$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c8768c-1ea0-31c9-b062-fb284c3cf829.roa File: 50c8768c-1ea0-31c9-b062-fb284c3cf829.roa (raw, json) Hash identifier: 66Aw/t8KTVLFZPtOjXs39+3z9B3wrF9C0uHVfoP7Vt4= Subject key identifier: D2:3A:C7:7D:5B:21:5F:B3:E3:06:EC:1D:42:74:B1:E3:08:9C:58:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B6A95A1D9874DA030000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c8768c-1ea0-31c9-b062-fb284c3cf829.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b6:a9:5a:1d:98:74:da:03:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=be471867-adbc-477e-b1d9-c9e121898732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:84:90:ae:6f:0e:42:6a:a3:2a:bd:74:24:5f: 8d:d0:bf:38:24:98:51:f5:f8:6d:2c:1b:ac:87:f2: a5:a7:e4:68:48:28:87:6d:0a:d3:c9:4d:2e:65:84: 42:7c:0e:f7:f3:4d:e2:a2:1e:06:d8:23:70:ea:1f: 97:98:d3:38:88:7c:7c:8c:1f:0f:a4:0b:be:76:0c: 1c:e9:1a:08:7a:f8:88:36:39:4b:89:87:41:35:fe: ac:41:90:66:a8:7d:91:23:be:dd:60:bd:6d:e1:c2: eb:62:14:78:90:1c:7b:83:64:6f:7a:a7:28:68:66: 92:d5:02:2f:92:dd:55:58:c2:e8:40:ef:0c:70:bc: ba:6c:48:69:0d:54:84:4d:fa:c6:3c:58:19:a9:51: ac:e1:45:0e:00:ac:ea:2a:00:4d:9c:01:51:1d:1d: 6a:21:5a:fe:14:27:cc:f3:40:bd:80:7a:80:e5:a9: 35:39:48:db:0a:13:cd:73:78:3c:9c:45:88:61:21: 74:62:78:11:30:16:ec:f0:79:5b:58:74:d6:40:ad: d6:36:f2:32:7f:69:76:90:f5:0f:bb:13:a2:c7:4a: 56:24:11:95:fb:30:aa:ac:a0:3e:d2:1a:85:99:32: 56:94:e7:7d:2c:7a:9e:38:02:04:02:d3:8c:79:a1: 8d:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:3A:C7:7D:5B:21:5F:B3:E3:06:EC:1D:42:74:B1:E3:08:9C:58:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50c8768c-1ea0-31c9-b062-fb284c3cf829.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:f7:a5:46:39:21:df:5a:3f:82:ce:ee:d5:eb:b3:a0:10:a2: 14:e4:4f:d6:05:55:7d:c1:f9:b4:b5:87:ca:3b:c2:e0:64:70: 43:8c:22:90:29:af:f7:52:7d:72:83:28:8b:f9:1a:e0:41:09: a5:48:e0:88:b2:a1:3b:e7:5b:2a:bf:15:5c:39:2f:88:b1:93: c2:88:ab:5e:0e:d3:5d:88:26:e1:ce:41:7a:28:fc:a1:36:57: 7a:aa:ce:0f:32:b8:e7:4e:68:cb:32:05:6b:2e:0a:24:20:2b: 0c:52:4d:f0:78:70:97:a3:d6:53:76:7d:1d:24:54:af:4a:ca: aa:f9:c2:b4:e6:f3:92:f7:1d:df:8c:68:4c:38:eb:da:f5:9e: a8:a1:85:c4:4f:27:5d:87:5e:bf:24:30:79:b0:78:b6:f3:46: 99:7f:8f:f3:28:64:10:6f:82:2a:e0:f6:38:3f:52:46:0f:69: 85:9a:f9:da:6e:2b:55:ae:a7:77:99:22:f8:84:25:f1:b0:f8: 12:43:38:5f:27:9a:b1:3b:3f:30:2a:f7:69:dd:e1:27:64:75: 7f:a0:7c:1b:f0:23:3b:01:c3:ab:4f:11:5f:cc:79:64:12:c1: 57:46:87:cf:06:d3:b8:dc:7a:f0:bc:a0:8b:ec:b5:0b:5b:b2: 36:57:11:95 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbapWh2YdNoDAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmU0NzE4NjctYWRiYy00NzdlLWIxZDktYzllMTIxODk4NzMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsISQrm8OQmqjKr10JF+N0L84JJhR9fhtLBus h/Klp+RoSCiHbQrTyU0uZYRCfA73803ioh4G2CNw6h+XmNM4iHx8jB8PpAu+dgwc 6RoIeviINjlLiYdBNf6sQZBmqH2RI77dYL1t4cLrYhR4kBx7g2RveqcoaGaS1QIv kt1VWMLoQO8McLy6bEhpDVSETfrGPFgZqVGs4UUOAKzqKgBNnAFRHR1qIVr+FCfM 80C9gHqA5ak1OUjbChPNc3g8nEWIYSF0YngRMBbs8HlbWHTWQK3WNvIyf2l2kPUP uxOix0pWJBGV+zCqrKA+0hqFmTJWlOd9LHqeOAIEAtOMeaGNswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNI6x31bIV+z4wbsHUJ0seMInFi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBjODc2OGMtMWVhMC0z MWM5LWIwNjItZmIyODRjM2NmODI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK25MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABf3pUY5Id9aP4LO7tXrs6AQohTkT9YFVX3B+bS1h8o7wuBkcEOMIpAp r/dSfXKDKIv5GuBBCaVI4IiyoTvnWyq/FVw5L4ixk8KIq14O012IJuHOQXoo/KE2 V3qqzg8yuOdOaMsyBWsuCiQgKwxSTfB4cJej1lN2fR0kVK9Kyqr5wrTm85L3Hd+M aEw469r1nqihhcRPJ12HXr8kMHmweLbzRpl/j/MoZBBvgirg9jg/UkYPaYWa+dpu K1Wup3eZIviEJfGw+BJDOF8nmrE7PzAq92nd4SdkdX+gfBvwIzsBw6tPEV/MeWQS wVdGh88G07jcevC8oIvstQtbsjZXEZU= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:53 2025 by rpki-client