$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa File: 8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa (raw, json) Hash identifier: lM3NE4YqbqU1uNRwpUE+KsN/tVOP2vLv5IJFGRx7mfg= Subject key identifier: 92:C6:D8:73:A5:FC:0C:ED:7C:B1:60:CB:59:82:D8:E2:16:16:68:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110D7AB3912E9DF84E1540 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0d:7a:b3:91:2e:9d:f8:4e:15:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2473f616-bcbf-4f0c-b78f-b0de8e20be0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:0b:2a:9f:65:0c:ab:4b:8e:7f:25:2e:aa:47: 4e:6c:29:e4:47:49:d7:c2:62:78:20:e4:f7:cb:05: 7b:1b:d3:6f:7a:c9:16:63:7a:4b:72:7e:ed:d9:14: 76:44:37:8c:ab:c9:5e:05:6d:29:5c:24:fe:78:1b: 66:86:8a:89:c3:7a:6f:53:f7:38:1d:1c:d2:df:e6: f0:f8:33:18:08:d0:e2:df:98:e7:0c:df:82:0c:3e: 25:c3:e6:57:78:a7:27:a8:28:d4:60:eb:9f:73:d8: 4c:91:59:da:c1:28:77:62:7c:d6:cc:61:c2:69:92: 01:1d:a6:3d:5a:a6:72:bb:be:f2:94:2c:23:1c:84: 91:f9:e7:e2:fe:f6:18:61:94:aa:83:db:77:dc:ce: c5:6b:c1:18:aa:6c:8c:a2:4d:3f:9b:40:52:69:e6: bf:6b:4e:1e:62:f5:81:45:94:66:3e:d2:de:d9:08: d2:22:fa:d0:aa:b3:c0:ae:02:2f:8a:7c:1f:6b:c9: c6:8e:82:60:31:b6:f1:08:92:9b:d3:97:6a:bc:c4: a9:29:90:fa:9b:33:0d:78:57:31:6e:60:2f:06:fb: a1:ac:03:ea:62:cf:76:ac:70:20:47:d0:09:18:15: 31:01:56:9e:c0:5e:54:3c:80:c1:29:ae:70:65:b5: 6e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:C6:D8:73:A5:FC:0C:ED:7C:B1:60:CB:59:82:D8:E2:16:16:68:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8ea1b718-f338-3901-bdc7-ecc5940aa7e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:15:1a:7c:8d:d1:70:6b:2b:ff:91:32:15:b7:06:32:f4:80: 54:3d:9d:ed:49:a6:0b:c2:c7:0c:52:86:c6:a1:1f:f2:5d:3e: 05:12:30:fc:2d:44:90:8a:a8:06:4a:70:15:d1:52:00:0c:6f: da:76:38:1f:3f:28:0e:00:d8:7c:85:ef:8a:f5:f3:dd:69:1c: 77:38:3e:8a:e6:8e:0f:d9:84:55:f6:2e:96:2a:4c:e8:dd:f5: 03:b4:c0:fc:d5:8b:f3:3e:74:3e:16:79:cd:4c:0c:5e:03:f7: e1:ae:95:88:ea:1b:90:b7:22:d9:e6:02:09:8b:eb:29:ac:cd: c9:ca:fe:b3:c1:06:b4:35:82:73:0b:72:4f:fa:b1:dd:46:11: 0c:f8:09:88:76:6c:d9:af:97:ad:92:55:38:74:a1:a0:6c:3f: be:99:63:f5:d6:1a:94:82:7b:9b:af:69:99:50:8d:04:14:39: 6a:9e:6a:5a:4f:59:7f:0b:5d:16:18:93:34:0a:27:c3:3c:6e: 6f:1a:1b:14:0b:3d:76:0b:6d:03:b2:1c:95:3d:e4:af:ba:d3: b0:1c:53:ac:16:a4:19:94:a4:41:93:71:51:ad:88:3c:1f:d1: dd:eb:91:bc:89:79:e9:28:d0:23:64:42:f4:ee:a2:17:06:c1: e6:92:54:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQ16s5EunfhOFUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjQ3M2Y2MTYtYmNiZi00ZjBjLWI3OGYtYjBkZThlMjBiZTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwsqn2UMq0uOfyUuqkdObCnkR0nXwmJ4IOT3 ywV7G9NveskWY3pLcn7t2RR2RDeMq8leBW0pXCT+eBtmhoqJw3pvU/c4HRzS3+bw +DMYCNDi35jnDN+CDD4lw+ZXeKcnqCjUYOufc9hMkVnawSh3YnzWzGHCaZIBHaY9 WqZyu77ylCwjHISR+efi/vYYYZSqg9t33M7Fa8EYqmyMok0/m0BSaea/a04eYvWB RZRmPtLe2QjSIvrQqrPArgIvinwfa8nGjoJgMbbxCJKb05dqvMSpKZD6mzMNeFcx bmAvBvuhrAPqYs92rHAgR9AJGBUxAVaewF5UPIDBKa5wZbVuxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJLG2HOl/AztfLFgy1mC2OIWFmgGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGVhMWI3MTgtZjMzOC0z OTAxLWJkYzctZWNjNTk0MGFhN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkVGnyN0XBrK/+RMhW3BjL0gFQ9ne1JpgvCxwxShsahH/JdPgUSMPwt RJCKqAZKcBXRUgAMb9p2OB8/KA4A2HyF74r1891pHHc4Pormjg/ZhFX2LpYqTOjd 9QO0wPzVi/M+dD4Wec1MDF4D9+GulYjqG5C3ItnmAgmL6ymszcnK/rPBBrQ1gnML ck/6sd1GEQz4CYh2bNmvl62SVTh0oaBsP76ZY/XWGpSCe5uvaZlQjQQUOWqealpP WX8LXRYYkzQKJ8M8bm8aGxQLPXYLbQOyHJU95K+607AcU6wWpBmUpEGTcVGtiDwf 0d3rkbyJeeko0CNkQvTuohcGweaSVI8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:08 2025 by rpki-client