$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa File: 40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa (raw, json) Hash identifier: g55y7pNhIR5hmITmdXz37cicpNGWrjYcsb85+tnCoNI= Subject key identifier: 5B:3F:FB:F3:BF:99:28:0A:B4:75:A3:B6:C2:AF:E7:3A:29:90:82:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B8EAAE8DAC55C4537600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b8:ea:ae:8d:ac:55:c4:53:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e897409b-22e9-4cad-a800-7a4c09785658 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ce:c7:4b:0d:01:03:af:4e:77:c5:cf:e5:55: 12:59:90:6b:41:70:6b:6e:b5:7a:09:01:83:5b:31: fb:2e:b3:a0:c8:33:65:ed:6e:4e:fc:05:7e:7a:4d: 9f:ba:23:56:e0:6a:6e:e9:fd:76:8c:81:58:bd:8b: 8d:d2:2d:f4:bd:07:b3:cb:6c:e7:65:54:26:4f:e0: 2e:1d:52:1f:32:73:4e:0e:ab:b6:fe:5c:75:e9:38: 9d:32:7e:58:47:c4:74:72:f3:cc:d7:05:21:c6:f5: 49:2c:55:95:f9:49:ac:93:f3:b5:70:a0:d2:a6:f4: f4:da:be:1a:ec:6f:1f:38:86:6a:72:fc:60:94:a6: bd:d6:e7:d7:01:07:39:9a:3b:c7:32:16:13:b4:dd: 58:2f:cf:bc:ce:75:22:52:63:a5:49:d7:a3:74:52: 45:30:f1:60:fc:1d:c5:29:d0:e6:70:e8:9d:56:e4: be:45:07:e2:31:62:6c:32:72:c8:b4:f9:ec:42:0c: 89:36:84:34:af:4c:96:dd:96:44:33:a6:f2:93:0c: a4:cc:d0:35:d3:aa:11:39:6e:7f:6a:84:22:49:42: 32:90:81:35:18:a3:ce:8e:51:2c:de:17:60:27:b8: 56:7d:4b:ab:74:7b:3e:b6:da:2d:5a:9a:c9:da:1d: b8:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:3F:FB:F3:BF:99:28:0A:B4:75:A3:B6:C2:AF:E7:3A:29:90:82:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/40b3bd1c-a755-33b8-8e12-20c6d6e1f9e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:a4:95:f0:1b:ce:3e:b1:86:c3:77:c1:6a:7c:5d:de:4e:af: e7:c0:22:b1:a6:2a:17:77:cf:e0:02:3c:02:51:fe:dd:e6:2d: 8f:66:0a:95:f7:06:5b:01:e5:70:a2:84:b8:99:e6:97:02:cd: 5f:8a:ce:74:af:91:0d:1f:4e:d7:f6:c8:3a:42:0b:c8:ea:71: 52:db:5c:3e:c7:78:45:ad:f4:37:f2:e9:02:85:fc:af:34:70: 61:e2:e0:0c:28:26:58:b1:ac:8d:0d:3c:4f:8f:ff:c8:a5:55: c9:23:8a:95:2c:53:1a:50:95:d6:72:fa:e7:97:eb:94:4d:0e: 6c:c5:ad:f1:70:07:cb:35:3d:fd:26:75:5f:b4:2d:e0:34:b5: 84:17:2e:3e:e4:e7:b8:e4:17:bc:26:ec:18:45:a3:e4:dc:83: 89:03:ff:bf:59:18:2c:83:1a:2d:e4:1b:f0:13:a3:a9:dd:2a: 23:c2:7f:64:5d:e9:98:da:42:79:0c:aa:dd:5c:1f:93:54:b5: bb:14:e7:bb:5c:5d:d1:a0:da:1f:a1:43:dd:d6:4c:8b:ad:09: b0:44:6a:d7:b2:c3:88:1e:62:31:81:8a:a9:16:6d:27:2a:08: eb:00:bc:f1:7f:e0:04:dc:18:d8:f3:04:a5:28:00:f5:65:2f: 10:82:dc:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbjqro2sVcRTdgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTg5NzQwOWItMjJlOS00Y2FkLWE4MDAtN2E0YzA5Nzg1NjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzc7HSw0BA69Od8XP5VUSWZBrQXBrbrV6CQGD WzH7LrOgyDNl7W5O/AV+ek2fuiNW4Gpu6f12jIFYvYuN0i30vQezy2znZVQmT+Au HVIfMnNODqu2/lx16TidMn5YR8R0cvPM1wUhxvVJLFWV+Umsk/O1cKDSpvT02r4a 7G8fOIZqcvxglKa91ufXAQc5mjvHMhYTtN1YL8+8znUiUmOlSdejdFJFMPFg/B3F KdDmcOidVuS+RQfiMWJsMnLItPnsQgyJNoQ0r0yW3ZZEM6bykwykzNA106oROW5/ aoQiSUIykIE1GKPOjlEs3hdgJ7hWfUurdHs+ttotWprJ2h24oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFs/+/O/mSgKtHWjtsKv5zopkII0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDBiM2JkMWMtYTc1NS0z M2I4LThlMTItMjBjNmQ2ZTFmOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK34MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAOklfAbzj6xhsN3wWp8Xd5Or+fAIrGmKhd3z+ACPAJR/t3mLY9mCpX3 BlsB5XCihLiZ5pcCzV+KznSvkQ0fTtf2yDpCC8jqcVLbXD7HeEWt9Dfy6QKF/K80 cGHi4AwoJlixrI0NPE+P/8ilVckjipUsUxpQldZy+ueX65RNDmzFrfFwB8s1Pf0m dV+0LeA0tYQXLj7k57jkF7wm7BhFo+Tcg4kD/79ZGCyDGi3kG/ATo6ndKiPCf2Rd 6ZjaQnkMqt1cH5NUtbsU57tcXdGg2h+hQ93WTIutCbBEateyw4geYjGBiqkWbScq COsAvPF/4ATcGNjzBKUoAPVlLxCC3Hw= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:19 2025 by rpki-client