$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa File: f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa (raw, json) Hash identifier: /JEfUjuzkTY6Ke7Qs2wuEXJgb5Wp3kPghl39B8vRmPc= Subject key identifier: 85:F1:C7:BB:F2:76:D2:7D:E8:1A:FA:38:71:DF:A3:03:9E:9D:E3:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841107FF3582D9CFEE427500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:07:ff:35:82:d9:cf:ee:42:75:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1e779cdc-ad82-4b91-a95f-9492e6f7bec0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ce:b8:64:a4:af:d5:1e:39:70:d0:1a:ca:07: 76:89:dd:3f:65:3d:35:4b:71:44:85:e6:04:16:c3: 6c:b8:69:99:be:70:e3:fc:3b:c3:5c:2d:de:7f:8b: fa:81:a7:9a:da:26:1d:2e:3f:1e:03:29:74:cc:1f: 16:ed:11:91:e8:f4:9c:f4:44:39:1f:c6:3b:7b:9b: e5:1b:9b:f0:a4:d1:ad:f6:5c:23:a9:7c:30:81:1f: e1:54:48:bd:d9:cd:37:3a:e3:49:f0:6b:6a:39:18: 85:d5:00:16:a3:5d:70:45:6f:c3:a2:2b:a2:95:4f: 6d:41:f5:a3:ac:73:d2:74:0b:5f:6a:18:8e:f3:ed: d8:ec:ef:5e:04:e1:6e:0c:45:0e:5a:66:85:05:78: d9:ba:71:d1:00:75:df:45:b7:7d:f8:02:9f:7a:90: d5:a0:9e:06:8e:a5:96:14:5d:c2:f7:91:14:21:ac: b9:51:5f:d5:4d:ed:fd:aa:74:17:88:8f:07:b4:d5: 4f:6a:81:61:85:53:12:bb:bb:42:52:9f:38:68:1e: 83:ae:5a:91:c8:5b:06:e2:1e:87:48:f4:86:4f:55: 22:bd:71:92:06:c6:cb:ba:45:01:35:37:db:a9:77: c6:d5:53:06:5c:22:0b:51:22:18:62:46:c5:24:60: b7:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:F1:C7:BB:F2:76:D2:7D:E8:1A:FA:38:71:DF:A3:03:9E:9D:E3:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:4e:40:10:87:83:5a:5a:f7:8f:28:46:7d:cf:66:51:1c:82: b2:b6:1b:fe:98:9f:1a:2b:4d:fc:98:3e:01:e5:8f:83:00:87: a7:66:38:53:aa:6a:c2:7d:74:28:53:7b:81:f6:31:b0:ef:86: 4a:d9:b3:4d:0f:6b:33:54:3b:23:10:be:55:b8:25:bb:d8:81: d8:21:46:e5:1f:38:6b:07:aa:86:33:7b:98:96:c4:55:1f:2d: 4f:22:f3:05:b0:40:51:55:f1:a5:9e:57:6e:25:29:a5:c6:9f: 12:da:33:e1:d6:88:7a:88:4d:a2:e1:4a:06:8e:69:21:95:65: 62:ef:b8:70:9d:97:ca:51:10:ac:2e:1e:2e:84:59:21:c1:72: fb:7c:f6:dc:f0:73:4d:f4:69:1e:ce:70:86:09:cf:cd:36:5b: b3:c8:e1:dc:84:fe:e1:f1:04:77:38:24:b3:a6:e3:8f:e2:c2: a2:95:ba:0f:e2:e2:fa:f6:e5:c2:10:a9:7b:c8:98:40:af:ee: 3c:ac:7f:43:7e:05:2c:c3:46:9a:bf:6a:0b:3c:50:18:fe:83: 57:85:75:1a:84:dc:67:02:84:3b:20:5f:f5:60:8c:a1:62:5e: 29:eb:07:45:e1:5d:81:76:eb:2a:a7:b7:60:34:f5:c3:1a:d1: 57:cf:34:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEQf/NYLZz+5CdQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWU3NzljZGMtYWQ4Mi00YjkxLWE5NWYtOTQ5MmU2ZjdiZWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc64ZKSv1R45cNAaygd2id0/ZT01S3FEheYE FsNsuGmZvnDj/DvDXC3ef4v6gaea2iYdLj8eAyl0zB8W7RGR6PSc9EQ5H8Y7e5vl G5vwpNGt9lwjqXwwgR/hVEi92c03OuNJ8GtqORiF1QAWo11wRW/DoiuilU9tQfWj rHPSdAtfahiO8+3Y7O9eBOFuDEUOWmaFBXjZunHRAHXfRbd9+AKfepDVoJ4GjqWW FF3C95EUIay5UV/VTe39qnQXiI8HtNVPaoFhhVMSu7tCUp84aB6DrlqRyFsG4h6H SPSGT1UivXGSBsbLukUBNTfbqXfG1VMGXCILUSIYYkbFJGC3NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXxx7vydtJ96Br6OHHfowOeneMJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjYxOTU5YTEtNmFmOC0z ZDFjLTljNzktM2QxOTI0ZmI5YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMROQBCHg1pa948oRn3PZlEcgrK2G/6YnxorTfyYPgHlj4MAh6dmOFOq asJ9dChTe4H2MbDvhkrZs00PazNUOyMQvlW4JbvYgdghRuUfOGsHqoYze5iWxFUf LU8i8wWwQFFV8aWeV24lKaXGnxLaM+HWiHqITaLhSgaOaSGVZWLvuHCdl8pREKwu Hi6EWSHBcvt89tzwc030aR7OcIYJz802W7PI4dyE/uHxBHc4JLOm44/iwqKVug/i 4vr25cIQqXvImECv7jysf0N+BSzDRpq/ags8UBj+g1eFdRqE3GcChDsgX/VgjKFi XinrB0XhXYF26yqnt2A09cMa0VfPNLQ= -----END CERTIFICATE-----Generated at Sat Jul 26 11:07:00 2025 by rpki-client