$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa File: 9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa (raw, json) Hash identifier: QK9aIcqaJDJUL0pIf6SxHoMU4DkMqimZ24DB/nhZh8Q= Subject key identifier: 98:EF:D9:EF:F9:AD:58:8F:11:B3:15:4B:23:DB:19:34:1C:24:FB:68 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B38C73F9B88BE1BECD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b3:8c:73:f9:b8:8b:e1:be:cd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c705d038-b590-4ece-b947-4f0e12226f60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:ec:8e:3f:82:35:ce:f1:14:59:53:07:cd: 40:99:dd:36:a6:b8:3e:a6:39:db:bc:b5:37:e2:00: eb:2e:1b:07:a0:fb:58:5c:81:7b:8b:e1:1b:d8:5b: 09:67:7d:a3:ec:e7:38:44:d0:ce:0a:18:cc:66:b7: 7e:50:78:9e:78:ae:ef:f2:4c:77:74:2c:c0:23:48: d0:80:fc:7d:5f:f2:31:b5:7b:f4:d2:e4:ed:f8:69: 5a:51:90:f0:74:8b:c9:d1:dd:03:0e:c3:64:6f:cb: 27:62:ec:50:b6:e9:03:72:84:9c:54:cf:25:4e:de: 95:55:ea:03:80:d9:cb:03:e6:cf:1e:8c:26:e2:89: 2d:fd:8f:3f:44:02:94:ee:6c:ac:2b:93:15:8e:60: e1:7c:21:8f:2b:81:3d:d7:20:f0:66:ea:43:c7:a8: 1a:21:49:1a:c7:28:14:37:af:fe:3e:07:20:e5:63: 09:42:6d:e8:dc:94:61:cf:13:34:ce:3f:a3:ac:62: a8:32:c7:75:16:fd:d4:c9:81:c3:a5:84:f2:bb:fb: 1d:3a:fd:65:a1:44:d7:bb:b8:11:e2:c8:94:9d:43: 0d:7e:7d:f6:4a:ee:d9:95:ba:07:68:e6:ee:00:a7: dd:ab:fb:e8:eb:5a:22:5c:30:6f:8d:53:59:05:94: 48:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:EF:D9:EF:F9:AD:58:8F:11:B3:15:4B:23:DB:19:34:1C:24:FB:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9bac2d5b-e2cf-3737-9287-1bdd916748a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c8:ce:3c:be:36:88:21:8b:5c:f8:ec:34:e5:e9:22:4d:5a: 0d:6d:a0:7d:7c:25:fa:49:e5:c8:ca:8f:1e:10:25:24:3e:59: 51:01:7e:ea:36:d2:7f:75:ab:8b:70:ef:29:ae:37:d4:55:b3: 0f:59:57:f0:28:9d:94:e5:84:2e:59:ff:73:be:75:83:5d:4d: 3a:b2:d0:54:e7:23:fc:10:54:0d:70:73:6f:21:a4:55:c4:0b: 6b:cf:48:56:ec:5b:15:1d:b2:c4:fe:4a:14:01:0e:27:68:31: 72:7c:d1:84:9b:0c:4c:60:7f:64:4d:55:64:b4:f6:ff:15:69: 15:68:06:10:4b:64:9d:c0:10:bd:e1:b3:8c:ea:06:6e:71:e1: 78:ad:58:6a:db:a4:25:a7:13:0d:54:fe:3b:95:39:66:41:82: 5a:48:45:be:d1:a0:5d:3a:57:35:60:7b:4b:4f:0e:36:b1:2c: 2f:4d:39:d7:7f:28:6e:00:5d:db:66:55:2d:de:23:6b:19:46: 07:58:fb:bb:d8:a8:7e:76:a8:b8:e7:1f:cb:35:f0:92:86:a3: 89:99:f3:99:3b:4d:0d:83:59:24:14:c0:37:66:8e:61:13:37: 4b:8e:d8:f1:d8:fa:70:aa:f8:f8:4b:3f:d6:0a:99:d5:c2:78: 32:b5:a5:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbOMc/m4i+G+zYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzcwNWQwMzgtYjU5MC00ZWNlLWI5NDctNGYwZTEyMjI2ZjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArPLsjj+CNc7xFFlTB81Amd02prg+pjnbvLU3 4gDrLhsHoPtYXIF7i+Eb2FsJZ32j7Oc4RNDOChjMZrd+UHieeK7v8kx3dCzAI0jQ gPx9X/IxtXv00uTt+GlaUZDwdIvJ0d0DDsNkb8snYuxQtukDcoScVM8lTt6VVeoD gNnLA+bPHowm4okt/Y8/RAKU7mysK5MVjmDhfCGPK4E91yDwZupDx6gaIUkaxygU N6/+Pgcg5WMJQm3o3JRhzxM0zj+jrGKoMsd1Fv3UyYHDpYTyu/sdOv1loUTXu7gR 4siUnUMNfn32Su7ZlboHaObuAKfdq/vo61oiXDBvjVNZBZRIdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjv2e/5rViPEbMVSyPbGTQcJPtoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWJhYzJkNWItZTJjZi0z NzM3LTkyODctMWJkZDkxNjc0OGEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzIzjy+Noghi1z47DTl6SJNWg1toH18JfpJ5cjKjx4QJSQ+WVEBfuo2 0n91q4tw7ymuN9RVsw9ZV/AonZTlhC5Z/3O+dYNdTTqy0FTnI/wQVA1wc28hpFXE C2vPSFbsWxUdssT+ShQBDidoMXJ80YSbDExgf2RNVWS09v8VaRVoBhBLZJ3AEL3h s4zqBm5x4XitWGrbpCWnEw1U/juVOWZBglpIRb7RoF06VzVge0tPDjaxLC9NOdd/ KG4AXdtmVS3eI2sZRgdY+7vYqH52qLjnH8s18JKGo4mZ85k7TQ2DWSQUwDdmjmET N0uO2PHY+nCq+PhLP9YKmdXCeDK1pQY= -----END CERTIFICATE-----Generated at Sat Jul 26 11:44:16 2025 by rpki-client