$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3518cf-4103-3e00-9292-664d179fd38b.roa File: ff3518cf-4103-3e00-9292-664d179fd38b.roa (raw, json) Hash identifier: MgsvBXjZPCVADaG9cAEfC6Dh3KG3cboYAFkf48ZkJYQ= Subject key identifier: F0:58:EB:E2:73:66:F6:F9:42:4F:1D:62:9F:17:85:F6:FA:EC:93:7C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B6F5C79FF205E0099000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3518cf-4103-3e00-9292-664d179fd38b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.193.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b6:f5:c7:9f:f2:05:e0:09:90:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=42cf243e-508c-49cb-a993-67319cd738b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:b7:10:07:a0:8a:73:53:f6:47:4d:43:e0:0e: 01:b8:75:49:34:31:08:fb:de:f0:3d:ab:26:54:63: 32:c3:dc:33:43:ed:49:78:37:4a:ea:9b:c5:22:1d: f9:19:dd:2e:ca:4c:74:d4:49:fe:44:81:22:26:f5: 9f:5b:64:f4:47:11:bd:aa:ee:35:19:c8:9b:70:7b: 32:b0:5c:ba:f1:41:9f:b9:2d:4c:be:a5:f8:1e:33: df:8b:df:7f:74:33:2e:ab:65:37:2e:b2:c6:5b:6b: ff:4c:c8:0d:fc:7a:c3:59:71:a3:7c:71:46:5a:ac: e4:3a:45:dc:d8:0c:72:b1:54:bf:65:04:16:1d:15: ca:fd:f7:bc:6b:26:5f:1f:db:c7:bf:7b:6f:ae:af: c6:e2:f2:4a:c3:25:ad:67:c4:4d:44:f9:f9:72:4d: bc:a5:a0:8d:10:66:85:f9:de:e4:24:47:f5:35:6c: d6:07:0f:b3:ed:11:db:27:76:50:89:b0:5e:c6:12: bc:53:1c:5d:6c:c0:a0:e3:87:0c:9a:57:70:a7:53: 38:a1:d2:5b:6d:a0:a6:78:10:fb:dd:60:77:88:e4: 35:ab:d7:ae:f5:85:4f:0f:0e:d3:87:66:37:9b:30: 3d:c4:45:76:bd:08:4e:28:73:9e:b9:ae:47:ea:6b: 41:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:58:EB:E2:73:66:F6:F9:42:4F:1D:62:9F:17:85:F6:FA:EC:93:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ff3518cf-4103-3e00-9292-664d179fd38b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.193.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:b4:f4:37:30:b6:e5:01:21:de:db:eb:2e:12:75:7e:83:5a: 3a:c4:9e:fe:73:d8:97:e4:a8:1d:17:19:23:e2:6c:fc:b5:ba: 92:ca:68:a3:30:eb:8a:71:4f:83:da:1f:3d:35:d6:d7:4a:0d: b7:b9:d3:8d:c7:ba:35:a3:05:48:b2:20:43:c8:c7:45:5b:96: 3c:e2:da:bd:80:1a:42:68:25:5d:72:75:38:a4:75:41:ec:94: da:d6:80:95:c2:64:32:3d:10:3f:7b:bb:11:ea:0b:40:cf:ab: f7:40:fe:78:c6:32:00:44:4a:68:7e:9f:c5:1c:40:df:80:3f: b9:18:4a:87:76:d2:20:98:28:bb:fe:f3:74:bd:1e:cb:f4:a2: 3e:b9:51:66:87:5c:96:ff:2f:0e:a7:e2:57:94:9a:55:6a:0e: bb:06:3d:8e:af:11:8d:2d:df:d1:5c:18:77:f8:39:66:73:cf: 10:b5:01:f9:da:62:fd:d4:c3:4a:b5:ff:9e:76:21:aa:96:a7: 07:3f:98:92:2b:d2:8f:a1:87:6a:0b:fa:73:c1:ca:e4:77:6e: d9:f2:71:f1:61:e3:c9:dc:6b:e5:60:12:ac:f6:ca:a0:fc:e9: 36:31:b9:fe:f2:79:1a:59:ac:65:fb:e9:d0:5a:88:a0:f0:0e: 22:ab:17:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbb1x5/yBeAJkAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDJjZjI0M2UtNTA4Yy00OWNiLWE5OTMtNjczMTljZDczOGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrcQB6CKc1P2R01D4A4BuHVJNDEI+97wPasm VGMyw9wzQ+1JeDdK6pvFIh35Gd0uykx01En+RIEiJvWfW2T0RxG9qu41GcibcHsy sFy68UGfuS1MvqX4HjPfi99/dDMuq2U3LrLGW2v/TMgN/HrDWXGjfHFGWqzkOkXc 2AxysVS/ZQQWHRXK/fe8ayZfH9vHv3tvrq/G4vJKwyWtZ8RNRPn5ck28paCNEGaF +d7kJEf1NWzWBw+z7RHbJ3ZQibBexhK8UxxdbMCg44cMmldwp1M4odJbbaCmeBD7 3WB3iOQ1q9eu9YVPDw7Th2Y3mzA9xEV2vQhOKHOeua5H6mtBqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBY6+JzZvb5Qk8dYp8Xhfb67JN8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmYzNTE4Y2YtNDEwMy0z ZTAwLTkyOTItNjY0ZDE3OWZkMzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm09DcwtuUBId7b6y4SdX6DWjrEnv5z2JfkqB0XGSPibPy1upLKaKMw 64pxT4PaHz011tdKDbe5043HujWjBUiyIEPIx0Vbljzi2r2AGkJoJV1ydTikdUHs lNrWgJXCZDI9ED97uxHqC0DPq/dA/njGMgBESmh+n8UcQN+AP7kYSod20iCYKLv+ 83S9Hsv0oj65UWaHXJb/Lw6n4leUmlVqDrsGPY6vEY0t39FcGHf4OWZzzxC1Afna Yv3Uw0q1/552IaqWpwc/mJIr0o+hh2oL+nPByuR3btnycfFh48nca+VgEqz2yqD8 6TYxuf7yeRpZrGX76dBaiKDwDiKrF+A= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:28 2025 by rpki-client