$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d285b59d-1287-3746-b9b4-a47cd782f3ed.roa File: d285b59d-1287-3746-b9b4-a47cd782f3ed.roa (raw, json) Hash identifier: vklzzQreiCQO3mm44adlklks7vg93stp/4adq73NKJc= Subject key identifier: 54:04:DF:DE:AF:A3:62:AA:96:04:44:EB:52:12:2F:62:4F:63:9D:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110B9354203DD23188C858 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d285b59d-1287-3746-b9b4-a47cd782f3ed.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0b:93:54:20:3d:d2:31:88:c8:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f4696f12-b999-468e-8421-7b69a451fb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:2f:6a:6a:48:42:6d:02:8d:83:da:05:18:36: c0:5c:97:b4:a0:cd:82:72:8b:1c:21:4a:2d:a4:b5: 33:04:cb:0d:5c:18:73:a4:27:fe:36:b4:84:0b:00: 0b:36:30:33:6b:e0:81:3d:ac:9e:07:fc:c3:e4:c6: 9c:ca:6c:5f:8f:d4:e9:c7:69:ee:df:1f:a7:e2:0a: 1c:2c:56:e7:fd:d4:fb:16:86:d2:77:dd:7a:aa:9d: 9e:81:b4:c1:aa:b7:d7:4c:74:05:2f:20:bb:4c:fb: 38:28:99:de:55:15:d8:b3:0f:0f:0c:93:20:89:87: 3f:45:68:73:40:86:e4:10:47:02:ab:f2:da:3d:40: 4d:0d:92:a4:27:b1:68:0b:d0:5a:95:d2:a9:93:7d: 0a:2e:62:40:3b:88:28:f7:cc:21:4e:8f:9f:bc:0f: df:9f:de:7e:78:84:2f:2c:d2:94:82:c8:7a:04:b4: 32:62:76:36:19:09:9b:18:c2:08:ec:56:42:7c:b2: cc:b5:54:ac:5e:33:c1:fa:0a:0d:14:af:56:a3:31: 06:93:22:b5:1b:8c:5d:dc:40:0d:83:4e:22:ef:f4: 51:41:89:f4:c9:a7:cf:8f:43:57:a5:de:62:8a:01: 0b:89:1c:d8:7d:54:6e:77:8e:17:e4:5f:16:cc:55: 72:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:04:DF:DE:AF:A3:62:AA:96:04:44:EB:52:12:2F:62:4F:63:9D:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d285b59d-1287-3746-b9b4-a47cd782f3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:e0:22:f9:d7:54:6f:01:85:9e:d8:19:3b:53:a9:ba:74:a6: e3:5c:50:22:0e:e5:11:1c:68:b5:54:fa:96:3b:e6:08:d6:e9: a6:c9:66:2f:74:20:4f:44:99:fa:fe:0e:cf:4b:e1:3b:af:f4: a5:92:06:ee:d3:3e:e3:d9:94:35:9e:12:40:f2:0a:75:17:43: e4:38:b8:f7:a1:2c:76:d3:db:70:d3:4f:0e:a8:9d:f2:d9:62: 90:c8:0f:c0:4f:ba:49:28:4f:a6:e7:ca:13:98:fa:3c:04:fc: 9e:20:e1:34:fb:6b:ac:23:65:52:39:3c:a4:f8:c2:ef:dd:79: 45:8f:26:65:89:88:82:fd:b3:71:75:d9:1b:38:f9:01:62:2d: d3:f1:76:82:b4:a7:ae:cc:83:64:66:0e:a4:94:ec:4d:58:40: d4:fd:4a:47:dd:ca:da:0d:84:ff:42:09:44:d6:81:08:1a:fc: 3a:b0:b1:76:c6:18:9c:54:7d:3c:c7:19:cf:c3:27:47:bd:c8: b5:76:86:17:2d:7a:58:32:e5:70:08:17:16:4c:c7:39:28:b5: f8:46:d6:f6:9f:63:a5:a6:5f:8b:18:ca:24:cf:4e:b5:f4:bf: 7f:8f:94:5e:28:7f:b2:fe:40:14:a2:2b:31:04:30:ad:7e:c6: 22:79:93:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQuTVCA90jGIyFgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjQ2OTZmMTItYjk5OS00NjhlLTg0MjEtN2I2OWE0NTFmYjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApC9qakhCbQKNg9oFGDbAXJe0oM2CcoscIUot pLUzBMsNXBhzpCf+NrSECwALNjAza+CBPayeB/zD5Macymxfj9Tpx2nu3x+n4goc LFbn/dT7FobSd916qp2egbTBqrfXTHQFLyC7TPs4KJneVRXYsw8PDJMgiYc/RWhz QIbkEEcCq/LaPUBNDZKkJ7FoC9BaldKpk30KLmJAO4go98whTo+fvA/fn95+eIQv LNKUgsh6BLQyYnY2GQmbGMII7FZCfLLMtVSsXjPB+goNFK9WozEGkyK1G4xd3EAN g04i7/RRQYn0yafPj0NXpd5iigELiRzYfVRud44X5F8WzFVyXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQE396vo2KqlgRE61ISL2JPY50hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDI4NWI1OWQtMTI4Ny0z NzQ2LWI5YjQtYTQ3Y2Q3ODJmM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrgIvnXVG8BhZ7YGTtTqbp0puNcUCIO5REcaLVU+pY75gjW6abJZi90 IE9Emfr+Ds9L4Tuv9KWSBu7TPuPZlDWeEkDyCnUXQ+Q4uPehLHbT23DTTw6onfLZ YpDID8BPukkoT6bnyhOY+jwE/J4g4TT7a6wjZVI5PKT4wu/deUWPJmWJiIL9s3F1 2Rs4+QFiLdPxdoK0p67Mg2RmDqSU7E1YQNT9SkfdytoNhP9CCUTWgQga/DqwsXbG GJxUfTzHGc/DJ0e9yLV2hhctelgy5XAIFxZMxzkotfhG1vafY6WmX4sYyiTPTrX0 v3+PlF4of7L+QBSiKzEEMK1+xiJ5k1s= -----END CERTIFICATE-----Generated at Sat Jul 26 11:38:16 2025 by rpki-client