$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa File: a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa (raw, json) Hash identifier: JOHSWh6CF1+kknpctFv84uHG54Wb5Ec0RIAutuMTM7c= Subject key identifier: 63:FB:01:39:11:83:BE:5B:F8:AD:1C:E6:C9:D4:8F:BF:1D:28:0A:68 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110773DB5FD6C901457108 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:07:73:db:5f:d6:c9:01:45:71:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=30bb4dbc-0f1b-41c8-a64e-78b44c3a61fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:c7:02:7e:1d:bb:ea:56:cf:f5:8f:35:1c:93: 72:bc:47:c7:7e:50:97:b6:0c:c0:34:96:b6:d6:c3: 6e:f5:8e:7e:13:45:ae:15:69:8f:8a:61:13:06:dc: 30:43:54:47:5f:96:94:06:55:60:6d:d2:39:43:1e: 7b:8a:f9:52:2e:f3:2e:61:5c:9a:3a:bf:79:07:a5: f0:aa:bb:2a:d0:e7:4d:aa:65:7a:da:c2:93:88:ef: 8f:62:0f:de:57:5f:ec:90:e5:39:c9:c5:09:f3:c8: 4c:a5:d9:ac:7f:f7:1d:00:55:01:70:30:d4:2c:02: 26:0d:a9:49:30:e7:40:9d:ab:a5:81:98:61:78:cb: 93:69:b2:a5:59:ff:8d:e6:e4:dc:48:18:f9:0f:07: cc:54:15:95:26:0d:e9:87:04:7f:2b:cc:e4:2e:fc: 0d:40:bc:74:25:42:7a:80:b6:0a:d9:07:85:b1:8b: 3c:2f:18:41:5f:cb:e4:30:9d:66:e4:1f:0c:bb:83: 1a:5b:d6:d3:e8:3d:49:5a:37:f0:a8:6c:03:db:ce: de:6e:dd:b8:87:98:f1:01:16:b0:95:e8:44:3c:41: a1:a4:90:2c:cd:1c:a6:2f:00:d6:32:20:3c:a8:c9: 0c:52:f3:7e:37:01:f2:df:39:b8:34:7f:6e:17:3c: 3a:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FB:01:39:11:83:BE:5B:F8:AD:1C:E6:C9:D4:8F:BF:1D:28:0A:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:60:69:5c:83:bd:f5:35:41:05:be:d8:b4:cc:33:4e:cd:dd: fd:78:a5:69:9f:64:8e:aa:df:dd:ed:7a:7f:45:ef:31:6a:91: 7e:66:b1:c7:ad:e3:03:94:e3:be:47:e3:54:76:94:42:00:88: 6e:df:d0:10:14:37:66:68:7b:4c:70:67:83:28:8d:e0:7b:30: eb:31:24:2e:ab:b2:3f:19:6b:db:0b:1c:e3:9d:7b:a4:46:6f: 51:ea:9c:9a:39:ae:27:88:d2:b6:52:bd:9d:f9:4e:f6:4d:ed: 6e:22:be:37:ec:99:31:d8:d5:cd:f5:10:68:5c:7a:50:86:bb: b2:36:17:a5:e1:22:3e:e1:a3:6b:5d:ef:1b:8e:6c:f3:04:5a: 27:b3:72:32:ff:18:23:96:ab:51:67:25:46:72:6d:f2:06:0d: 4c:d4:78:1a:8f:70:de:ca:44:82:59:a8:41:4b:dd:e9:fc:fb: 4c:66:8b:62:a9:f2:4c:3f:e4:b6:8d:88:6c:c2:e7:e2:30:57: 38:62:d3:28:d8:29:44:66:35:9d:63:20:92:43:50:20:00:05: a1:ca:3f:5f:ee:d2:48:04:c9:49:f1:e7:de:e9:a4:71:34:0a: 5e:37:7a:55:4f:37:b2:bf:f8:4b:b1:b6:d3:e9:7e:79:14:4f: 4f:30:0e:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQdz21/WyQFFcQgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzBiYjRkYmMtMGYxYi00MWM4LWE2NGUtNzhiNDRjM2E2MWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMcCfh276lbP9Y81HJNyvEfHflCXtgzANJa2 1sNu9Y5+E0WuFWmPimETBtwwQ1RHX5aUBlVgbdI5Qx57ivlSLvMuYVyaOr95B6Xw qrsq0OdNqmV62sKTiO+PYg/eV1/skOU5ycUJ88hMpdmsf/cdAFUBcDDULAImDalJ MOdAnaulgZhheMuTabKlWf+N5uTcSBj5DwfMVBWVJg3phwR/K8zkLvwNQLx0JUJ6 gLYK2QeFsYs8LxhBX8vkMJ1m5B8Mu4MaW9bT6D1JWjfwqGwD287ebt24h5jxARaw lehEPEGhpJAszRymLwDWMiA8qMkMUvN+NwHy3zm4NH9uFzw69wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGP7ATkRg75b+K0c5snUj78dKApoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTJkOWUzYjctNmI0Zi0z ODJkLWJmNDktNDhiNjRiZTYyYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlgaVyDvfU1QQW+2LTMM07N3f14pWmfZI6q393ten9F7zFqkX5mscet 4wOU475H41R2lEIAiG7f0BAUN2Zoe0xwZ4MojeB7MOsxJC6rsj8Za9sLHOOde6RG b1HqnJo5rieI0rZSvZ35TvZN7W4ivjfsmTHY1c31EGhcelCGu7I2F6XhIj7ho2td 7xuObPMEWiezcjL/GCOWq1FnJUZybfIGDUzUeBqPcN7KRIJZqEFL3en8+0xmi2Kp 8kw/5LaNiGzC5+IwVzhi0yjYKURmNZ1jIJJDUCAABaHKP1/u0kgEyUnx597ppHE0 Cl43elVPN7K/+EuxttPpfnkUT08wDlk= -----END CERTIFICATE-----Generated at Fri Jul 25 23:59:29 2025 by rpki-client