$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa File: 6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa (raw, json) Hash identifier: XFKcnCw5cuFx1n6+lWNGW7F8NLqKUHn0RfeLnItuxsY= Subject key identifier: 2A:55:C9:F0:5B:61:D7:75:6E:6A:DE:E7:0D:72:A4:E3:E0:51:E2:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B588EA6CDEFD48D366E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b5:88:ea:6c:de:fd:48:d3:66:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=30941f76-955a-464b-8a64-efb26e499b16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:57:01:ea:f8:a6:b8:f9:63:73:46:e7:08:41: d6:a4:2f:f6:f2:82:48:57:dd:f1:12:3b:cd:8a:d0: 2f:88:6b:aa:bd:ae:e8:25:f2:1f:0a:3d:77:3f:9d: 7e:ca:e6:b8:45:09:4c:48:b5:c5:84:73:ba:ec:f3: c8:68:25:fc:9c:7c:de:2f:65:fd:00:e1:86:68:10: e9:69:01:3a:ae:66:11:72:63:99:76:73:56:1c:52: 87:e8:58:35:c0:66:63:c8:0a:ac:99:b6:0d:36:07: cc:c1:08:41:88:50:b1:4c:56:be:a0:4c:d1:45:12: 23:32:30:5e:56:df:28:77:24:9f:d7:da:1f:57:4a: 24:6b:b8:29:fc:c1:78:93:dd:95:4d:e9:98:4e:45: 67:f9:6e:07:ae:b5:ad:61:5e:e9:07:5e:e1:0f:4a: f4:19:a9:54:ff:cc:f9:82:fb:b0:4d:90:9f:af:34: a5:6a:99:a3:f6:1a:74:a2:8f:bb:95:29:e2:c4:f6: 87:2c:33:8e:9c:e9:ab:aa:d4:92:75:31:7d:2e:c4: 4f:be:39:d2:7a:7f:54:b5:62:ad:0b:68:72:c8:eb: b7:1e:f8:ce:cf:68:ec:7f:2d:eb:71:59:e9:0a:13: 03:c3:3d:16:ef:55:d5:c1:95:24:05:97:ec:39:d5: b5:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:55:C9:F0:5B:61:D7:75:6E:6A:DE:E7:0D:72:A4:E3:E0:51:E2:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6ff0a3db-e0f2-39a6-9465-bd9bd594b4dd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:2a:ef:bf:4e:eb:2a:2b:20:c1:d4:b0:01:cc:4f:5a:20:36: 45:97:b6:e7:33:86:6b:b0:5c:ed:95:5b:7d:7d:ce:19:da:bc: 7c:4b:b5:20:0e:2b:e6:09:07:d0:d2:af:4f:78:81:f1:8e:9a: 8f:d9:19:f0:66:26:f0:0a:f3:30:43:10:d6:b2:7d:d5:9e:c2: 14:12:c4:0b:e3:24:03:63:ed:fa:18:16:80:84:ea:db:12:86: ae:e0:41:95:ba:b2:fc:4b:c4:7d:e2:17:22:8f:5c:d5:be:c5: 13:a8:05:0d:25:91:75:84:c2:5f:6d:65:02:76:45:57:f3:5e: b2:24:9d:c9:be:69:b6:7c:17:e4:35:3a:3d:dc:6b:fd:b2:e1: 97:13:6f:27:05:0f:9c:42:6d:3c:8c:b7:fe:7c:db:47:ea:51: 16:22:c2:73:e9:df:10:bd:27:a3:24:76:0c:f2:f7:d0:a5:2d: 57:dc:1f:27:44:7d:c8:83:a2:36:a4:8a:51:b5:6d:9a:71:60: 8c:9c:b9:ce:12:0a:cf:4f:54:d3:cf:f5:ad:4c:c8:26:b1:3d: bc:70:f6:74:9d:a4:83:2a:f3:04:85:30:1b:ed:a4:de:f0:3b: 8b:94:65:a6:4b:81:12:e5:0f:49:90:72:65:50:65:6f:35:88: 5a:e0:95:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbWI6mze/UjTZuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzA5NDFmNzYtOTU1YS00NjRiLThhNjQtZWZiMjZlNDk5YjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFcB6vimuPljc0bnCEHWpC/28oJIV93xEjvN itAviGuqva7oJfIfCj13P51+yua4RQlMSLXFhHO67PPIaCX8nHzeL2X9AOGGaBDp aQE6rmYRcmOZdnNWHFKH6Fg1wGZjyAqsmbYNNgfMwQhBiFCxTFa+oEzRRRIjMjBe Vt8odySf19ofV0oka7gp/MF4k92VTemYTkVn+W4HrrWtYV7pB17hD0r0GalU/8z5 gvuwTZCfrzSlapmj9hp0oo+7lSnixPaHLDOOnOmrqtSSdTF9LsRPvjnSen9UtWKt C2hyyOu3HvjOz2jsfy3rcVnpChMDwz0W71XVwZUkBZfsOdW1lwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCpVyfBbYdd1bmre5w1ypOPgUeINMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmZmMGEzZGItZTBmMi0z OWE2LTk0NjUtYmQ5YmQ1OTRiNGRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAgq779O6yorIMHUsAHMT1ogNkWXtuczhmuwXO2VW319zhnavHxLtSAO K+YJB9DSr094gfGOmo/ZGfBmJvAK8zBDENayfdWewhQSxAvjJANj7foYFoCE6tsS hq7gQZW6svxLxH3iFyKPXNW+xROoBQ0lkXWEwl9tZQJ2RVfzXrIkncm+abZ8F+Q1 Oj3ca/2y4ZcTbycFD5xCbTyMt/5820fqURYiwnPp3xC9J6Mkdgzy99ClLVfcHydE fciDojakilG1bZpxYIycuc4SCs9PVNPP9a1MyCaxPbxw9nSdpIMq8wSFMBvtpN7w O4uUZaZLgRLlD0mQcmVQZW81iFrglWA= -----END CERTIFICATE-----Generated at Sat Jul 26 11:32:18 2025 by rpki-client