$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8637fc33-3853-33ba-897f-e9ca986cca2d.roa File: 8637fc33-3853-33ba-897f-e9ca986cca2d.roa (raw, json) Hash identifier: rGYh60AqUcL/An5xZHtbv6nmbdX/Kc3RmP5HkcwTQDE= Subject key identifier: A3:93:9F:3A:2C:3C:1C:BE:0C:D6:FD:C2:1F:D3:32:88:CB:38:9D:E3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B2F7E3D685AF887B72C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8637fc33-3853-33ba-897f-e9ca986cca2d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b2:f7:e3:d6:85:af:88:7b:72:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0ac08b22-dc7b-4550-a96f-67e5b50f4c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:30:23:45:e7:83:3d:9a:e5:5d:50:52:a8:4e: 19:26:8e:9a:c8:86:a3:bf:d8:23:82:61:4f:2d:99: 6d:79:c9:ed:89:fe:b9:5f:32:36:4a:f6:e4:81:51: 2b:f1:af:28:f3:1e:52:f6:df:c0:e2:7c:a9:2f:af: 52:59:dc:74:24:a2:af:39:4b:d6:73:ff:db:0a:55: 24:66:35:8b:d3:da:fb:49:41:07:ed:72:b1:89:df: f5:a0:76:b6:8c:5d:95:92:de:89:82:42:6b:65:db: 21:91:fc:a0:7f:2d:7b:50:91:a8:17:98:2a:58:e8: 31:94:67:a9:e2:b8:5c:69:fd:b5:a3:ac:3f:97:f4: e3:4e:30:6b:74:b9:53:4f:e6:3b:fa:aa:af:c4:3b: cb:a6:65:ca:f7:fe:dd:9d:50:0b:c3:ec:26:23:cf: 49:a3:55:25:19:62:54:75:cc:64:4c:72:1e:37:e4: f9:b0:0f:15:d2:c2:27:1d:f4:64:e1:cb:ea:c0:0e: e2:11:2c:a9:5e:2e:6a:5c:75:7e:e6:22:a6:49:01: 27:ba:b0:00:a1:c6:31:1c:12:21:cc:d9:dc:78:fd: 7c:f1:11:8f:f4:39:23:fb:d4:78:58:a4:ed:20:06: 87:04:cb:e8:8d:98:d0:d2:f3:8c:d8:64:2f:f2:f3: 92:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:93:9F:3A:2C:3C:1C:BE:0C:D6:FD:C2:1F:D3:32:88:CB:38:9D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8637fc33-3853-33ba-897f-e9ca986cca2d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:62:54:2d:57:1b:64:8e:f9:e9:52:27:4f:29:e8:96:8d:de: 98:0e:8c:c7:3f:8d:f0:eb:60:8e:0c:0a:dd:01:68:4b:f3:d5: a4:be:4e:01:b8:8d:c4:f9:82:79:82:ec:b9:d3:72:c9:8f:af: 9a:d0:11:16:cb:f9:06:2a:9c:1a:cc:12:ff:64:a6:a8:b9:5a: 95:5b:28:07:55:10:a2:5e:87:bd:f0:8f:90:c6:15:fa:af:aa: 1a:67:54:d6:68:46:d1:52:d4:52:03:fc:9f:4b:f6:b2:cb:e6: c9:2c:0f:48:94:85:26:a7:30:63:bd:7f:29:c7:c1:c7:9d:4d: a3:a5:2c:b2:43:22:2a:40:8d:94:76:3e:95:fc:a4:4b:61:1c: 1e:02:c1:be:e1:67:71:6e:6d:e3:32:64:f3:9d:e8:a4:02:f7: e4:af:40:39:62:c9:53:3b:23:d5:76:3c:68:a0:1b:d2:ef:c2: e4:56:c6:57:06:b2:23:3a:9d:a3:7b:d7:13:fe:03:26:e7:6e: aa:76:f4:18:7e:4e:d7:11:e0:f0:9d:35:9d:e8:14:eb:03:e2: 31:c6:64:3a:6e:72:a2:57:7e:58:d0:41:f7:60:50:38:b7:48: fc:ee:ca:b6:51:28:59:a0:93:99:d2:0a:a0:37:fc:3b:9d:b9: cf:00:83:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbL349aFr4h7csAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGFjMDhiMjItZGM3Yi00NTUwLWE5NmYtNjdlNWI1MGY0Yzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszAjReeDPZrlXVBSqE4ZJo6ayIajv9gjgmFP LZltecntif65XzI2SvbkgVEr8a8o8x5S9t/A4nypL69SWdx0JKKvOUvWc//bClUk ZjWL09r7SUEH7XKxid/1oHa2jF2Vkt6JgkJrZdshkfygfy17UJGoF5gqWOgxlGep 4rhcaf21o6w/l/TjTjBrdLlTT+Y7+qqvxDvLpmXK9/7dnVALw+wmI89Jo1UlGWJU dcxkTHIeN+T5sA8V0sInHfRk4cvqwA7iESypXi5qXHV+5iKmSQEnurAAocYxHBIh zNnceP188RGP9Dkj+9R4WKTtIAaHBMvojZjQ0vOM2GQv8vOS0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKOTnzosPBy+DNb9wh/TMojLOJ3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODYzN2ZjMzMtMzg1My0z M2JhLTg5N2YtZTljYTk4NmNjYTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRiVC1XG2SO+elSJ08p6JaN3pgOjMc/jfDrYI4MCt0BaEvz1aS+TgG4 jcT5gnmC7LnTcsmPr5rQERbL+QYqnBrMEv9kpqi5WpVbKAdVEKJeh73wj5DGFfqv qhpnVNZoRtFS1FID/J9L9rLL5sksD0iUhSanMGO9fynHwcedTaOlLLJDIipAjZR2 PpX8pEthHB4Cwb7hZ3FubeMyZPOd6KQC9+SvQDliyVM7I9V2PGigG9LvwuRWxlcG siM6naN71xP+Aybnbqp29Bh+TtcR4PCdNZ3oFOsD4jHGZDpucqJXfljQQfdgUDi3 SPzuyrZRKFmgk5nSCqA3/Duduc8Agz8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:14 2025 by rpki-client