$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa File: d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa (raw, json) Hash identifier: CuoYhc1ewAzro3l2BQkaZQdGpyFq5DZOo0rCUymzNBY= Subject key identifier: AA:72:27:36:A5:6A:7D:60:23:CE:72:8E:1E:4C:DC:31:E8:87:4C:26 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B06AABBF2F13877C34C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b0:6a:ab:bf:2f:13:87:7c:34:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=60942f9d-0614-432c-99a3-276de1d84a5a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:e1:27:b8:79:b9:6f:8d:ec:8c:5a:34:32:e7: d9:52:90:d1:f9:6d:ba:8a:df:6a:c4:e9:bc:c4:99: 87:7a:42:ec:7c:6d:5a:df:a7:63:f0:84:0d:d1:6f: fd:5a:15:22:7c:11:86:82:1a:4e:5f:89:05:7a:37: 3b:21:d5:8c:19:1c:fa:8d:be:03:e2:f2:e5:b2:ff: 3b:16:43:9a:67:d4:f4:39:a1:be:6e:d4:9a:b5:8b: b8:5b:e3:b9:03:25:e0:fb:bf:07:5e:6a:64:87:17: ea:3a:14:04:47:49:6a:d9:db:1c:3d:4c:3d:82:8a: 6d:21:e4:5c:b2:b3:bb:02:f8:65:89:9b:58:14:d3: 83:66:47:0a:5f:51:91:6b:c9:a4:ad:7f:a4:0e:70: b7:6b:24:03:69:93:8f:68:8c:4f:d7:ca:5a:b2:a6: 76:f2:d4:7d:44:75:ad:83:e1:a3:01:ac:f2:5e:1e: ba:a7:48:2c:9d:4d:a2:4e:34:22:b1:7f:60:17:f0: 10:eb:c4:01:4c:15:fc:20:e8:33:0b:6b:87:f4:06: 6d:36:6c:7f:d6:90:c8:8e:e3:fd:6d:19:44:8a:b8: 23:70:12:d4:94:a7:6b:42:4a:90:47:14:d2:1e:a9: 4d:ea:bc:d1:a8:ed:c1:ca:6a:3b:7c:ed:cb:ce:30: d9:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:72:27:36:A5:6A:7D:60:23:CE:72:8E:1E:4C:DC:31:E8:87:4C:26 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d20047e7-2a60-33fd-86b8-cb00bd5951bb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:db:dc:bd:dd:94:3a:e0:5a:01:1d:8b:db:79:cf:25:b5:43: 44:74:54:a8:0f:8f:91:d3:d5:b7:40:cb:6a:1f:b5:c1:da:38: 99:fd:49:52:cc:7f:27:96:99:59:33:07:2c:6d:c3:b1:b7:a4: df:47:96:41:1d:4f:36:c0:43:16:b7:e6:5e:ad:65:f6:69:62: 3c:1e:94:b5:ab:0f:0a:5c:54:44:fb:fb:aa:09:52:15:4c:1e: 3e:cc:19:36:76:95:7d:00:38:c2:f3:5e:bc:46:4a:14:68:e5: 4f:4b:f3:58:48:ae:b6:67:fc:f9:3b:b7:5f:c4:b9:d6:fa:51: ca:f5:a0:ae:62:8c:99:5e:ca:5e:0e:94:0b:69:9d:1a:b9:d9: 22:a5:28:6a:4b:eb:37:24:82:e9:00:e3:f8:45:af:67:b7:a0: d0:13:89:eb:ae:a1:b3:27:97:06:73:0a:57:d0:00:81:fa:9f: 4d:c9:16:22:9b:b9:ec:f4:6d:d0:26:e4:79:6d:ba:04:d0:f6: 14:70:08:d7:ac:00:e4:51:1b:b4:6c:bb:d0:34:1c:7d:24:48: 07:9b:14:8f:49:e7:f5:87:d9:15:55:4b:f8:1e:01:91:73:7d: 2f:bf:17:02:55:7b:4c:6a:36:d0:37:d2:f5:c2:70:07:5d:6c: df:96:93:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbBqq78vE4d8NMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjA5NDJmOWQtMDYxNC00MzJjLTk5YTMtMjc2ZGUxZDg0YTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjOEnuHm5b43sjFo0MufZUpDR+W26it9qxOm8 xJmHekLsfG1a36dj8IQN0W/9WhUifBGGghpOX4kFejc7IdWMGRz6jb4D4vLlsv87 FkOaZ9T0OaG+btSatYu4W+O5AyXg+78HXmpkhxfqOhQER0lq2dscPUw9goptIeRc srO7AvhliZtYFNODZkcKX1GRa8mkrX+kDnC3ayQDaZOPaIxP18pasqZ28tR9RHWt g+GjAazyXh66p0gsnU2iTjQisX9gF/AQ68QBTBX8IOgzC2uH9AZtNmx/1pDIjuP9 bRlEirgjcBLUlKdrQkqQRxTSHqlN6rzRqO3Bymo7fO3LzjDZdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKpyJzalan1gI85yjh5M3DHoh0wmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDIwMDQ3ZTctMmE2MC0z M2ZkLTg2YjgtY2IwMGJkNTk1MWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADb3L3dlDrgWgEdi9t5zyW1Q0R0VKgPj5HT1bdAy2oftcHaOJn9SVLM fyeWmVkzByxtw7G3pN9HlkEdTzbAQxa35l6tZfZpYjwelLWrDwpcVET7+6oJUhVM Hj7MGTZ2lX0AOMLzXrxGShRo5U9L81hIrrZn/Pk7t1/Eudb6Ucr1oK5ijJleyl4O lAtpnRq52SKlKGpL6zckgukA4/hFr2e3oNATieuuobMnlwZzClfQAIH6n03JFiKb uez0bdAm5HltugTQ9hRwCNesAORRG7Rsu9A0HH0kSAebFI9J5/WH2RVVS/geAZFz fS+/FwJVe0xqNtA30vXCcAddbN+Wk20= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:26 2025 by rpki-client