNopuu31kQ9C32SsiBovg= Subject key identifier: 0A:71:02:1B:3D:CB:85:60:22:E4:3E:F0:62:BB:47:35:54:4C:27:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110866333C734B5521C140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:08:66:33:3c:73:4b:55:21:c1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cbd7161e-7072-47d5-a30b-20e4c1ecdb8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:02:2e:c1:51:b3:56:f1:13:54:c1:0f:83:5f: 57:e8:e9:a2:29:a4:90:f5:7e:7b:84:42:d4:c0:17: 6c:3d:79:9a:71:4f:d4:02:8b:74:c1:b5:d4:1a:22: b9:5b:07:6f:75:e2:26:57:61:17:c7:31:54:79:8f: 0b:bd:4c:43:14:3f:b3:2e:92:de:77:1b:42:8b:f2: b4:33:73:8c:93:63:6a:23:73:f0:d6:2a:71:ed:e7: 1f:0d:08:d6:a8:31:e5:65:3d:e8:79:4a:de:12:c3: 5b:dd:a3:09:6d:ab:cf:16:d9:7f:35:fa:ea:bc:9c: 5c:d2:0c:96:17:46:f0:0f:dc:e8:21:57:5a:d4:37: c3:cc:2f:8e:46:12:a1:a0:d7:6f:e2:60:ed:ae:94: 59:58:4b:6c:c9:e2:1b:d1:5e:ae:c9:48:04:4f:db: 05:41:50:57:22:06:d8:87:18:bd:12:43:78:31:ee: 72:8e:9b:69:a5:a5:51:f1:af:10:c5:c6:28:90:3b: 71:b7:57:15:e6:23:12:f2:b1:04:be:7a:ea:d0:1e: 8f:96:7e:67:5c:3c:44:ac:c9:10:4f:2e:5f:ff:f3: dc:ba:ea:b7:13:4c:75:16:75:51:44:c5:80:db:c8: 76:17:28:a4:25:a9:6d:12:9c:e2:bb:af:79:7f:92: 0e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:71:02:1B:3D:CB:85:60:22:E4:3E:F0:62:BB:47:35:54:4C:27:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2f3ad59c-eada-3be0-952f-428ebee1b82d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:6b:73:5f:56:b7:22:9e:e7:1e:4a:07:52:b1:5e:7f:6e:e6: f6:6b:14:a6:3e:87:21:19:0a:5f:57:71:0c:7a:e1:03:fc:36: 5c:ba:72:d5:c3:be:21:5a:f3:eb:da:51:75:af:15:f7:a1:28: e2:f5:8c:82:a7:d8:48:66:81:fd:05:43:7c:47:29:db:64:c7: db:df:ae:da:27:3c:cc:76:94:ac:ce:e4:42:f5:9a:4f:31:95: 6b:3c:c9:65:bb:0d:b9:d2:33:87:20:ff:a0:ef:19:f4:cc:e5: ed:53:fd:4e:c7:a6:55:ea:61:aa:de:10:5b:02:20:fe:cc:c2: a3:9d:2e:1a:73:ad:7b:c7:5e:df:d3:bd:76:6e:a8:fa:77:b7: fb:90:3e:6e:60:af:e7:4e:63:7b:43:44:85:44:10:99:62:bb: 75:70:09:78:49:b6:d2:3f:d0:b1:fd:60:38:90:47:aa:32:3b: 1e:56:fb:1e:33:c0:9e:fb:13:70:c9:93:10:f4:b5:51:d5:10: a8:d0:c3:65:18:c0:41:5a:3e:1a:66:ed:ba:15:23:28:dd:b6: b9:f5:3a:9e:17:fa:e4:0c:ad:60:68:e0:4f:38:49:33:cd:09: 54:84:7d:3b:de:0b:84:02:b3:ff:58:11:71:58:8c:38:ae:20: 11:21:66:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQhmMzxzS1UhwUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2JkNzE2MWUtNzA3Mi00N2Q1LWEzMGItMjBlNGMxZWNkYjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwIuwVGzVvETVMEPg19X6OmiKaSQ9X57hELU wBdsPXmacU/UAot0wbXUGiK5WwdvdeImV2EXxzFUeY8LvUxDFD+zLpLedxtCi/K0 M3OMk2NqI3Pw1ipx7ecfDQjWqDHlZT3oeUreEsNb3aMJbavPFtl/NfrqvJxc0gyW F0bwD9zoIVda1DfDzC+ORhKhoNdv4mDtrpRZWEtsyeIb0V6uyUgET9sFQVBXIgbY hxi9EkN4Me5yjptppaVR8a8QxcYokDtxt1cV5iMS8rEEvnrq0B6Pln5nXDxErMkQ Ty5f//Pcuuq3E0x1FnVRRMWA28h2FyikJaltEpziu695f5IOpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFApxAhs9y4VgIuQ+8GK7RzVUTCf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmYzYWQ1OWMtZWFkYS0z YmUwLTk1MmYtNDI4ZWJlZTFiODJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0lMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGtrc19WtyKe5x5KB1KxXn9u5vZrFKY+hyEZCl9XcQx64QP8Nly6ctXD viFa8+vaUXWvFfehKOL1jIKn2Ehmgf0FQ3xHKdtkx9vfrtonPMx2lKzO5EL1mk8x lWs8yWW7DbnSM4cg/6DvGfTM5e1T/U7HplXqYareEFsCIP7MwqOdLhpzrXvHXt/T vXZuqPp3t/uQPm5gr+dOY3tDRIVEEJliu3VwCXhJttI/0LH9YDiQR6oyOx5W+x4z wJ77E3DJkxD0tVHVEKjQw2UYwEFaPhpm7boVIyjdtrn1Op4X+uQMrWBo4E84STPN CVSEfTveC4QCs/9YEXFYjDiuIBEhZvk= -----END CERTIFICATE-----Generated at Sat Jul 26 00:01:00 2025 by rpki-client