$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa File: a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa (raw, json) Hash identifier: IDO0grn+gT+Nn7j9cstDwA6A7MErXdZstOCpmbKwxG4= Subject key identifier: AC:FB:5A:CF:77:61:91:43:72:10:06:3C:85:3E:A0:32:4D:B8:8C:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B82076956C303CDC2F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.232.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b8:20:76:95:6c:30:3c:dc:2f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6e8c32e0-5fee-4f41-97b0-9d30e1edd816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:85:59:d1:bd:71:f4:35:9e:35:1d:2e:44:bf: cc:cf:e6:68:13:bf:03:6b:57:e0:1a:a7:a4:8e:c8: 52:92:7e:b2:8a:7d:7a:d3:12:49:e4:c4:22:33:af: 3a:c4:dc:87:b3:37:3b:a4:c4:3e:d6:73:5d:92:fe: 12:b6:9e:81:8d:eb:7c:0d:88:52:9e:4b:b8:4d:b8: f3:1c:95:34:c5:d7:66:a9:8c:7b:b7:c7:27:d3:40: af:dd:e8:a2:ae:75:8a:94:74:a8:cf:4e:7e:aa:8a: d8:65:6a:d8:c1:33:12:e2:6a:15:07:b4:dc:53:c9: 1f:ac:13:15:d3:b0:8d:0b:7b:cf:c0:7c:67:fd:a5: 97:ce:4a:73:2d:76:dc:97:b3:54:c9:00:ef:47:42: 49:27:98:51:23:ce:cb:2d:bd:53:e3:7d:48:47:e0: f0:5c:14:c9:08:f9:23:68:88:c9:89:9d:8f:fa:c1: 5c:33:96:8a:28:6f:5c:97:cd:70:41:60:77:04:7f: ae:27:1c:30:5e:c2:e8:1d:29:7f:37:b0:95:26:ed: 59:fa:12:bd:2d:c4:c1:11:f6:8c:86:d0:ff:59:55: f9:b1:c8:fe:62:9e:18:b1:09:eb:6d:77:e1:d8:19: d8:7e:59:a9:1a:c5:09:aa:f9:0d:a3:bf:54:43:28: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:FB:5A:CF:77:61:91:43:72:10:06:3C:85:3E:A0:32:4D:B8:8C:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0faee9f-249d-3f64-9951-f6d19b6d5d6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.232.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:dc:9e:82:00:d7:87:27:75:e2:b9:db:20:2c:06:f2:41:b1: 59:51:c7:6c:75:f5:00:56:ed:ec:21:21:ae:83:a4:1a:6e:1f: 48:91:d8:61:41:57:32:fd:8e:65:bf:30:75:69:60:1a:53:5a: 93:c1:b5:b0:5f:25:cf:d8:a2:19:c1:1c:1e:7b:44:a8:50:4f: a0:9f:b4:b4:11:d0:52:af:9f:37:6d:1f:2c:b7:e6:22:e7:d2: 1b:2d:97:10:3e:50:a0:20:0c:f2:5a:23:9d:bb:fd:8f:25:01: 73:8d:29:c3:b6:b7:5d:b3:a9:c7:a1:1a:10:0f:0c:0e:c1:10: 33:49:c5:95:22:a5:83:7c:2a:f9:d1:47:1e:59:03:4c:c1:e2: cb:9e:f2:35:07:06:63:35:b8:21:dc:bd:58:63:ff:89:3e:cb: 11:71:a9:61:f2:41:29:9f:cd:05:32:2a:2c:89:b3:ab:77:39: 3f:f7:cf:63:06:94:ba:8f:fa:26:f0:62:8a:a5:80:94:65:26: d8:b8:46:04:1a:a7:72:8d:17:0e:fb:ed:e0:c4:4f:c8:1f:84: e0:da:0b:5a:61:57:b2:fb:c3:9b:7f:81:fe:e5:42:0e:24:f9: e5:51:04:28:03:13:3b:04:f4:4b:9c:c3:d1:0b:b6:3b:64:b8: 8f:66:86:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbggdpVsMDzcL4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmU4YzMyZTAtNWZlZS00ZjQxLTk3YjAtOWQzMGUxZWRkODE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy4VZ0b1x9DWeNR0uRL/Mz+ZoE78Da1fgGqek jshSkn6yin160xJJ5MQiM686xNyHszc7pMQ+1nNdkv4Stp6Bjet8DYhSnku4Tbjz HJU0xddmqYx7t8cn00Cv3eiirnWKlHSoz05+qorYZWrYwTMS4moVB7TcU8kfrBMV 07CNC3vPwHxn/aWXzkpzLXbcl7NUyQDvR0JJJ5hRI87LLb1T431IR+DwXBTJCPkj aIjJiZ2P+sFcM5aKKG9cl81wQWB3BH+uJxwwXsLoHSl/N7CVJu1Z+hK9LcTBEfaM htD/WVX5scj+Yp4YsQnrbXfh2BnYflmpGsUJqvkNo79UQyjZVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKz7Ws93YZFDchAGPIU+oDJNuIz9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTBmYWVlOWYtMjQ5ZC0z ZjY0LTk5NTEtZjZkMTliNmQ1ZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKHcnoIA14cndeK52yAsBvJBsVlRx2x19QBW7ewhIa6DpBpuH0iR2GFB VzL9jmW/MHVpYBpTWpPBtbBfJc/YohnBHB57RKhQT6CftLQR0FKvnzdtHyy35iLn 0hstlxA+UKAgDPJaI527/Y8lAXONKcO2t12zqcehGhAPDA7BEDNJxZUipYN8KvnR Rx5ZA0zB4sue8jUHBmM1uCHcvVhj/4k+yxFxqWHyQSmfzQUyKiyJs6t3OT/3z2MG lLqP+ibwYoqlgJRlJti4RgQap3KNFw777eDET8gfhODaC1phV7L7w5t/gf7lQg4k +eVRBCgDEzsE9Eucw9ELtjtkuI9mhmQ= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:00 2025 by rpki-client