$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa File: 8aa0414c-8126-3e49-be44-eb2af2892430.roa (raw, json) Hash identifier: xn/tWXs80C2EhqO0/aE9rcDCi3l8IcQAn54A8d8QiVc= Subject key identifier: 34:93:24:34:EE:24:D9:6F:25:CA:52:7A:E1:97:AB:EF:C4:37:56:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841108918C0E0EB1AC5776B0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:08:91:8c:0e:0e:b1:ac:57:76:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3baa9359-61ca-4d3a-af86-172130e320db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:32:37:7c:18:df:11:73:fa:c5:f5:9b:11: 93:30:fe:7d:b8:db:96:2c:83:e0:4a:22:4a:d9:03: 3a:f3:f6:a4:8a:3d:b4:83:a8:b4:0d:52:99:d7:0b: bf:5c:5b:58:9e:c2:12:81:ab:9a:f4:e0:76:f3:9f: 95:35:f2:7d:75:1d:fc:b6:ef:04:e0:f7:a4:ae:8d: 16:21:72:9e:de:c0:2d:9e:d8:84:8c:05:c8:05:38: 08:60:04:bc:e2:4f:9c:5a:1f:7f:d4:29:70:76:f8: d5:e7:3a:7d:45:77:f4:ef:c5:f7:85:90:51:29:78: 4b:eb:e7:2d:fa:17:a9:75:86:d3:f3:d8:c3:ae:ce: 5e:fb:e6:62:b7:4f:fb:f5:c0:18:6b:f7:43:6e:91: b8:01:3b:fe:31:7b:db:ea:09:d2:b2:64:50:ef:c8: e7:31:1f:a3:51:7d:32:20:7f:1d:6a:b5:51:52:c3: 74:1f:5f:38:bc:86:61:af:4f:0e:2d:b5:27:7c:06: 4a:a2:0e:1a:6c:0b:60:70:b2:17:d0:04:5a:b2:94: e5:77:23:6e:0d:d5:6b:36:20:4a:9e:42:75:33:d6: 58:21:69:87:a1:9c:54:19:0d:19:c6:f5:3c:32:cc: 2d:dd:e3:96:a0:04:f4:53:e1:a6:fe:69:a1:7b:2b: 02:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:93:24:34:EE:24:D9:6F:25:CA:52:7A:E1:97:AB:EF:C4:37:56:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:36:59:a4:0e:f4:ee:a0:34:b4:9b:13:51:1c:96:76:b6:64: b6:30:37:d7:d6:dc:39:16:2f:3c:35:52:b1:dd:a0:be:10:49: 93:6e:7e:c0:73:bf:4f:03:42:3f:47:ce:37:9c:45:60:f8:73: 07:e6:9e:55:72:96:3b:24:45:ee:20:64:40:6e:d2:d0:85:aa: 1c:d6:c2:50:7c:2e:48:8a:09:77:84:88:16:74:7d:d6:aa:59: 83:c0:d9:ea:d9:bc:90:9e:a0:57:f2:b0:c4:a0:21:bd:d2:cb: 07:af:a0:2f:cc:3c:4f:a1:10:26:4c:ac:b4:e8:e4:db:09:2a: 9d:49:ad:2b:92:a4:09:69:73:78:f0:5f:f7:e1:55:04:8f:6c: c0:14:61:5b:d2:d5:92:38:c5:7c:94:4f:de:af:a9:be:15:02: d2:44:b3:30:0c:54:9c:7f:28:e1:46:cb:cf:4f:e9:47:93:ef: ac:c5:2f:61:25:fd:96:62:c2:da:35:12:7d:09:66:85:09:36: ba:ba:28:55:91:70:ca:3f:67:9c:6f:a1:a1:fb:e3:03:e1:22: 46:d1:0f:e8:2c:7f:42:51:ea:9c:16:a8:5b:4e:b3:3a:53:cc: 09:ed:a9:85:79:6c:95:83:ef:59:72:8c:78:89:18:49:a4:b3: 53:cb:13:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQiRjA4OsaxXdrAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2JhYTkzNTktNjFjYS00ZDNhLWFmODYtMTcyMTMwZTMyMGRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLMyN3wY3xFz+sX1mxGTMP59uNuWLIPgSiJK 2QM68/akij20g6i0DVKZ1wu/XFtYnsISgaua9OB285+VNfJ9dR38tu8E4Pekro0W IXKe3sAtntiEjAXIBTgIYAS84k+cWh9/1ClwdvjV5zp9RXf078X3hZBRKXhL6+ct +hepdYbT89jDrs5e++Zit0/79cAYa/dDbpG4ATv+MXvb6gnSsmRQ78jnMR+jUX0y IH8darVRUsN0H184vIZhr08OLbUnfAZKog4abAtgcLIX0ARaspTldyNuDdVrNiBK nkJ1M9ZYIWmHoZxUGQ0ZxvU8Mswt3eOWoAT0U+Gm/mmheysCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDSTJDTuJNlvJcpSeuGXq+/EN1YNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGFhMDQxNGMtODEyNi0z ZTQ5LWJlNDQtZWIyYWYyODkyNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQ2WaQO9O6gNLSbE1Eclna2ZLYwN9fW3DkWLzw1UrHdoL4QSZNufsBz v08DQj9HzjecRWD4cwfmnlVyljskRe4gZEBu0tCFqhzWwlB8LkiKCXeEiBZ0fdaq WYPA2erZvJCeoFfysMSgIb3SywevoC/MPE+hECZMrLTo5NsJKp1JrSuSpAlpc3jw X/fhVQSPbMAUYVvS1ZI4xXyUT96vqb4VAtJEszAMVJx/KOFGy89P6UeT76zFL2El /ZZiwto1En0JZoUJNrq6KFWRcMo/Z5xvoaH74wPhIkbRD+gsf0JR6pwWqFtOszpT zAntqYV5bJWD71lyjHiJGEmks1PLEwY= -----END CERTIFICATE-----Generated at Sat Jul 26 20:13:52 2025 by rpki-client