$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa File: 04e49c50-9249-3f9c-afea-d6ba87234992.roa (raw, json) Hash identifier: 5hkmnqHyIByMMkjNKzpd6stqrtkStKAKyKXuX144PWU= Subject key identifier: 6B:37:3B:C4:A5:0D:31:37:31:00:0B:C2:45:79:5A:4B:17:AD:D0:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FC03AB951B7FC0212000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fc:03:ab:95:1b:7f:c0:21:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f8b02eef-45cc-46f6-97d5-8d724924a05a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:82:df:8a:eb:a5:77:2b:05:04:7d:ef:6f:3d: 37:93:27:16:23:2c:3e:a7:ad:91:1d:30:ee:5d:fc: 25:22:c1:b3:9a:22:8a:62:e8:04:93:f7:98:2d:38: 4a:16:27:93:5d:6b:04:44:06:21:d1:08:7c:a0:7f: 00:25:2e:5e:e1:e4:ae:fc:84:5f:1b:a0:a7:c8:f6: 76:4a:67:b2:86:aa:cd:d3:f4:a5:ed:d9:2c:31:fd: 98:92:32:91:e6:e1:4d:1a:06:a9:97:76:cc:a6:5d: 5b:26:51:49:78:19:4e:e6:4c:82:07:8e:d5:43:dc: 2a:68:05:ad:5b:6f:51:bc:49:07:6f:90:4f:6b:5b: b6:14:af:1e:b0:a0:69:92:07:0b:69:78:2f:aa:c2: 87:f0:21:a0:61:8e:fd:56:91:ba:de:28:17:f2:7f: 81:55:26:11:9a:91:97:25:1e:72:86:49:9c:f3:1f: 5f:c2:9d:e0:e8:eb:ce:69:c7:3e:58:ed:5d:21:59: af:c2:3a:42:d1:ea:05:fe:ba:89:29:07:6c:5c:71: 06:94:24:57:41:7e:99:f7:db:dc:aa:07:5c:d3:39: 79:69:b7:b5:5e:6f:69:96:33:77:0b:8c:ab:be:16: 34:93:2d:dd:6a:5b:e8:6d:0a:77:f0:61:72:1d:21: 85:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:37:3B:C4:A5:0D:31:37:31:00:0B:C2:45:79:5A:4B:17:AD:D0:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:ac:17:99:cd:29:c5:c3:a8:85:ac:6a:0f:08:4d:85:40:ea: b6:83:b6:bc:b3:f5:9d:99:2c:5b:bb:50:95:c0:8b:ca:84:ec: e3:9d:ea:e7:24:00:fd:28:89:fc:ac:51:08:88:70:f1:00:d1: 61:40:a2:f0:89:c1:c3:e4:28:83:8c:7f:ec:fe:88:a5:93:bc: 46:b0:d1:18:eb:f6:01:01:5b:26:d9:80:bd:64:67:e1:60:90: e3:a1:77:5c:23:c3:ef:5f:5b:ae:d3:0c:96:23:9b:8f:ab:29: ba:ac:c6:42:e9:d8:44:08:54:6c:11:ef:7c:31:8b:df:d9:ad: 2a:b8:ee:14:42:bd:84:7c:64:88:2e:31:5f:3b:ce:8a:90:d2: b0:b7:1f:7c:d2:5a:a8:a3:4c:d0:ad:ee:d9:3b:ae:e1:1a:34: 72:79:78:61:09:f8:f8:e0:a6:a5:3b:71:15:cf:40:88:4e:5f: 9a:e8:b7:e5:26:8b:2b:ef:62:9c:42:aa:64:a6:81:58:ed:a5: 17:a9:0f:6f:e6:f8:f6:04:6a:e8:c7:dd:2e:1a:c3:0b:bf:6f: d4:4a:2b:a6:30:c3:32:70:39:aa:01:07:86:88:29:50:d4:ee: f8:e4:50:a8:65:5b:37:56:ac:71:d3:fa:73:1f:65:17:15:b3: 70:b4:6a:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfwDq5Ubf8AhIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjhiMDJlZWYtNDVjYy00NmY2LTk3ZDUtOGQ3MjQ5MjRhMDVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzYLfiuuldysFBH3vbz03kycWIyw+p62RHTDu XfwlIsGzmiKKYugEk/eYLThKFieTXWsERAYh0Qh8oH8AJS5e4eSu/IRfG6CnyPZ2 SmeyhqrN0/Sl7dksMf2YkjKR5uFNGgapl3bMpl1bJlFJeBlO5kyCB47VQ9wqaAWt W29RvEkHb5BPa1u2FK8esKBpkgcLaXgvqsKH8CGgYY79VpG63igX8n+BVSYRmpGX JR5yhkmc8x9fwp3g6OvOacc+WO1dIVmvwjpC0eoF/rqJKQdsXHEGlCRXQX6Z99vc qgdc0zl5abe1Xm9pljN3C4yrvhY0ky3dalvobQp38GFyHSGFsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGs3O8SlDTE3MQALwkV5WksXrdAhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRlNDljNTAtOTI0OS0z ZjljLWFmZWEtZDZiYTg3MjM0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGsF5nNKcXDqIWsag8ITYVA6raDtryz9Z2ZLFu7UJXAi8qE7OOd6uck AP0oifysUQiIcPEA0WFAovCJwcPkKIOMf+z+iKWTvEaw0Rjr9gEBWybZgL1kZ+Fg kOOhd1wjw+9fW67TDJYjm4+rKbqsxkLp2EQIVGwR73wxi9/ZrSq47hRCvYR8ZIgu MV87zoqQ0rC3H3zSWqijTNCt7tk7ruEaNHJ5eGEJ+PjgpqU7cRXPQIhOX5rot+Um iyvvYpxCqmSmgVjtpRepD2/m+PYEaujH3S4awwu/b9RKK6YwwzJwOaoBB4aIKVDU 7vjkUKhlWzdWrHHT+nMfZRcVs3C0avE= -----END CERTIFICATE-----Generated at Sat Jul 26 11:40:15 2025 by rpki-client