$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa File: 4ff9a155-2a75-33cb-a2a0-853e282a294b.roa (raw, json) Hash identifier: YG6/667+yYD/B1yRBwKPASl7liVvLPptmBO99f7Toqs= Subject key identifier: 0C:EC:48:0F:40:52:73:16:41:9D:4A:31:22:35:54:43:43:92:0A:8B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110E9F74F97D252FE25400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0e:9f:74:f9:7d:25:2f:e2:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4f246a81-d871-4755-8c08-bc5248c96e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:4c:34:67:76:0a:ee:fe:97:e5:7e:cc:f2:aa: 84:ca:f2:fd:7b:9f:e6:c8:4b:9a:99:96:f2:59:f7: c1:49:b3:ca:c0:19:98:0d:22:5f:b2:e3:d9:c7:9c: e2:5e:75:3b:49:b2:56:c1:e0:73:a6:b6:1d:e7:db: c8:ec:54:a6:96:78:c1:c8:0b:33:aa:10:c1:f7:a0: c4:a3:40:12:fc:27:5c:ae:f3:fc:16:d4:19:e5:4d: 66:cd:44:4e:d0:91:d9:af:ee:0e:44:dc:d1:27:47: c9:11:4a:d8:0f:b6:94:8c:4f:ed:38:80:8a:30:9c: 54:be:46:10:f8:b4:18:ad:9a:bf:b7:c4:17:4a:d3: bf:48:27:6c:88:a2:1a:c7:15:f3:75:fa:2f:1e:7a: 79:22:67:17:d7:86:62:00:bd:45:ae:8b:41:52:9f: b4:da:36:c8:d9:54:81:7c:36:ac:7b:df:cd:23:fb: b7:fc:b9:db:44:63:0e:85:05:15:4b:c9:5f:62:58: a3:64:f5:0a:ab:27:3f:6d:14:82:8b:58:4b:11:75: 6a:95:49:43:75:ad:97:4a:8d:e3:b0:41:80:d2:8c: be:d3:4c:71:9b:64:82:f6:1f:1f:a9:20:f1:40:a9: 84:a0:0a:ed:4e:31:61:b3:2d:ca:d9:73:32:21:9d: 49:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:EC:48:0F:40:52:73:16:41:9D:4A:31:22:35:54:43:43:92:0A:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:fa:8b:a0:9c:8b:23:6d:a8:46:30:71:f5:75:41:3a:10:e3: ac:2d:72:04:66:18:e4:fe:00:56:f8:93:9c:a7:ca:da:61:27: 4f:81:6e:61:c9:46:fd:ff:90:af:89:a8:ca:55:41:c5:b2:3b: 6f:c5:d8:7f:c0:b3:1e:42:aa:f3:36:9a:fd:d6:6b:30:e7:e4: ef:ed:10:e0:89:09:0c:c0:95:58:27:ba:2b:70:e4:63:3b:22: d8:fe:eb:43:c4:36:ec:24:1d:5c:cd:f3:64:a5:18:4f:a9:2a: 7d:4c:bc:3a:0c:ae:74:46:c1:c6:80:31:d1:49:c1:e1:cc:58: 55:0f:af:f4:b1:9d:d0:23:15:ae:e0:d0:cc:97:18:6d:09:c2: ce:0e:4f:3a:c7:3d:bd:a0:70:d0:c2:15:41:42:e2:13:72:1d: 06:b4:9f:28:39:64:45:3e:9b:c6:66:88:94:a2:76:36:0f:fe: b5:55:53:aa:47:09:7b:c6:75:66:fc:0a:7c:17:8f:8f:50:70: 6c:ef:28:f9:7f:18:a0:dc:49:f0:22:e1:3a:65:e2:2c:de:a9: 81:3c:56:4f:8c:98:ba:76:aa:46:08:cb:83:9e:5d:9d:89:66: 2b:81:bc:35:c5:44:92:7a:7f:4d:fa:cb:85:4c:1d:76:8e:10: 93:28:d4:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQ6fdPl9JS/iVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGYyNDZhODEtZDg3MS00NzU1LThjMDgtYmM1MjQ4Yzk2ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgEw0Z3YK7v6X5X7M8qqEyvL9e5/myEuamZby WffBSbPKwBmYDSJfsuPZx5ziXnU7SbJWweBzprYd59vI7FSmlnjByAszqhDB96DE o0AS/CdcrvP8FtQZ5U1mzURO0JHZr+4ORNzRJ0fJEUrYD7aUjE/tOICKMJxUvkYQ +LQYrZq/t8QXStO/SCdsiKIaxxXzdfovHnp5ImcX14ZiAL1FrotBUp+02jbI2VSB fDase9/NI/u3/LnbRGMOhQUVS8lfYlijZPUKqyc/bRSCi1hLEXVqlUlDda2XSo3j sEGA0oy+00xxm2SC9h8fqSDxQKmEoArtTjFhsy3K2XMyIZ1JNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzsSA9AUnMWQZ1KMSI1VENDkgqLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGZmOWExNTUtMmE3NS0z M2NiLWEyYTAtODUzZTI4MmEyOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEb6i6CciyNtqEYwcfV1QToQ46wtcgRmGOT+AFb4k5ynytphJ0+BbmHJ Rv3/kK+JqMpVQcWyO2/F2H/Asx5CqvM2mv3WazDn5O/tEOCJCQzAlVgnuitw5GM7 Itj+60PENuwkHVzN82SlGE+pKn1MvDoMrnRGwcaAMdFJweHMWFUPr/SxndAjFa7g 0MyXGG0Jws4OTzrHPb2gcNDCFUFC4hNyHQa0nyg5ZEU+m8ZmiJSidjYP/rVVU6pH CXvGdWb8CnwXj49QcGzvKPl/GKDcSfAi4Tpl4izeqYE8Vk+MmLp2qkYIy4OeXZ2J ZiuBvDXFRJJ6f036y4VMHXaOEJMo1NY= -----END CERTIFICATE-----Generated at Sat Jul 26 00:08:58 2025 by rpki-client