$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa File: 4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa (raw, json) Hash identifier: l2Vv7JTKc473o4Db2YqEfgwm+CsDR1uN+2mowaRz8YU= Subject key identifier: C7:13:5D:0E:00:79:07:F4:1E:81:75:CE:35:1F:C3:FE:42:0B:E1:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110A633A39CFEF06CABE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.89.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0a:63:3a:39:cf:ef:06:ca:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4d9cf312-a6cf-485b-8b4e-a7438a67df4b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:d7:f4:5a:88:52:21:53:40:8c:d4:d7:62:92: 61:72:47:f6:09:ce:cc:7d:e7:0f:94:25:03:87:0f: f6:1a:9b:28:76:8e:72:c0:82:06:6c:1b:41:6b:10: 48:dd:93:df:86:9d:68:ba:b9:d6:ef:ad:fd:38:86: b3:5c:f9:d8:cc:8f:9a:47:79:8d:03:3d:04:50:6c: 24:36:ca:f8:a5:8b:b5:68:45:fd:cc:54:28:1a:b4: a0:8e:0c:81:59:c1:c6:18:37:c4:f6:1b:ec:c3:8c: c2:a2:d5:ce:c7:70:eb:20:b2:55:f8:c2:b0:23:a8: e9:f0:35:de:0e:6d:8a:79:1f:fa:20:37:a4:c7:16: b5:23:5d:67:be:72:9b:a0:bb:e3:36:63:9b:dd:8e: d0:6c:da:9a:b1:e8:2f:ad:91:ac:07:02:5f:06:c6: 71:2e:db:9d:95:d0:c7:29:13:86:12:37:0f:55:e8: 7d:bb:fd:0f:7b:6e:0f:8e:b9:2f:36:8c:5c:c4:71: fb:c7:da:ba:9c:2d:85:b7:5d:8a:fb:6e:13:c3:84: ef:ac:52:70:0a:56:87:be:94:16:02:91:7a:77:48: dc:9f:cc:7b:c0:64:a7:3f:52:ad:11:c0:0c:9b:d4: e0:bb:17:15:89:e8:2d:e0:65:66:f3:aa:fd:a4:82: a3:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:13:5D:0E:00:79:07:F4:1E:81:75:CE:35:1F:C3:FE:42:0B:E1:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c0c6878-fc61-3292-9950-ea5a62cc6a32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.89.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:a7:e9:a1:6e:43:92:a9:de:e5:2f:c6:b0:6b:d6:cc:73:ac: ea:f1:c6:82:3d:4f:7a:eb:04:a7:1b:2a:48:a0:cc:ca:cd:b6: ab:8a:2b:30:68:bb:88:45:75:49:8d:04:8e:73:2b:15:ae:2f: 47:4b:ba:d0:70:57:1c:de:2c:6c:b5:88:97:f2:d0:c3:b2:eb: e8:51:fe:ba:81:fd:21:a9:ae:01:cf:95:9e:dc:91:53:88:d6: b9:20:d3:cf:f7:e5:40:cd:07:ae:8f:7c:bc:66:23:4d:6c:a9: af:33:52:22:6b:e0:2e:e5:7b:c1:26:a9:11:dd:a9:79:ba:1b: 37:47:1e:a9:b1:ee:51:68:73:9f:15:bc:03:62:d8:b5:99:bc: d8:49:32:f3:af:5e:8e:20:3a:13:11:81:9f:8d:70:35:f1:a0: 9a:96:7a:e4:02:84:de:10:3f:7c:1b:ba:0f:ce:35:88:bf:c3: 1e:70:67:dd:16:5b:a6:f1:1c:41:f9:45:ca:21:bd:d0:8b:22: bb:1b:77:80:03:11:da:69:d0:39:04:bc:b8:be:c8:45:32:4b: 58:84:cc:f3:3d:11:f9:80:a3:19:de:15:50:67:e4:06:90:68: 5f:67:b2:70:18:d5:42:fb:e0:62:7b:98:cf:e3:38:cd:e6:78: 70:c9:98:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQpjOjnP7wbKvkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGQ5Y2YzMTItYTZjZi00ODViLThiNGUtYTc0MzhhNjdkZjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldf0WohSIVNAjNTXYpJhckf2Cc7MfecPlCUD hw/2Gpsodo5ywIIGbBtBaxBI3ZPfhp1ournW7639OIazXPnYzI+aR3mNAz0EUGwk Nsr4pYu1aEX9zFQoGrSgjgyBWcHGGDfE9hvsw4zCotXOx3DrILJV+MKwI6jp8DXe Dm2KeR/6IDekxxa1I11nvnKboLvjNmOb3Y7QbNqasegvrZGsBwJfBsZxLtudldDH KROGEjcPVeh9u/0Pe24PjrkvNoxcxHH7x9q6nC2Ft12K+24Tw4TvrFJwClaHvpQW ApF6d0jcn8x7wGSnP1KtEcAMm9TguxcViegt4GVm86r9pIKj+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcTXQ4AeQf0HoF1zjUfw/5CC+E+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGMwYzY4NzgtZmM2MS0z MjkyLTk5NTAtZWE1YTYyY2M2YTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMqn6aFuQ5Kp3uUvxrBr1sxzrOrxxoI9T3rrBKcbKkigzMrNtquKKzBo u4hFdUmNBI5zKxWuL0dLutBwVxzeLGy1iJfy0MOy6+hR/rqB/SGprgHPlZ7ckVOI 1rkg08/35UDNB66PfLxmI01sqa8zUiJr4C7le8EmqRHdqXm6GzdHHqmx7lFoc58V vANi2LWZvNhJMvOvXo4gOhMRgZ+NcDXxoJqWeuQChN4QP3wbug/ONYi/wx5wZ90W W6bxHEH5RcohvdCLIrsbd4ADEdpp0DkEvLi+yEUyS1iEzPM9EfmAoxneFVBn5AaQ aF9nsnAY1UL74GJ7mM/jOM3meHDJmGE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:08 2025 by rpki-client