$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa File: d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa (raw, json) Hash identifier: pXbfBE0NSMZmFdogghd0lHREtXKfoTlx8Dq0VNbNa1E= Subject key identifier: F5:7A:62:4B:06:27:65:A3:BE:BF:F1:0C:2C:0C:ED:46:3E:BC:97:27 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84110CFFA8A8AEC4E4572400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:0c:ff:a8:a8:ae:c4:e4:57:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=985adb12-df00-40cf-843d-109b7e02e8a9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:b4:19:c4:5f:9f:f6:d7:45:bb:63:73:85:41: 3d:e0:e5:0b:93:27:c6:54:0b:8c:4f:66:ae:60:ba: 41:f6:41:96:ea:56:ac:73:c9:eb:ab:50:33:4c:0f: 42:a7:bd:92:65:f1:fe:45:4a:f9:e1:7b:5b:0a:66: c4:d3:fd:54:6c:45:9d:86:4d:25:b8:3f:dd:cb:6b: 17:ea:99:36:8e:9e:51:31:04:46:2b:21:0c:00:8a: 19:e5:03:58:40:22:8d:47:d5:99:9b:04:ba:b7:f6: b7:73:69:4c:48:df:62:8f:ed:f9:11:95:cc:5b:51: 0b:72:9d:7c:47:22:52:bd:a3:92:18:cb:f5:2b:e1: e9:32:f8:b7:63:3b:55:8f:55:92:aa:ea:67:07:9b: 11:3e:b6:c0:07:c2:0d:a7:34:77:57:f7:e9:09:a1: e7:67:68:f6:5d:b1:87:38:69:95:dc:30:a9:cf:00: ab:0c:43:68:d3:84:2d:40:ae:11:03:24:62:bb:15: f8:77:ef:b7:30:14:ce:fb:11:f7:4e:8a:77:b4:52: 3b:55:46:d4:9e:c0:fb:d2:b2:38:7d:3b:19:b0:83: 4c:2a:d7:2d:09:69:83:d4:27:40:dc:bb:e0:0c:ab: ba:47:b5:93:5e:bd:63:be:86:7b:14:51:d1:50:5e: ed:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:7A:62:4B:06:27:65:A3:BE:BF:F1:0C:2C:0C:ED:46:3E:BC:97:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:e4:51:c5:48:94:c7:5a:ed:ec:0f:34:af:4c:79:ca:0c:20: 7c:a5:51:68:7b:e9:46:ec:8c:e7:de:9f:44:40:1b:ed:24:9e: 72:c2:82:c7:4b:df:93:ba:2a:99:60:a9:c1:bc:bb:40:29:7d: 76:d3:95:12:b1:0c:29:33:0c:c9:87:e1:17:c4:da:d8:11:d3: 7a:b6:65:65:6c:81:a9:ca:a6:4a:f3:47:43:96:4b:71:5b:7f: 96:9c:87:28:78:7a:02:ca:3c:db:b3:30:b5:4f:7e:e7:1f:f3: 91:9a:0a:95:af:7e:a4:8a:c6:fd:05:8e:32:0c:ea:c9:88:29: 7c:e3:7d:4e:37:52:74:0f:54:a8:07:de:5e:ef:b7:b3:51:57: 21:b4:0e:24:2b:b9:f2:ec:86:2e:10:55:1a:68:00:84:80:fb: 77:9f:38:f8:83:84:4a:de:a8:a9:28:9e:c3:06:40:f9:91:bd: fe:a3:2a:d5:da:92:5b:62:10:bc:dd:ac:35:90:4f:d7:b5:2c: e2:00:2c:c7:4c:c5:fd:69:df:f6:4e:7a:98:bf:a9:fc:43:25: f3:b3:56:b6:7c:64:0f:87:8a:5c:f4:8d:e0:33:39:1a:65:d1: 40:f5:e9:5b:d1:73:d0:1f:ca:42:8a:02:2e:59:b2:d7:7d:78: 28:97:74:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQz/qKiuxORXJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTg1YWRiMTItZGYwMC00MGNmLTg0M2QtMTA5YjdlMDJlOGE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorQZxF+f9tdFu2NzhUE94OULkyfGVAuMT2au YLpB9kGW6lasc8nrq1AzTA9Cp72SZfH+RUr54XtbCmbE0/1UbEWdhk0luD/dy2sX 6pk2jp5RMQRGKyEMAIoZ5QNYQCKNR9WZmwS6t/a3c2lMSN9ij+35EZXMW1ELcp18 RyJSvaOSGMv1K+HpMvi3YztVj1WSqupnB5sRPrbAB8INpzR3V/fpCaHnZ2j2XbGH OGmV3DCpzwCrDENo04QtQK4RAyRiuxX4d++3MBTO+xH3Top3tFI7VUbUnsD70rI4 fTsZsINMKtctCWmD1CdA3LvgDKu6R7WTXr1jvoZ7FFHRUF7t/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPV6YksGJ2Wjvr/xDCwM7UY+vJcnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDNmY2JkZGMtYmY5ZC0z MjBmLTlkNjUtOWExZWMwNjBlZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGLkUcVIlMda7ewPNK9MecoMIHylUWh76UbsjOfen0RAG+0knnLCgsdL 35O6KplgqcG8u0ApfXbTlRKxDCkzDMmH4RfE2tgR03q2ZWVsganKpkrzR0OWS3Fb f5achyh4egLKPNuzMLVPfucf85GaCpWvfqSKxv0FjjIM6smIKXzjfU43UnQPVKgH 3l7vt7NRVyG0DiQrufLshi4QVRpoAISA+3efOPiDhEreqKkonsMGQPmRvf6jKtXa kltiELzdrDWQT9e1LOIALMdMxf1p3/ZOepi/qfxDJfOzVrZ8ZA+Hilz0jeAzORpl 0UD16VvRc9AfykKKAi5Zstd9eCiXdFY= -----END CERTIFICATE-----Generated at Sat Jul 26 11:11:12 2025 by rpki-client