$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0cc38708-ad73-3eb7-bca4-5435df6bc233.roa File: 0cc38708-ad73-3eb7-bca4-5435df6bc233.roa (raw, json) Hash identifier: 43jvAUD4cR93hBCJ7xVtzatCfkKw3OK5ZGNoxyRrO0A= Subject key identifier: 35:AF:80:86:2F:65:A3:05:21:62:C2:F7:D3:15:26:1F:8D:CC:7C:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FA80A1FACAF004EFB100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0cc38708-ad73-3eb7-bca4-5435df6bc233.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fa:80:a1:fa:ca:f0:04:ef:b1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fa6628d2-fcd8-48f4-92e7-50836b0c8eb5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:2a:0d:c0:3e:0b:e6:6e:06:22:4c:09:50:b2: 7e:44:59:fb:40:a3:7b:38:d0:36:33:2f:2e:9b:4c: 4f:36:10:49:11:54:ff:0d:8f:fa:fa:5a:d8:9c:cc: f5:1d:bd:ac:04:09:34:65:32:ef:80:ce:34:c8:4e: 37:90:82:bd:ab:f5:c7:3b:d1:b7:5d:65:d5:50:77: 37:52:f2:66:e3:36:39:bf:ec:f9:d4:7d:91:51:f7: 00:dd:8e:94:06:64:fd:cb:ee:f0:bc:0d:90:17:b6: 0b:87:9f:3d:1b:de:40:2f:e1:95:a9:5b:c4:c0:0a: 89:95:53:14:0b:c5:47:9e:26:29:59:be:56:7e:71: 58:76:5a:4a:56:fb:7f:2e:16:f9:86:a1:43:48:07: a2:2c:0d:f5:eb:e5:21:f2:bd:37:f4:a9:13:3b:7f: 74:bf:43:3c:20:0b:77:df:89:88:0b:d0:d9:2a:29: bf:16:12:b3:d6:bc:69:74:f1:fa:f1:54:23:84:9a: 3f:1f:43:a8:27:d0:6b:c6:71:c1:38:98:7a:e0:1d: df:40:28:e1:77:8f:b6:2d:53:a4:8f:97:49:8b:aa: 13:8a:bf:e2:2b:38:ca:29:5a:27:a9:0e:52:e3:32: 18:d6:0b:d5:cd:61:9a:03:78:ee:c8:f1:07:98:e9: 3e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:AF:80:86:2F:65:A3:05:21:62:C2:F7:D3:15:26:1F:8D:CC:7C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0cc38708-ad73-3eb7-bca4-5435df6bc233.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:c7:70:61:9c:17:d0:b6:6c:b1:55:34:79:18:17:38:5a:cc: 27:46:38:27:ad:8c:e7:78:25:ea:53:19:4b:15:93:97:47:08: b5:4d:36:e0:c0:fe:af:9c:4d:72:55:bf:e3:6c:54:2c:a5:e1: 66:ea:c4:d2:35:33:92:fb:c8:e0:bb:c5:91:be:b2:2d:a8:2d: cd:43:b5:84:1c:38:46:4d:a3:02:29:2a:37:80:f1:a2:fd:b7: 5b:3a:13:8b:ba:c1:66:73:f2:f2:fc:bb:e8:03:c2:d7:4d:6f: 51:fa:38:7c:42:6b:44:4d:dd:f8:1b:89:13:4b:c5:68:dc:4c: a3:0c:4e:19:5a:e8:47:a8:03:e2:94:e7:8b:60:72:37:06:2f: b3:31:a4:6d:30:6a:6c:8b:9d:85:c8:61:2f:00:b2:4f:4f:63: 61:31:bf:44:14:d0:19:2a:ef:c4:9e:74:01:4f:ad:52:61:34: 44:2a:03:51:f1:41:30:e0:46:94:f2:47:9d:60:7f:0d:9e:ca: 62:c7:89:0f:62:fc:eb:21:d3:36:fc:c0:63:73:63:29:b3:32: 52:9d:08:97:95:69:be:b1:90:5e:31:89:4d:f8:ee:76:44:ad: 79:e2:e6:28:8c:b5:50:2f:5c:3b:d9:16:ab:e8:df:d5:d2:81: 16:e4:fa:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfqAofrK8ATvsQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmE2NjI4ZDItZmNkOC00OGY0LTkyZTctNTA4MzZiMGM4ZWI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhioNwD4L5m4GIkwJULJ+RFn7QKN7ONA2My8u m0xPNhBJEVT/DY/6+lrYnMz1Hb2sBAk0ZTLvgM40yE43kIK9q/XHO9G3XWXVUHc3 UvJm4zY5v+z51H2RUfcA3Y6UBmT9y+7wvA2QF7YLh589G95AL+GVqVvEwAqJlVMU C8VHniYpWb5WfnFYdlpKVvt/Lhb5hqFDSAeiLA316+Uh8r039KkTO390v0M8IAt3 34mIC9DZKim/FhKz1rxpdPH68VQjhJo/H0OoJ9BrxnHBOJh64B3fQCjhd4+2LVOk j5dJi6oTir/iKzjKKVonqQ5S4zIY1gvVzWGaA3juyPEHmOk+vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWvgIYvZaMFIWLC99MVJh+NzHwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGNjMzg3MDgtYWQ3My0z ZWI3LWJjYTQtNTQzNWRmNmJjMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEXHcGGcF9C2bLFVNHkYFzhazCdGOCetjOd4JepTGUsVk5dHCLVNNuDA /q+cTXJVv+NsVCyl4WbqxNI1M5L7yOC7xZG+si2oLc1DtYQcOEZNowIpKjeA8aL9 t1s6E4u6wWZz8vL8u+gDwtdNb1H6OHxCa0RN3fgbiRNLxWjcTKMMThla6EeoA+KU 54tgcjcGL7MxpG0wamyLnYXIYS8Ask9PY2Exv0QU0Bkq78SedAFPrVJhNEQqA1Hx QTDgRpTyR51gfw2eymLHiQ9i/Osh0zb8wGNzYymzMlKdCJeVab6xkF4xiU347nZE rXni5iiMtVAvXDvZFqvo39XSgRbk+ho= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:49 2025 by rpki-client