$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa File: c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa (raw, json) Hash identifier: 4dHd//mHUH3WtEzhxr/AiYQ3ywF+NY31P46I+Hdt8NE= Subject key identifier: D6:26:24:A1:30:A6:B7:35:7C:62:2F:DF:9C:F1:96:81:1F:83:D4:45 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F43285849A4BA605BCF3E33F50F57BD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 7155 IP address blocks: 72.173.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:60:5b:cf:3e:33:f5:0f:57:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=84d39f15-4061-42f0-a323-a502e5c3ae68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ed:11:8a:ed:d5:8e:58:20:fa:d1:2e:e2:5b: 1c:fe:a2:ac:63:46:b7:be:22:8a:9c:e6:19:a4:77: 12:bd:f2:5b:43:69:26:93:e8:e1:ea:bb:fe:96:bc: 3a:21:e3:11:d7:ba:86:9f:df:27:2d:62:9f:cb:0c: a9:a3:a1:aa:f0:20:a6:e9:5e:a2:01:f8:a7:cd:09: 30:70:91:7c:36:60:70:ef:e3:c1:8c:6e:b2:9e:39: 83:a1:4f:c3:57:85:bf:d6:ef:00:e9:94:ba:40:fd: c1:b9:89:8d:ad:76:f4:8c:f8:70:ce:27:9d:60:29: 8b:94:a2:c7:82:84:1e:65:50:fd:01:8d:bf:88:98: 38:25:b9:62:11:46:1a:0f:1a:42:36:99:66:c8:5b: 4f:cd:24:47:da:e0:19:47:61:86:82:23:46:91:27: b9:e9:b9:b5:96:d2:70:4c:a1:45:5a:e5:f9:f8:e0: 83:1c:80:16:75:72:a7:36:36:4b:ae:64:2d:a4:8c: 97:70:53:7f:c8:7a:4e:35:5e:fa:58:45:44:20:ea: a2:ee:d9:ea:d3:2f:83:4c:09:a2:6a:e6:17:49:53: bb:66:0e:04:0a:14:3e:a2:38:cc:c7:30:51:59:2b: 3a:27:18:6e:c3:e2:87:47:cf:f5:a6:65:d5:d7:02: 39:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:26:24:A1:30:A6:B7:35:7C:62:2F:DF:9C:F1:96:81:1F:83:D4:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:47:53:7a:71:3b:f2:34:93:e7:c0:34:5b:16:8a:71:9c:96: 6b:ad:a4:3a:0a:59:e3:94:f0:53:7e:54:27:58:2c:44:fc:d9: 02:9c:30:a9:77:47:dd:1f:82:5c:9b:e3:29:c7:fb:4b:06:2f: c2:0b:d5:af:7e:24:12:49:d1:d3:14:44:b7:c2:cf:ec:de:cd: 6c:ca:00:cc:a7:59:da:a7:68:ca:87:33:48:f4:42:5b:26:78: 0d:09:a0:0c:96:8a:6e:5a:ab:16:16:82:d8:b4:47:8b:75:51: 34:90:48:70:4f:86:f7:7a:fe:3a:d2:a4:44:79:f6:ac:61:72: 15:93:86:8c:24:19:3f:09:38:5c:97:56:83:97:fb:a6:c5:49: 2d:8c:f3:4f:bb:5e:cc:47:08:a5:cb:3c:ed:db:21:e7:33:85: 09:94:5e:1e:83:b8:1a:9e:b6:3e:b0:ef:5d:ff:fd:2e:77:8c: da:26:e3:5a:d9:d2:a7:bd:24:be:e6:f2:32:75:8c:dd:83:5c: 30:4e:d2:b6:05:bc:e3:cf:4c:4c:8f:05:13:b3:65:f4:81:c0: 59:08:11:31:f1:92:10:12:07:2d:54:44:cc:01:a6:cd:34:66: 70:17:6e:8a:e9:d8:6c:40:cb:b2:74:fb:08:1d:ac:0f:9c:bb: fc:a4:25:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkumBbzz4z9Q9XvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ODRkMzlmMTUtNDA2MS00MmYwLWEzMjMtYTUwMmU1YzNhZTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuu0Riu3Vjlgg+tEu4lsc/qKsY0a3viKKnOYZ pHcSvfJbQ2kmk+jh6rv+lrw6IeMR17qGn98nLWKfywypo6Gq8CCm6V6iAfinzQkw cJF8NmBw7+PBjG6ynjmDoU/DV4W/1u8A6ZS6QP3BuYmNrXb0jPhwziedYCmLlKLH goQeZVD9AY2/iJg4JbliEUYaDxpCNplmyFtPzSRH2uAZR2GGgiNGkSe56bm1ltJw TKFFWuX5+OCDHIAWdXKnNjZLrmQtpIyXcFN/yHpONV76WEVEIOqi7tnq0y+DTAmi auYXSVO7Zg4EChQ+ojjMxzBRWSs6Jxhuw+KHR8/1pmXV1wI57QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNYmJKEwprc1fGIv35zxloEfg9RFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhYTNkZWUtYmMzMS0z MmEyLThiODEtOTYwNDc5OGU3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9HU3pxO/I0k+fANFsWinGclmutpDoKWeOU8FN+VCdYLET82QKcMKl3 R90fglyb4ynH+0sGL8IL1a9+JBJJ0dMURLfCz+zezWzKAMynWdqnaMqHM0j0Qlsm eA0JoAyWim5aqxYWgti0R4t1UTSQSHBPhvd6/jrSpER59qxhchWThowkGT8JOFyX VoOX+6bFSS2M80+7XsxHCKXLPO3bIeczhQmUXh6DuBqetj6w713//S53jNom41rZ 0qe9JL7m8jJ1jN2DXDBO0rYFvOPPTEyPBROzZfSBwFkIETHxkhASBy1URMwBps00 ZnAXborp2GxAy7J0+wgdrA+cu/ykJS0= -----END CERTIFICATE-----Generated at Sat Jun 7 04:17:36 2025 by rpki-client