$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa File: 048a0b86-d861-3443-858e-27449974ed53.roa (raw, json) Hash identifier: BWRc8uNOSWWxJRfVSW9ABG/j3oMRC+QtjITOGM5FySw= Subject key identifier: 2F:D3:54:0C:D8:38:B5:C1:04:B7:C6:ED:E4:93:1E:EE:9C:C0:F9:D3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8C70CE7225770EB802380880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa Signing time: Thu 17 Jul 2025 13:01:04 +0000 ROA not before: Thu 17 Jul 2025 13:01:04 +0000 ROA not after: Wed 15 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:8c:70:ce:72:25:77:0e:b8:02:38:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 17 13:01:04 2025 GMT Not After : Oct 15 13:01:04 2025 GMT Subject: CN=7c8b673c-0ebe-4a3f-acaf-6e686b91f395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:58:6e:1d:96:97:c6:c1:00:40:19:0f:49:27: f8:9f:a7:c6:96:b2:5a:d3:c4:e1:7e:aa:cb:9b:08: 33:0e:29:c0:43:67:ad:fc:e3:f3:0b:d8:ef:ec:b4: e6:94:c0:d4:16:54:4d:94:25:9f:e7:81:22:39:97: 20:3d:a1:91:5a:a3:0d:0b:97:5a:51:86:26:29:04: 98:2b:29:31:f9:2c:60:e7:a0:d1:ec:5b:70:b1:19: f6:9e:ee:4d:c3:00:cb:10:74:8e:59:ec:b3:84:f2: ed:57:79:7d:61:77:9d:59:b4:26:7f:77:b1:3a:95: 39:e2:03:ac:f3:f4:38:23:2b:7b:e1:65:09:5a:01: 07:fa:cf:c8:88:7f:d4:f4:da:be:32:ee:85:a8:a7: 9e:85:28:7b:ef:00:3e:41:e4:d2:44:bf:c4:f5:cb: 7c:4b:c9:15:ac:e5:41:9c:11:b6:5b:b5:eb:62:de: 8f:29:69:56:c4:d2:4d:48:90:20:d9:da:4a:5f:65: 97:d0:74:b3:08:23:da:ed:8f:bf:c9:92:33:48:ce: c7:ae:8e:04:6c:c7:46:eb:5f:e4:49:1d:dc:b2:7d: 2f:e9:53:57:fc:e8:42:71:f5:1c:09:bf:84:d7:98: 9c:0c:4c:11:32:e0:02:12:ac:45:8a:e3:6d:27:17: 7f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:D3:54:0C:D8:38:B5:C1:04:B7:C6:ED:E4:93:1E:EE:9C:C0:F9:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/048a0b86-d861-3443-858e-27449974ed53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:26:f4:bd:95:45:a8:66:5d:9b:90:b5:86:d6:c4:75:a7:cb: bb:56:c0:67:57:1a:5a:3f:d4:90:68:6d:ab:fc:03:d2:cd:65: 01:db:1e:97:55:55:c8:a7:f7:1e:3c:8f:ef:ea:30:90:70:fc: c9:d5:37:d5:59:45:83:01:37:76:9c:93:d4:09:d5:2f:50:a2: f1:31:ba:ef:9c:ba:38:db:d1:87:f3:34:4b:de:2b:b7:50:4a: 51:17:a4:51:a8:b1:d7:46:1c:d6:9e:35:d7:7c:52:12:e8:66: bc:a2:c1:fc:29:c9:c6:22:29:4e:15:70:bb:79:8a:09:19:8f: 78:1b:2e:83:33:8b:4d:3a:1e:d4:45:96:c7:ac:0d:eb:db:6a: 9f:3b:cd:aa:67:01:96:32:91:dc:34:1e:7f:12:24:47:b0:25: e3:62:f6:d4:b3:8e:ec:1b:12:7f:7b:5a:4b:70:62:dd:a1:31: 48:bf:48:1a:8a:b2:6b:f6:be:89:b7:28:22:f7:f9:4d:a0:88: 10:1d:77:a2:c9:2f:e0:86:30:b4:88:40:e1:24:ba:78:6d:c4: c8:8c:fd:d6:a1:d1:f5:4c:0d:50:6d:59:79:1a:43:01:4e:2f: 8c:65:8b:2a:cb:be:c0:f5:11:1d:61:48:b9:88:ba:bf:a2:50: 92:61:1d:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcM5yJXcOuAI4CIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk N2M4YjY3M2MtMGViZS00YTNmLWFjYWYtNmU2ODZiOTFmMzk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoVhuHZaXxsEAQBkPSSf4n6fGlrJa08ThfqrL mwgzDinAQ2et/OPzC9jv7LTmlMDUFlRNlCWf54EiOZcgPaGRWqMNC5daUYYmKQSY Kykx+Sxg56DR7FtwsRn2nu5NwwDLEHSOWeyzhPLtV3l9YXedWbQmf3exOpU54gOs 8/Q4Iyt74WUJWgEH+s/IiH/U9Nq+Mu6FqKeehSh77wA+QeTSRL/E9ct8S8kVrOVB nBG2W7XrYt6PKWlWxNJNSJAg2dpKX2WX0HSzCCPa7Y+/yZIzSM7Hro4EbMdG61/k SR3csn0v6VNX/OhCcfUcCb+E15icDEwRMuACEqxFiuNtJxd/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/TVAzYOLXBBLfG7eSTHu6cwPnTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDQ4YTBiODYtZDg2MS0z NDQzLTg1OGUtMjc0NDk5NzRlZDUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErPMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHcm9L2VRahmXZuQtYbWxHWny7tWwGdXGlo/1JBobav8A9LNZQHbHpdV Vcin9x48j+/qMJBw/MnVN9VZRYMBN3ack9QJ1S9QovExuu+cujjb0YfzNEveK7dQ SlEXpFGosddGHNaeNdd8UhLoZryiwfwpycYiKU4VcLt5igkZj3gbLoMzi006HtRF lsesDevbap87zapnAZYykdw0Hn8SJEewJeNi9tSzjuwbEn97WktwYt2hMUi/SBqK smv2vom3KCL3+U2giBAdd6LJL+CGMLSIQOEkunhtxMiM/dah0fVMDVBtWXkaQwFO L4xliyrLvsD1ER1hSLmIur+iUJJhHeI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:11:48 2025 by rpki-client