$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406dd6b-0b26-3026-9fed-626e466cf6be.roa File: a406dd6b-0b26-3026-9fed-626e466cf6be.roa (raw, json) Hash identifier: zS5RS3J3E+tjEAYcb93gAtoiOtn/KIp2Cq6Udt2+9N4= Subject key identifier: AE:9A:DF:49:A5:51:DE:9B:9B:44:BE:90:99:1A:68:C9:D3:99:AC:A1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411099175DC21C4872BC380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406dd6b-0b26-3026-9fed-626e466cf6be.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:09:91:75:dc:21:c4:87:2b:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d9251a1e-5272-4532-a99f-b2d3bc1cb37e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:cf:98:92:e4:e1:6b:d4:bd:0a:25:74:f8:41: e4:b8:aa:74:58:d6:aa:6c:88:df:c3:43:ac:83:6d: 59:78:be:dc:1d:e5:59:cb:41:dc:0d:db:f5:a3:e5: 95:f4:65:be:d6:72:ff:0d:b8:2f:17:6e:06:96:8b: be:18:7c:b2:9d:a1:3c:71:99:ee:af:16:aa:28:5e: d0:4e:2f:2e:7f:46:ce:82:bc:16:ad:58:93:03:ba: 04:e2:f4:85:1a:d7:95:f5:3f:04:fd:9c:0f:d0:a6: a1:39:d9:05:8d:58:66:ed:d9:6b:74:d5:fa:0a:b2: 99:20:a2:95:39:ab:47:e1:e9:c5:ac:d3:43:d1:ff: d6:09:21:7c:80:87:fb:06:76:05:f0:1b:2c:0e:d9: da:20:d2:cc:ed:76:a2:11:0d:4e:2b:17:5f:cb:29: 1f:dd:0b:09:71:5c:65:92:12:84:b6:34:a7:cd:78: d5:3a:47:9b:ff:9b:6f:d5:4e:7e:e0:4a:b9:a8:cf: 57:c5:b0:55:a3:ac:b6:2d:77:17:40:53:85:36:dc: c3:c5:2e:99:d7:0c:90:d6:26:d5:64:3f:f4:89:83: c1:bf:a0:7d:c0:54:3d:fc:f2:8d:4f:6b:f6:8e:d7: 3f:3e:9d:c5:e7:4d:4e:3a:b8:e4:f0:a2:90:24:2c: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:9A:DF:49:A5:51:DE:9B:9B:44:BE:90:99:1A:68:C9:D3:99:AC:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406dd6b-0b26-3026-9fed-626e466cf6be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:60:ac:ff:42:48:7b:a4:37:fc:f4:c2:0b:a2:51:80:b7:14: 36:05:f1:34:86:62:1b:1c:22:a5:01:0a:73:4d:32:76:eb:d8: ad:ff:c6:9b:78:99:28:e6:6e:b6:d9:52:89:88:35:98:9d:44: b1:39:f3:9c:95:2d:91:3a:fb:7b:64:a4:3c:72:f4:98:bb:27: ea:41:79:bf:7a:84:24:08:60:a1:b2:6b:18:7e:42:35:0c:80: e0:72:bd:21:18:7f:d0:ff:19:b3:07:ed:29:73:98:ce:63:0c: 46:b9:fb:66:89:55:15:81:61:1e:a3:cd:e8:ad:d4:32:ab:2a: cd:69:b9:ed:76:37:07:51:56:dd:5c:b2:35:7f:05:58:10:df: fc:ad:85:cd:b4:3a:e9:1e:22:bb:5d:a8:75:2c:67:a9:5b:9b: f5:0d:a5:3c:6f:4d:2f:f3:10:dd:14:4c:64:85:36:93:d8:ab: 40:b5:d7:45:89:8d:87:34:e9:16:58:b6:0f:c6:57:ef:31:8b: 45:6b:d0:43:61:97:1c:bc:ac:6f:e4:10:af:fe:9f:0c:24:d8: 07:80:e5:ab:c4:b5:7c:50:87:aa:76:41:0b:56:05:ca:1c:6f: b8:46:c3:bc:0f:f1:1e:64:f8:4e:0f:f1:19:c7:f8:85:57:91: 10:81:50:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQmRddwhxIcrw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDkyNTFhMWUtNTI3Mi00NTMyLWE5OWYtYjJkM2JjMWNiMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28+YkuTha9S9CiV0+EHkuKp0WNaqbIjfw0Os g21ZeL7cHeVZy0HcDdv1o+WV9GW+1nL/DbgvF24Glou+GHyynaE8cZnurxaqKF7Q Ti8uf0bOgrwWrViTA7oE4vSFGteV9T8E/ZwP0KahOdkFjVhm7dlrdNX6CrKZIKKV OatH4enFrNND0f/WCSF8gIf7BnYF8BssDtnaINLM7XaiEQ1OKxdfyykf3QsJcVxl khKEtjSnzXjVOkeb/5tv1U5+4Eq5qM9XxbBVo6y2LXcXQFOFNtzDxS6Z1wyQ1ibV ZD/0iYPBv6B9wFQ9/PKNT2v2jtc/Pp3F501OOrjk8KKQJCyXzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK6a30mlUd6bm0S+kJkaaMnTmayhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQwNmRkNmItMGIyNi0z MDI2LTlmZWQtNjI2ZTQ2NmNmNmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZgrP9CSHukN/z0wguiUYC3FDYF8TSGYhscIqUBCnNNMnbr2K3/xpt4 mSjmbrbZUomINZidRLE585yVLZE6+3tkpDxy9Ji7J+pBeb96hCQIYKGyaxh+QjUM gOByvSEYf9D/GbMH7SlzmM5jDEa5+2aJVRWBYR6jzeit1DKrKs1pue12NwdRVt1c sjV/BVgQ3/ythc20OukeIrtdqHUsZ6lbm/UNpTxvTS/zEN0UTGSFNpPYq0C110WJ jYc06RZYtg/GV+8xi0Vr0ENhlxy8rG/kEK/+nwwk2AeA5avEtXxQh6p2QQtWBcoc b7hGw7wP8R5k+E4P8RnH+IVXkRCBUFc= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:22 2025 by rpki-client