$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa File: 7b7af8b3-c545-330b-b84b-68057ba6e480.roa (raw, json) Hash identifier: cyUZ+f6X6z9IxFKEPTrZRks2tqJ/ViJhiboa/qnDBxA= Subject key identifier: C4:62:9E:AE:26:E5:0B:8B:FA:60:83:4C:B1:D2:40:18:D1:C3:C5:E8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411AEE11C6C11C569743600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ae:e1:1c:6c:11:c5:69:74:36:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=07367c2b-d38d-47e2-921f-9a602465298a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:7a:85:5c:a9:1d:b5:d5:40:b5:e6:31:48:44: 87:e4:73:a6:0c:27:b5:e4:3d:ba:57:f4:92:12:b7: 17:a0:e9:ef:8a:48:76:17:f5:80:0e:e4:6f:e5:fb: 43:49:35:3e:01:47:85:82:1b:20:dc:05:92:78:d2: 25:2f:6e:e2:f4:7a:f9:21:19:a9:28:05:f2:24:95: 04:e0:72:cc:3c:cb:03:ce:f4:c1:1c:b9:e9:7e:e1: 86:26:74:41:06:f0:1f:80:17:20:59:a5:fb:ae:74: 8c:9e:14:14:fe:3f:c7:48:b4:c3:6e:4c:50:06:54: 0a:e0:70:a5:6c:5a:bd:c6:07:78:31:db:b9:48:04: 3d:a1:17:94:0d:da:6c:45:f0:db:34:1d:52:86:2e: 31:a8:78:05:b1:cb:f4:a1:a5:b9:bb:9b:80:f7:5c: df:ce:d8:d1:6b:f3:e5:77:88:4e:be:ab:7b:7e:84: 03:dc:eb:2c:8f:bc:b5:c3:9c:dd:2a:10:c4:55:5b: 01:04:48:d5:b6:a3:d4:8c:20:27:3e:ee:97:83:93: 38:bc:6b:68:7e:74:c2:b9:5d:34:23:09:29:9c:4d: d1:40:2f:40:5c:1a:6a:17:7e:b4:a5:1e:ce:90:af: 74:da:7c:78:14:da:4d:25:d5:a8:6c:23:ae:b7:8a: fd:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:62:9E:AE:26:E5:0B:8B:FA:60:83:4C:B1:D2:40:18:D1:C3:C5:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7b7af8b3-c545-330b-b84b-68057ba6e480.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:16:89:97:96:cb:44:86:42:8c:95:7d:f7:cf:e3:28:85:2a: 2e:49:31:72:21:dc:e7:4b:b5:a4:4c:5e:27:91:0a:c3:eb:56: de:de:5f:20:d1:49:15:d9:81:e5:41:da:00:87:cf:09:9f:8a: 51:da:02:5f:e5:4b:47:07:95:10:91:41:de:27:47:e4:bf:ad: 30:7f:12:78:ea:7d:6e:e8:d6:c6:12:de:2f:63:bf:08:32:ac: b7:8f:1f:0c:b0:ab:ef:18:49:18:6e:1b:d8:42:85:c4:02:e2: 8a:05:f6:69:89:04:6a:c0:2c:70:2e:3a:ef:f6:51:3a:e5:9a: a5:33:03:6a:9c:40:81:35:db:b6:28:9f:45:68:bc:ec:f8:3c: 1e:2c:ff:7d:84:7c:2b:e0:22:e9:a0:59:1c:46:f3:bf:2a:7e: 3d:ed:48:7e:c3:b3:76:93:94:0f:7a:34:b9:d6:57:af:e8:9d: 81:01:1e:be:19:77:4b:29:52:9d:87:10:27:68:99:97:8f:12: 30:4a:87:59:62:7a:9a:6d:aa:cd:8f:96:ec:85:16:6d:a1:42: 40:b4:25:9e:7f:a1:6b:db:d1:4e:73:67:84:14:4d:a4:96:77: 04:5e:48:0b:79:12:d0:65:af:03:95:b4:5a:f8:02:65:a1:ca: 0c:4b:16:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEa7hHGwRxWl0NgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDczNjdjMmItZDM4ZC00N2UyLTkyMWYtOWE2MDI0NjUyOThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznqFXKkdtdVAteYxSESH5HOmDCe15D26V/SS ErcXoOnvikh2F/WADuRv5ftDSTU+AUeFghsg3AWSeNIlL27i9Hr5IRmpKAXyJJUE 4HLMPMsDzvTBHLnpfuGGJnRBBvAfgBcgWaX7rnSMnhQU/j/HSLTDbkxQBlQK4HCl bFq9xgd4Mdu5SAQ9oReUDdpsRfDbNB1Shi4xqHgFscv0oaW5u5uA91zfztjRa/Pl d4hOvqt7foQD3Ossj7y1w5zdKhDEVVsBBEjVtqPUjCAnPu6Xg5M4vGtofnTCuV00 IwkpnE3RQC9AXBpqF360pR7OkK902nx4FNpNJdWobCOut4r9QQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMRinq4m5QuL+mCDTLHSQBjRw8XoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2I3YWY4YjMtYzU0NS0z MzBiLWI4NGItNjgwNTdiYTZlNDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4WiZeWy0SGQoyVfffP4yiFKi5JMXIh3OdLtaRMXieRCsPrVt7eXyDR SRXZgeVB2gCHzwmfilHaAl/lS0cHlRCRQd4nR+S/rTB/EnjqfW7o1sYS3i9jvwgy rLePHwywq+8YSRhuG9hChcQC4ooF9mmJBGrALHAuOu/2UTrlmqUzA2qcQIE127Yo n0VovOz4PB4s/32EfCvgIumgWRxG878qfj3tSH7Ds3aTlA96NLnWV6/onYEBHr4Z d0spUp2HECdomZePEjBKh1liepptqs2PluyFFm2hQkC0JZ5/oWvb0U5zZ4QUTaSW dwReSAt5EtBlrwOVtFr4AmWhygxLFlE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:16 2025 by rpki-client