$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74e2f3b1-2bdc-3ccc-9cc9-4ac769c67dc1.roa File: 74e2f3b1-2bdc-3ccc-9cc9-4ac769c67dc1.roa (raw, json) Hash identifier: 3nBrOAa6O5Bi4xk9yG56aS8JKIipVi6zLul0hxYzM0w= Subject key identifier: 32:A0:56:A9:7E:BC:D5:E6:39:D1:AE:58:EA:79:02:2A:13:94:F5:81 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110BA201193DF477B35C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74e2f3b1-2bdc-3ccc-9cc9-4ac769c67dc1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.123.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0b:a2:01:19:3d:f4:77:b3:5c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c9532401-96c1-4617-b11d-d33756e25dc2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:53:a0:db:22:8e:0a:c6:30:59:02:81:95:a9: 04:2d:8d:e2:03:d4:7f:13:82:c5:30:b3:2a:be:9b: 22:e5:d3:a5:ee:bb:66:d8:cb:1c:25:99:62:2c:6a: f0:1f:49:91:39:49:2f:7a:d5:5f:5e:40:dc:2b:0a: 6c:70:1d:82:82:48:51:4f:4d:bf:c3:0e:a3:08:eb: ec:18:45:56:e6:22:65:ff:65:00:86:48:1a:f8:26: 01:df:f4:ce:31:3a:e4:f3:fa:9d:71:e1:1d:f9:83: be:cd:76:3d:45:65:36:25:ba:1c:b9:2d:ad:b2:e8: 5d:14:5f:e0:90:b0:88:61:18:03:ca:e5:06:11:79: ec:ec:61:43:61:1b:26:92:0a:a7:cf:ee:fd:46:d8: 4a:a8:fe:02:62:c7:8b:d2:3a:0d:a7:4d:0c:04:82: ba:ba:9b:96:d2:32:23:a6:de:16:2e:8a:96:46:3c: 9e:5b:c5:2e:3b:c9:8b:30:8e:d7:b1:06:4c:33:4d: 1e:30:39:16:aa:89:ec:3a:9d:a7:0d:b2:ad:aa:bb: 8e:93:e2:76:c9:79:d3:1e:13:ca:63:66:47:41:e7: 5c:a4:8c:a9:1c:d2:7c:cf:82:40:5e:52:20:62:81: 95:4c:03:79:b2:b6:ec:d8:89:dc:5e:d9:27:e6:ae: a8:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:A0:56:A9:7E:BC:D5:E6:39:D1:AE:58:EA:79:02:2A:13:94:F5:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/74e2f3b1-2bdc-3ccc-9cc9-4ac769c67dc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.123.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:e7:35:cb:4f:33:7a:47:9f:95:c1:83:87:bf:3a:70:a6:21: 49:68:31:2f:fb:73:14:e0:aa:2e:0f:4a:08:18:c5:4e:1a:32: ce:00:09:66:4f:6f:d2:84:4c:e9:98:a5:ce:cf:15:3a:4f:67: 7b:ad:b3:06:c2:21:3b:c8:c4:5a:85:ae:3b:0d:1e:15:ce:a7: 94:e7:48:db:36:54:0f:f5:d4:aa:d6:16:7e:63:dc:75:d9:88: 06:55:b5:47:83:28:bc:c7:64:2c:90:97:69:f7:41:3d:8f:44: 38:6a:31:7d:8f:46:24:5c:72:3d:e6:dc:f0:ee:b8:33:77:ea: b5:0c:cd:f8:06:19:b1:67:c7:d5:fc:4f:68:37:c5:02:f3:d7: 72:46:0a:b5:17:4c:cf:06:34:68:8e:82:33:c9:d2:e2:18:5c: 6a:cd:92:ac:8d:85:7c:32:74:0d:68:5c:87:4c:3c:0d:8b:b1: aa:b5:e8:ab:8d:d4:87:7f:f1:ab:dc:f6:50:25:bb:e5:77:69: 47:24:f3:d9:1c:cc:a2:3d:94:8e:90:33:91:1d:b5:99:0c:cf: e3:a4:64:b0:f6:b8:ed:96:9a:e9:d0:72:d5:fa:94:fe:e0:7a: d5:94:aa:85:f7:3b:c4:e7:a0:3b:76:5d:d9:11:7f:41:b1:22: bf:17:f0:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQuiARk99HezXIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Yzk1MzI0MDEtOTZjMS00NjE3LWIxMWQtZDMzNzU2ZTI1ZGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1Og2yKOCsYwWQKBlakELY3iA9R/E4LFMLMq vpsi5dOl7rtm2MscJZliLGrwH0mROUkvetVfXkDcKwpscB2CgkhRT02/ww6jCOvs GEVW5iJl/2UAhkga+CYB3/TOMTrk8/qdceEd+YO+zXY9RWU2JbocuS2tsuhdFF/g kLCIYRgDyuUGEXns7GFDYRsmkgqnz+79RthKqP4CYseL0joNp00MBIK6upuW0jIj pt4WLoqWRjyeW8UuO8mLMI7XsQZMM00eMDkWqonsOp2nDbKtqruOk+J2yXnTHhPK Y2ZHQedcpIypHNJ8z4JAXlIgYoGVTAN5srbs2IncXtkn5q6okQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKgVql+vNXmOdGuWOp5AioTlPWBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzRlMmYzYjEtMmJkYy0z Y2NjLTljYzktNGFjNzY5YzY3ZGMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK17MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/nNctPM3pHn5XBg4e/OnCmIUloMS/7cxTgqi4PSggYxU4aMs4ACWZP b9KETOmYpc7PFTpPZ3utswbCITvIxFqFrjsNHhXOp5TnSNs2VA/11KrWFn5j3HXZ iAZVtUeDKLzHZCyQl2n3QT2PRDhqMX2PRiRccj3m3PDuuDN36rUMzfgGGbFnx9X8 T2g3xQLz13JGCrUXTM8GNGiOgjPJ0uIYXGrNkqyNhXwydA1oXIdMPA2Lsaq16KuN 1Id/8avc9lAlu+V3aUck89kczKI9lI6QM5EdtZkMz+OkZLD2uO2WmunQctX6lP7g etWUqoX3O8TnoDt2XdkRf0GxIr8X8FM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:00:46 2025 by rpki-client