$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8269477-5b99-3238-b854-563027a4c732.roa File: a8269477-5b99-3238-b854-563027a4c732.roa (raw, json) Hash identifier: CkOdq21z6gbxwCjCGL5CwIn/rqKuNkgOQx+Z/zqTSa8= Subject key identifier: 54:70:03:5C:1A:04:4E:7C:F2:E0:16:B4:3F:26:2D:B7:A3:41:31:E1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B13797054D1DF59F8D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8269477-5b99-3238-b854-563027a4c732.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b1:37:97:05:4d:1d:f5:9f:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=408c5348-9df2-4938-9781-c63cfc406d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2e:df:41:c2:7c:c1:e8:41:76:4b:cb:0b:c4: 82:54:cb:26:38:cd:2c:9e:5d:18:cf:59:da:11:e5: 66:59:56:64:f3:03:4d:d4:95:88:6e:57:3c:86:bf: 4d:48:9a:5e:ca:70:e7:c0:55:ff:45:34:af:cd:72: d7:b3:91:d7:79:d7:78:e1:51:3f:34:3d:df:ca:27: 15:34:8b:e5:63:10:68:29:e1:77:18:2e:c8:a3:a0: c1:2c:11:8b:2d:99:b1:df:bf:36:2c:2a:0a:88:af: 1f:23:6c:16:b8:a0:d1:dc:7e:aa:b2:84:b0:86:e0: d7:aa:59:cf:9d:f5:e2:93:b0:a1:76:a6:b1:0c:bb: 8f:0b:c6:6a:c5:92:4f:e8:cf:eb:5e:5e:e4:c6:77: 7a:de:28:0b:a0:4d:1c:5c:28:97:1d:e3:af:93:a2: c3:2a:3b:cf:a5:9f:ab:61:74:00:cd:e6:23:e0:59: 3d:2a:fb:0d:21:c3:a8:bc:3e:b1:0d:1d:e3:a9:84: 38:fe:91:58:6a:95:e4:04:86:88:af:4b:df:b3:b7: 46:20:21:03:17:05:26:bc:83:9a:13:bc:cf:fc:b5: af:1e:7a:44:14:85:ab:ec:e5:a3:0e:6e:08:94:dd: 64:84:c4:85:4c:9c:b7:21:48:20:2e:da:d5:09:ab: b6:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:70:03:5C:1A:04:4E:7C:F2:E0:16:B4:3F:26:2D:B7:A3:41:31:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a8269477-5b99-3238-b854-563027a4c732.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:22:ec:ee:01:35:22:a4:40:d0:a2:ca:d9:0a:3e:92:89:84: 7b:51:42:27:d5:01:57:25:ae:12:ac:57:79:a9:8b:a3:fa:02: de:ed:36:54:79:4c:76:95:1d:31:5b:c6:c1:d5:23:07:f4:e2: 05:09:91:6d:09:ae:1c:63:5d:98:3c:1d:6c:8a:70:f2:90:49: e3:1e:10:bb:8e:1a:a5:be:01:41:52:b2:2a:24:86:1d:44:93: d9:84:2e:42:3e:f4:97:9f:0b:12:e8:03:97:c3:94:bd:e5:88: 0b:fa:fc:9d:57:6e:23:a2:7d:e1:10:e7:dc:05:ef:22:17:04: cc:d5:bb:5a:1b:6e:8d:c9:b9:0d:47:dc:2f:ff:f8:12:92:b2: 94:58:2d:59:a8:f1:92:7c:87:59:71:a7:a8:e7:a1:b2:cf:2d: 52:64:a6:51:44:f5:8c:eb:6d:5b:f1:de:99:d4:54:99:8b:4e: e5:fd:f6:cb:a8:05:ce:39:43:eb:69:21:90:a1:a5:ac:59:81: 93:38:28:d8:41:82:fe:37:22:f3:0c:69:41:09:bc:07:eb:04: 87:6a:d1:de:b2:48:0e:cb:af:63:d0:40:9e:d7:ea:5a:44:32: dd:0d:85:c1:2a:78:79:0f:4f:32:56:e9:fa:67:2c:c2:4a:da: 53:7c:fe:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbE3lwVNHfWfjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDA4YzUzNDgtOWRmMi00OTM4LTk3ODEtYzYzY2ZjNDA2ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS7fQcJ8wehBdkvLC8SCVMsmOM0snl0Yz1na EeVmWVZk8wNN1JWIblc8hr9NSJpeynDnwFX/RTSvzXLXs5HXedd44VE/ND3fyicV NIvlYxBoKeF3GC7Io6DBLBGLLZmx3782LCoKiK8fI2wWuKDR3H6qsoSwhuDXqlnP nfXik7ChdqaxDLuPC8ZqxZJP6M/rXl7kxnd63igLoE0cXCiXHeOvk6LDKjvPpZ+r YXQAzeYj4Fk9KvsNIcOovD6xDR3jqYQ4/pFYapXkBIaIr0vfs7dGICEDFwUmvIOa E7zP/LWvHnpEFIWr7OWjDm4IlN1khMSFTJy3IUggLtrVCau2nQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFRwA1waBE588uAWtD8mLbejQTHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTgyNjk0NzctNWI5OS0z MjM4LWI4NTQtNTYzMDI3YTRjNzMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACIi7O4BNSKkQNCiytkKPpKJhHtRQifVAVclrhKsV3mpi6P6At7tNlR5 THaVHTFbxsHVIwf04gUJkW0JrhxjXZg8HWyKcPKQSeMeELuOGqW+AUFSsiokhh1E k9mELkI+9JefCxLoA5fDlL3liAv6/J1XbiOifeEQ59wF7yIXBMzVu1obbo3JuQ1H 3C//+BKSspRYLVmo8ZJ8h1lxp6jnobLPLVJkplFE9YzrbVvx3pnUVJmLTuX99suo Bc45Q+tpIZChpaxZgZM4KNhBgv43IvMMaUEJvAfrBIdq0d6ySA7Lr2PQQJ7X6lpE Mt0NhcEqeHkPTzJW6fpnLMJK2lN8/n4= -----END CERTIFICATE-----Generated at Sat Jul 26 11:52:26 2025 by rpki-client