$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa File: d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa (raw, json) Hash identifier: gVRfMsDhXMTpMk17jfDLw7ZYyhdBD6AOqvKgts5wgdU= Subject key identifier: 1F:22:91:22:D1:32:20:BC:40:54:0F:E2:96:7B:8C:38:7C:FF:C0:FD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110ECD81E86765E30521C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0e:cd:81:e8:67:65:e3:05:21:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2ebac76e-144b-41fe-8d87-28211e27cfa4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:69:63:ad:b6:2a:73:11:87:48:24:cd:27:47: de:70:cf:f5:ef:86:a8:81:69:67:c9:15:d0:4e:69: a1:58:2c:f9:90:42:ba:f6:b6:7c:1e:1f:29:7a:f0: b7:35:ff:ce:06:66:e2:b1:96:35:64:2f:a4:fa:04: d2:17:d3:27:d9:b0:28:78:4c:cb:aa:95:3b:47:d0: 4d:99:c5:f2:0d:bc:a5:65:4f:29:2f:4f:6a:8d:2b: 29:f8:45:47:cf:23:02:1f:0b:21:7d:12:1d:f3:65: 03:f7:70:dc:4c:a8:a3:31:14:cd:36:86:8a:2a:bb: 30:9f:89:18:2d:61:04:3d:bd:0c:08:b9:0d:b5:bd: 71:35:74:8f:99:9e:90:c8:ba:78:0f:c4:6c:91:66: f6:63:cc:7b:76:cb:a7:3c:19:c6:0b:a5:ac:9d:c8: c6:4d:ce:2e:bb:b4:4e:20:05:17:ad:4f:d7:0e:dc: e8:4c:95:20:34:44:91:8c:d6:c8:a2:31:9e:e4:87: 14:f1:c9:3f:5f:9d:e8:b0:8c:20:a8:91:ea:4e:d6: ed:9d:e9:f3:fe:b2:42:19:66:20:fa:79:35:47:64: 91:80:e0:41:6f:6b:e9:70:9a:4c:b7:cb:5a:91:d6: e0:4e:23:a1:7b:0b:8b:d1:43:1c:fa:3d:25:93:d1: 3a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:22:91:22:D1:32:20:BC:40:54:0F:E2:96:7B:8C:38:7C:FF:C0:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 82:61:31:90:3c:10:67:23:02:2f:68:a4:9a:72:b6:73:93:12: 71:f1:00:d4:87:44:13:44:da:3f:7b:4f:ca:a2:b9:56:47:33: fd:d4:35:57:a1:17:64:39:fc:a1:17:11:4d:c2:f0:d8:b6:9a: b7:de:49:f4:e9:09:79:d8:58:06:ea:0f:5e:87:4a:b1:95:5c: df:f6:6c:76:54:41:9e:42:ee:a3:e8:66:93:ef:a4:98:c6:49: a6:02:ba:8c:af:5b:53:9d:bd:e9:26:32:f7:b0:26:ec:df:d0: 15:29:79:0c:1f:17:78:37:28:25:c5:98:5d:11:91:14:c9:67: 69:ae:01:11:5c:a0:61:24:17:5d:3f:59:e5:fb:df:77:1c:d2: 97:af:16:36:d7:d3:2e:d5:7b:df:73:0d:75:75:9e:e6:6f:25: ae:44:5a:5b:3f:6a:35:e6:bf:4e:95:c6:0b:d8:52:75:e6:02: f3:67:ab:e2:db:b3:82:63:2b:5d:d9:1d:ca:b2:28:57:96:2c: 3c:35:b0:09:b8:d2:6a:d6:4e:6a:b6:f0:9a:dd:42:35:9f:e3: b9:af:69:51:52:a9:80:df:b1:e6:6e:f0:bb:28:b5:7d:c6:9f: a9:e1:9e:bc:47:94:31:f6:c5:a9:04:cb:fc:18:bf:3b:4c:2d: 36:31:eb:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQ7NgehnZeMFIcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmViYWM3NmUtMTQ0Yi00MWZlLThkODctMjgyMTFlMjdjZmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2ljrbYqcxGHSCTNJ0fecM/174aogWlnyRXQ TmmhWCz5kEK69rZ8Hh8pevC3Nf/OBmbisZY1ZC+k+gTSF9Mn2bAoeEzLqpU7R9BN mcXyDbylZU8pL09qjSsp+EVHzyMCHwshfRId82UD93DcTKijMRTNNoaKKrswn4kY LWEEPb0MCLkNtb1xNXSPmZ6QyLp4D8RskWb2Y8x7dsunPBnGC6WsncjGTc4uu7RO IAUXrU/XDtzoTJUgNESRjNbIojGe5IcU8ck/X53osIwgqJHqTtbtnenz/rJCGWYg +nk1R2SRgOBBb2vpcJpMt8takdbgTiOhewuL0UMc+j0lk9E6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8ikSLRMiC8QFQP4pZ7jDh8/8D9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEzZDQzYTktMWNiYi0z MmZjLTk3ZTAtMjQ1NGRmZTc2OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIJhMZA8EGcjAi9opJpytnOTEnHxANSHRBNE2j97T8qiuVZHM/3UNVeh F2Q5/KEXEU3C8Ni2mrfeSfTpCXnYWAbqD16HSrGVXN/2bHZUQZ5C7qPoZpPvpJjG SaYCuoyvW1OdvekmMvewJuzf0BUpeQwfF3g3KCXFmF0RkRTJZ2muARFcoGEkF10/ WeX733cc0pevFjbX0y7Ve99zDXV1nuZvJa5EWls/ajXmv06VxgvYUnXmAvNnq+Lb s4JjK13ZHcqyKFeWLDw1sAm40mrWTmq28JrdQjWf47mvaVFSqYDfseZu8LsotX3G n6nhnrxHlDH2xakEy/wYvztMLTYx66s= -----END CERTIFICATE-----Generated at Sat Jul 26 11:40:15 2025 by rpki-client