$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3bd0ad8-b39f-3c35-8e07-523706a48b7d.roa File: f3bd0ad8-b39f-3c35-8e07-523706a48b7d.roa (raw, json) Hash identifier: UMcrJYDvGUHvIDXkRlFct8COntqLMlO4gdsGTeTIkXU= Subject key identifier: 5D:17:72:96:84:5C:D6:49:D1:56:DC:39:0D:87:5D:BD:BC:C4:31:D1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B1BFA42A6C4D8BF03000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3bd0ad8-b39f-3c35-8e07-523706a48b7d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b1:bf:a4:2a:6c:4d:8b:f0:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=4d83c406-a259-4f00-8785-5d07b6256088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:50:eb:a5:16:34:8c:ff:d9:18:5b:5d:59:6b: 87:78:ce:4c:e8:06:0d:49:ac:68:c0:ca:20:d8:d7: 1c:36:63:3b:03:2c:d7:cf:ec:ff:8c:09:aa:66:3e: 78:d3:0d:80:88:cd:cc:ff:54:74:79:cd:0e:39:cf: 64:ac:31:9b:5d:b8:6a:8b:4f:45:1d:e5:97:d7:0a: b6:6d:9b:9e:98:9b:f5:ca:e2:af:0a:db:93:bf:25: 07:f5:87:52:48:a2:10:8a:c6:17:97:f8:41:6c:65: a9:01:01:d2:a6:61:24:3a:8c:c1:af:e4:15:7f:fe: 0b:0d:57:0c:dc:74:77:0f:be:e9:93:b7:c4:64:07: fc:cc:5c:86:dd:18:b7:f6:f0:dc:ec:7f:03:ad:51: 74:e9:f6:58:ca:3a:80:2d:22:76:3f:89:29:6e:47: 00:02:eb:4b:40:cf:21:b4:f5:0c:ce:04:7a:e8:ba: 8e:9e:7c:16:f4:4b:35:19:be:34:a4:c3:29:fe:f5: 10:6d:79:29:89:25:0e:09:8d:11:a8:84:71:1a:1f: f4:23:2c:e4:ca:9a:7c:d2:7f:fa:26:4e:ce:c4:a7: bd:b3:91:ba:ca:18:e5:75:7c:1a:d5:90:4c:89:e2: ca:41:d3:00:a6:61:25:10:ed:99:14:f1:69:07:71: 01:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:17:72:96:84:5C:D6:49:D1:56:DC:39:0D:87:5D:BD:BC:C4:31:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f3bd0ad8-b39f-3c35-8e07-523706a48b7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:16:1b:97:dd:8a:32:c1:f5:df:29:78:4c:15:59:6b:50:6a: f0:3f:25:d8:17:4c:4d:54:93:1e:d7:5a:3e:31:b7:be:56:68: ef:2d:aa:3f:21:d8:86:cf:70:fc:c7:3e:c5:2b:53:00:04:e6: 59:dc:d4:f8:e3:57:a4:ca:d7:6c:39:78:91:a1:b5:b5:2d:d3: e4:bf:29:6f:06:ed:dd:6e:a0:c8:64:85:67:ef:34:4b:0f:65: bc:a5:c0:10:fb:72:a4:d8:f0:a0:84:7e:34:16:6b:19:88:dc: cb:bf:3d:dd:d4:fa:39:a7:7d:03:48:dd:a5:79:05:0e:fb:81: af:c4:09:b4:0d:57:59:9f:65:9a:52:5e:bd:65:c8:78:32:a7: 7c:d2:95:73:de:fb:7d:84:d0:ce:f3:10:ed:fa:f3:40:ed:b1: 3a:dd:e7:fa:e0:18:4a:d9:78:a7:2c:29:60:f9:e3:82:de:6e: 59:94:59:ce:30:3c:3a:5c:de:f4:4a:60:71:d7:77:f1:21:60: ca:f0:d8:7e:f0:57:96:d3:06:a9:38:36:d7:ca:20:67:cd:16: 34:82:9c:ec:d0:ee:c5:2d:77:29:cf:65:8c:fb:a2:47:65:16: 4c:4f:82:aa:41:8e:ba:1f:2e:de:34:36:44:14:a1:8f:e1:63: 92:e9:bc:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbG/pCpsTYvwMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NGQ4M2M0MDYtYTI1OS00ZjAwLTg3ODUtNWQwN2I2MjU2MDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1DrpRY0jP/ZGFtdWWuHeM5M6AYNSaxowMog 2NccNmM7AyzXz+z/jAmqZj540w2AiM3M/1R0ec0OOc9krDGbXbhqi09FHeWX1wq2 bZuemJv1yuKvCtuTvyUH9YdSSKIQisYXl/hBbGWpAQHSpmEkOozBr+QVf/4LDVcM 3HR3D77pk7fEZAf8zFyG3Ri39vDc7H8DrVF06fZYyjqALSJ2P4kpbkcAAutLQM8h tPUMzgR66LqOnnwW9Es1Gb40pMMp/vUQbXkpiSUOCY0RqIRxGh/0Iyzkypp80n/6 Jk7OxKe9s5G6yhjldXwa1ZBMieLKQdMApmElEO2ZFPFpB3EBGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF0XcpaEXNZJ0VbcOQ2HXb28xDHRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjNiZDBhZDgtYjM5Zi0z YzM1LThlMDctNTIzNzA2YTQ4YjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFAWG5fdijLB9d8peEwVWWtQavA/JdgXTE1Ukx7XWj4xt75WaO8tqj8h 2IbPcPzHPsUrUwAE5lnc1PjjV6TK12w5eJGhtbUt0+S/KW8G7d1uoMhkhWfvNEsP ZbylwBD7cqTY8KCEfjQWaxmI3Mu/Pd3U+jmnfQNI3aV5BQ77ga/ECbQNV1mfZZpS Xr1lyHgyp3zSlXPe+32E0M7zEO3680DtsTrd5/rgGErZeKcsKWD544LeblmUWc4w PDpc3vRKYHHXd/EhYMrw2H7wV5bTBqk4NtfKIGfNFjSCnOzQ7sUtdynPZYz7okdl FkxPgqpBjrofLt40NkQUoY/hY5LpvGo= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:54 2025 by rpki-client