$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa File: aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa (raw, json) Hash identifier: fbg7LJ3t53jvBeeX2RaqnIoY/ShQ3ZvYq24v5ukKyqg= Subject key identifier: 4B:D9:4C:26:82:0F:D5:26:24:A0:FB:AD:7B:39:CF:66:21:23:57:60 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B45849580DCE8BB9C580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b4:58:49:58:0d:ce:8b:b9:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=25629d82-ac61-4b61-bf87-7221a9fd2750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3c:10:df:a6:88:f2:22:df:0c:04:7c:0a:1a: c9:97:9a:b2:e8:22:57:eb:58:b6:1a:57:f2:13:f3: 26:5b:05:7a:d6:bf:12:1b:61:8a:99:cc:88:76:86: 2e:5f:62:74:d6:e5:08:66:88:e7:00:54:5d:5c:a3: 5b:9d:a6:ca:4c:80:ea:14:b8:b6:02:61:9f:9a:a0: 54:42:24:dc:f9:2c:b6:8b:03:e3:8f:46:60:43:88: 1f:e9:77:e8:c7:00:4a:e3:b1:2b:b0:20:1e:81:e5: a8:8e:4d:5a:ce:db:a6:80:94:b6:a6:88:c4:1f:18: 7c:61:78:94:48:e8:f9:43:46:0e:ba:fe:b4:07:b6: 5f:1c:4e:17:60:a1:50:e1:32:b3:db:94:9c:9a:3a: 71:ba:9a:fc:0b:cd:45:04:76:89:6b:87:c8:53:fa: e9:a8:ef:41:e6:a0:a7:04:0c:a4:eb:3c:11:de:42: 19:49:b8:8f:c9:df:11:8e:18:13:d4:39:b6:2a:ba: b9:f2:0d:e3:c3:fb:f1:c4:a1:49:ba:e2:67:b7:64: 3a:97:f4:73:d5:b7:2a:6b:8a:1d:09:ce:45:b7:e2: 5b:94:84:f1:89:f5:22:5c:5b:fc:63:fd:9c:8b:87: 26:ae:9e:94:c0:41:c7:7a:44:a1:b9:44:69:fc:f6: 2e:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:D9:4C:26:82:0F:D5:26:24:A0:FB:AD:7B:39:CF:66:21:23:57:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa8b9a57-5b60-34bb-b91e-8c2a99ac0cf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c2:42:68:50:91:77:a8:3c:4d:e1:01:6f:82:b7:10:21:42:d7: 70:a2:51:5d:9d:3b:11:84:95:19:40:87:44:53:54:12:32:07: 12:d1:f0:fe:a9:68:e7:df:7f:00:4e:93:1c:09:94:e3:8a:9a: db:14:73:2c:c4:20:d3:51:6d:1c:55:fc:5a:2a:0a:0a:f0:6f: bf:01:14:1d:9e:1e:a2:cf:d9:84:c5:95:dc:47:9a:eb:f1:10: 7c:60:d4:dd:45:cf:52:18:df:36:aa:d2:70:e4:a2:2d:cc:b1: 4c:b3:7d:d4:ef:35:fa:d4:c1:83:60:29:9d:88:ea:ca:35:84: 83:4b:a4:1b:c0:fa:73:cd:b2:6b:8c:11:31:a3:e9:ff:6d:96: 77:61:d9:14:38:91:17:0c:cc:81:c0:98:8f:22:ac:71:c0:6e: 0b:af:bf:69:a1:bb:9c:06:00:a0:04:e1:26:ce:8b:26:73:eb: 2d:a3:d9:8b:ac:b5:2d:db:4f:49:23:e8:10:be:6f:b9:23:4f: 69:e8:16:5b:73:58:a6:4f:c5:22:67:6f:1d:55:73:dd:eb:1b: 9b:3b:d2:2e:0b:4f:b0:0f:4b:3e:02:fc:62:44:70:cc:ac:0d: cc:74:05:dd:cc:37:0a:85:1c:62:72:e1:c8:5e:88:34:79:d7: 14:4d:1f:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbRYSVgNzou5xYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjU2MjlkODItYWM2MS00YjYxLWJmODctNzIyMWE5ZmQyNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDwQ36aI8iLfDAR8ChrJl5qy6CJX61i2Glfy E/MmWwV61r8SG2GKmcyIdoYuX2J01uUIZojnAFRdXKNbnabKTIDqFLi2AmGfmqBU QiTc+Sy2iwPjj0ZgQ4gf6XfoxwBK47ErsCAegeWojk1aztumgJS2pojEHxh8YXiU SOj5Q0YOuv60B7ZfHE4XYKFQ4TKz25Scmjpxupr8C81FBHaJa4fIU/rpqO9B5qCn BAyk6zwR3kIZSbiPyd8RjhgT1Dm2Krq58g3jw/vxxKFJuuJnt2Q6l/Rz1bcqa4od Cc5Ft+JblITxifUiXFv8Y/2ci4cmrp6UwEHHekShuURp/PYunwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEvZTCaCD9UmJKD7rXs5z2YhI1dgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE4YjlhNTctNWI2MC0z NGJiLWI5MWUtOGMyYTk5YWMwY2YxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2eMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMJCaFCRd6g8TeEBb4K3ECFC13CiUV2dOxGElRlAh0RTVBIyBxLR8P6p aOfffwBOkxwJlOOKmtsUcyzEINNRbRxV/FoqCgrwb78BFB2eHqLP2YTFldxHmuvx EHxg1N1Fz1IY3zaq0nDkoi3MsUyzfdTvNfrUwYNgKZ2I6so1hINLpBvA+nPNsmuM ETGj6f9tlndh2RQ4kRcMzIHAmI8irHHAbguvv2mhu5wGAKAE4SbOiyZz6y2j2Yus tS3bT0kj6BC+b7kjT2noFltzWKZPxSJnbx1Vc93rG5s70i4LT7APSz4C/GJEcMys Dcx0Bd3MNwqFHGJy4cheiDR51xRNHyI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:59 2025 by rpki-client