$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa7ccac4-e2e9-3877-a22c-9c837287bfe4.roa File: aa7ccac4-e2e9-3877-a22c-9c837287bfe4.roa (raw, json) Hash identifier: z23vPRmsUurh91Lc5AQv0fQ/BWykQ3lWIPVoDGfGKEo= Subject key identifier: 97:E7:E3:40:0A:13:A3:34:4D:69:82:DE:9A:9D:C5:50:35:A5:FE:8E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110DAAF7766EF65F141A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa7ccac4-e2e9-3877-a22c-9c837287bfe4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0d:aa:f7:76:6e:f6:5f:14:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5fcf111f-478b-4774-b1fc-24c3ff1ce7fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:7b:50:d4:ea:94:aa:e2:2b:27:23:d8:2e:f7: 40:fd:57:84:29:78:01:a6:dd:27:6b:53:d3:2e:66: 22:da:33:80:90:5c:10:28:ed:6f:0b:42:41:9a:35: e9:19:61:bf:38:42:f1:43:12:15:2e:5c:38:c3:d9: 9a:52:bc:42:e3:3e:25:9a:e9:52:e0:3b:79:4e:29: 60:d7:1c:9a:0b:73:c8:4e:78:03:21:e7:aa:e7:63: f1:80:c2:2c:b7:5d:3e:5e:fd:51:c7:b5:ad:f1:a3: bf:28:04:ed:7d:8d:77:cf:d6:14:e4:45:ae:74:ca: ba:61:4c:f2:94:5e:80:3e:26:ee:33:19:72:92:94: b0:63:75:41:11:8c:a3:57:cb:08:f6:f8:81:dc:2d: cd:69:5f:70:40:9f:ce:4d:86:e7:1f:32:3b:09:7a: b8:6a:91:77:90:76:98:34:43:21:fd:51:b5:5b:aa: 2f:3e:c4:69:c6:da:d2:ec:18:e6:48:85:09:a8:09: 1f:81:e0:87:69:d8:09:82:9d:fa:6a:a9:97:eb:a6: da:73:55:3d:c2:10:3e:c4:91:18:3b:43:ae:7e:58: 50:a7:d5:eb:a3:26:39:31:0a:c4:91:58:ac:ac:95: c6:89:84:b6:83:03:c8:fa:3b:20:b5:69:cd:87:84: 1c:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:E7:E3:40:0A:13:A3:34:4D:69:82:DE:9A:9D:C5:50:35:A5:FE:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa7ccac4-e2e9-3877-a22c-9c837287bfe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c3:17:d6:27:45:fd:32:ec:65:1e:9d:b5:2b:3b:c6:b1:9f:ee: 7f:07:47:31:e4:66:e0:aa:26:8d:6c:dd:ca:95:8c:c3:0c:e4: 4f:86:3e:d0:6e:69:ee:60:f5:82:15:24:34:f4:f4:c8:f0:0b: 4a:2c:bb:26:ad:fa:58:bc:56:42:4d:9a:78:ca:8a:f5:46:1c: ef:c2:09:61:c9:c5:b2:12:cc:90:14:8b:81:e9:f6:74:2c:41: 99:16:45:01:10:fa:7b:09:b0:3b:73:ee:4d:e9:14:cc:b3:93: 7f:d5:4d:a6:bb:f5:45:a5:92:1b:0b:7b:d7:2f:61:3f:7a:58: 01:2a:df:c0:7b:31:56:43:bf:ed:d2:67:7f:d1:ee:f6:63:69: c2:32:dc:a3:6f:34:80:18:44:c6:08:07:4a:1f:f6:54:e6:8f: 8c:77:ff:19:af:10:0a:44:ef:d0:af:12:85:3c:87:59:bd:d2: 17:05:dc:e7:6f:2b:d8:56:1d:8f:6f:f6:ba:87:59:1e:6f:90: c5:4c:a9:70:5e:64:c7:22:0d:40:ea:b7:67:b0:71:73:4b:5b: 81:fe:e3:7b:d9:97:58:79:9c:08:0a:40:68:b9:20:fd:f4:27: 89:a6:45:8e:18:96:15:f8:59:7d:32:00:71:cb:e7:61:9b:e7: ef:a3:a0:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQ2q93Zu9l8UGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWZjZjExMWYtNDc4Yi00Nzc0LWIxZmMtMjRjM2ZmMWNlN2ZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAintQ1OqUquIrJyPYLvdA/VeEKXgBpt0na1PT LmYi2jOAkFwQKO1vC0JBmjXpGWG/OELxQxIVLlw4w9maUrxC4z4lmulS4Dt5Tilg 1xyaC3PITngDIeeq52PxgMIst10+Xv1Rx7Wt8aO/KATtfY13z9YU5EWudMq6YUzy lF6APibuMxlykpSwY3VBEYyjV8sI9viB3C3NaV9wQJ/OTYbnHzI7CXq4apF3kHaY NEMh/VG1W6ovPsRpxtrS7BjmSIUJqAkfgeCHadgJgp36aqmX66bac1U9whA+xJEY O0OuflhQp9XroyY5MQrEkVisrJXGiYS2gwPI+jsgtWnNh4Qc1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJfn40AKE6M0TWmC3pqdxVA1pf6OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE3Y2NhYzQtZTJlOS0z ODc3LWEyMmMtOWM4MzcyODdiZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMMX1idF/TLsZR6dtSs7xrGf7n8HRzHkZuCqJo1s3cqVjMMM5E+GPtBu ae5g9YIVJDT09MjwC0osuyat+li8VkJNmnjKivVGHO/CCWHJxbISzJAUi4Hp9nQs QZkWRQEQ+nsJsDtz7k3pFMyzk3/VTaa79UWlkhsLe9cvYT96WAEq38B7MVZDv+3S Z3/R7vZjacIy3KNvNIAYRMYIB0of9lTmj4x3/xmvEApE79CvEoU8h1m90hcF3Odv K9hWHY9v9rqHWR5vkMVMqXBeZMciDUDqt2ewcXNLW4H+43vZl1h5nAgKQGi5IP30 J4mmRY4YlhX4WX0yAHHL52Gb5++joHc= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:34 2025 by rpki-client