$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa File: ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa (raw, json) Hash identifier: NCN+CR/m78i0ZOgM+PbJkXb3w5o1D1pk5B6W02XWT5M= Subject key identifier: B8:92:00:0D:FE:87:A2:7C:85:05:57:46:E4:68:35:BB:11:3E:7F:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA626D7021D56430998FC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:62:6d:70:21:d5:64:30:99:8f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=45c79d7c-8832-47d8-a9d5-94ca23eaffd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cb:cb:a0:88:08:2e:f2:41:67:02:a5:8c:52: 26:98:45:bf:55:40:99:b4:f8:59:74:ad:75:53:9e: 74:b5:9b:fe:86:0b:de:71:5e:23:b5:ad:eb:51:91: 05:51:32:f3:61:ca:c1:fd:36:57:ae:ec:1a:b8:25: 26:9a:4a:dc:90:37:4c:79:3c:bf:4d:96:b5:0e:bb: 8e:30:fb:67:7f:41:8f:01:1b:08:35:21:e9:32:c3: 3d:35:6c:98:0a:a7:6c:47:b6:fb:51:82:41:22:ff: 87:4d:29:b6:15:b5:7e:ef:35:e4:ec:74:41:1c:a9: 82:7c:68:b3:7b:ef:53:0a:64:76:60:9b:b1:37:7e: 28:99:a1:82:43:0e:c9:69:0d:b0:55:74:e9:9c:65: c2:2a:58:ad:e7:95:01:ae:67:69:d8:fc:f5:3c:46: a0:f5:39:10:2d:76:86:a2:5d:db:06:e0:2d:e2:14: ad:a2:eb:37:ea:35:9c:e6:62:cc:68:32:ee:a3:80: 8e:a8:2b:08:61:9c:d4:0f:3d:5a:8e:b0:44:5a:ba: 3b:e1:b7:75:5c:54:ce:21:56:f2:b9:09:ee:e1:e3: 93:87:44:e8:34:9c:e7:04:e4:0f:08:23:1b:93:8a: c3:8b:ab:de:10:7c:97:d1:f2:e9:c2:70:6a:aa:81: 3e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:92:00:0D:FE:87:A2:7C:85:05:57:46:E4:68:35:BB:11:3E:7F:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:90:f7:b6:de:c4:6a:ea:9a:25:3b:e1:2a:e2:50:62:b7:2b: 79:a3:7d:26:30:99:c0:f7:77:69:25:7e:20:8e:f5:69:a6:aa: d7:d4:3e:e3:90:75:94:c9:2c:a2:fd:07:3c:22:fc:c4:05:8e: 7a:7d:b4:25:6c:b2:99:c2:ce:33:a4:76:a5:05:78:9a:86:99: 3f:63:e2:43:0a:71:d6:b0:50:d1:aa:11:d9:20:96:29:c6:4e: 3a:92:35:85:f1:72:eb:c0:6e:5a:ca:13:c4:78:ec:bd:81:18: 16:6b:d2:75:cf:8c:44:be:f1:6f:5f:a6:5c:9a:bb:e4:6c:6e: 72:3e:5e:f2:11:c9:a1:3a:e6:4a:5f:f8:a2:6b:30:33:4e:fc: 19:1e:37:46:83:85:41:a1:89:46:aa:ec:5c:57:cf:c4:a0:21: 5e:8b:f7:91:2f:48:e5:5c:01:91:b8:6f:29:cb:94:8d:f9:f9: 84:1e:e6:91:10:50:17:4d:33:ec:85:4a:b5:51:6a:51:59:29: 44:7c:a2:01:8e:fa:fd:79:76:8e:62:29:89:e9:bb:3e:3f:22: 87:83:81:59:a1:02:ea:8d:ad:3d:be:47:4c:24:37:73:c0:e7: a2:be:c8:f1:c3:7b:11:4a:70:df:e6:05:15:69:4a:ac:5b:50: b9:87:72:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumJtcCHVZDCZj8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NDVjNzlkN2MtODgzMi00N2Q4LWE5ZDUtOTRjYTIzZWFmZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosvLoIgILvJBZwKljFImmEW/VUCZtPhZdK11 U550tZv+hgvecV4jta3rUZEFUTLzYcrB/TZXruwauCUmmkrckDdMeTy/TZa1DruO MPtnf0GPARsINSHpMsM9NWyYCqdsR7b7UYJBIv+HTSm2FbV+7zXk7HRBHKmCfGiz e+9TCmR2YJuxN34omaGCQw7JaQ2wVXTpnGXCKlit55UBrmdp2Pz1PEag9TkQLXaG ol3bBuAt4hStous36jWc5mLMaDLuo4COqCsIYZzUDz1ajrBEWro74bd1XFTOIVby uQnu4eOTh0ToNJznBOQPCCMbk4rDi6veEHyX0fLpwnBqqoE+iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiSAA3+h6J8hQVXRuRoNbsRPn9eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU0YmE4NjctYjA3Ny0z ZjU0LWE4YWYtOWZiMTJmZTdlOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ2Q97bexGrqmiU74SriUGK3K3mjfSYwmcD3d2klfiCO9WmmqtfUPuOQ dZTJLKL9Bzwi/MQFjnp9tCVsspnCzjOkdqUFeJqGmT9j4kMKcdawUNGqEdkglinG TjqSNYXxcuvAblrKE8R47L2BGBZr0nXPjES+8W9fplyau+RsbnI+XvIRyaE65kpf +KJrMDNO/BkeN0aDhUGhiUaq7FxXz8SgIV6L95EvSOVcAZG4bynLlI35+YQe5pEQ UBdNM+yFSrVRalFZKUR8ogGO+v15do5iKYnpuz4/IoeDgVmhAuqNrT2+R0wkN3PA 56K+yPHDexFKcN/mBRVpSqxbULmHcmo= -----END CERTIFICATE-----Generated at Fri Jun 6 17:48:31 2025 by rpki-client