$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa File: 10a855de-2f56-30f4-b7d6-ad843411b4b9.roa (raw, json) Hash identifier: CDuX2QvnzfiCZFAYp5+71UbI9oLacII8zb4kuVEI0X4= Subject key identifier: 24:6D:48:DC:28:9E:9B:92:C4:AE:BA:DA:DD:62:91:BA:E5:14:F5:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411476BA7734EFB555AB140 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:47:6b:a7:73:4e:fb:55:5a:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2112a82d-45ba-4a09-8f9a-90b6bf291ade Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:c6:79:88:92:dd:e6:5e:09:68:20:5b:2f:97: 46:f0:0c:77:fa:3a:80:27:af:60:84:27:26:ea:5b: ca:db:bc:20:0b:0f:54:9a:24:3d:4a:db:bb:2c:5e: 13:7b:0d:3a:77:8f:46:b8:b2:02:47:ae:1b:4b:91: 46:3c:30:04:6e:f6:5c:c3:32:8d:c8:0a:19:84:dd: 3c:64:cc:0f:c3:6b:23:04:7f:39:eb:3e:80:00:53: 63:fd:a9:31:e2:0c:31:8c:b2:41:78:69:4e:3c:36: 4c:be:29:b8:b0:86:5b:61:13:00:e1:7b:21:f4:8f: 73:b1:10:8a:9e:2a:31:b7:ab:54:a9:94:8a:42:99: c1:90:d7:3b:39:c5:72:4f:9d:1f:bb:42:dc:ec:51: 88:27:4f:11:63:a1:35:24:fc:1b:d3:be:48:78:e8: bd:ec:c8:9a:8b:b4:42:9f:a7:5b:d5:04:89:27:c0: 68:d0:2d:92:a0:e1:11:84:1d:76:56:13:27:2d:68: fa:da:a4:1b:2e:2a:b3:7d:0c:79:00:f3:cd:c9:fe: 37:db:19:09:81:91:9c:be:c5:51:f2:a1:10:a0:6b: 2a:f2:86:3e:c9:a8:65:63:87:a9:73:ce:a3:b8:e6: 81:d2:31:c2:60:a2:75:11:d5:4b:72:01:40:a3:79: 4e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:6D:48:DC:28:9E:9B:92:C4:AE:BA:DA:DD:62:91:BA:E5:14:F5:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:7d:47:08:67:2e:00:57:34:9a:2d:84:61:88:79:9b:2b:24: ad:99:66:d0:1a:31:8b:49:52:30:51:31:98:8c:63:fd:27:40: 06:60:9c:82:08:f4:92:6a:21:a3:2d:c4:14:23:3b:f1:87:36: 4a:fb:d8:98:05:b4:09:63:94:10:6d:47:01:9a:8e:55:ff:4a: 71:48:eb:b5:41:a5:57:4d:0a:ad:c9:bf:f4:fb:52:7e:02:44: 76:8e:9c:ca:ad:84:67:7b:2b:8f:4d:2e:6c:04:e8:15:4e:12: d8:55:14:04:f1:aa:7d:63:68:f3:14:b4:00:45:54:c9:3d:08: 26:17:a8:75:63:b9:54:d9:6e:77:07:28:5f:9e:fb:7f:e5:8f: 2e:12:d6:e3:00:00:36:e3:a6:e6:b4:54:15:35:60:0c:31:a7: 38:7a:4c:ff:0e:82:ca:60:f7:c1:63:73:8e:a6:29:8d:3f:88: 57:ca:e0:c0:5d:fe:1c:95:72:60:c2:8a:7b:e3:db:6d:d2:3b: 1e:15:ce:d8:3d:1a:8d:52:3a:1a:ee:da:0a:62:d2:6c:0f:29: aa:35:14:ff:9f:49:d9:46:5a:5d:13:ed:ca:17:67:97:4a:ee: 50:53:c3:02:cc:14:ca:2d:d5:9f:96:cd:ad:04:9e:aa:cf:b7: 62:26:af:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUdrp3NO+1VasUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjExMmE4MmQtNDViYS00YTA5LThmOWEtOTBiNmJmMjkxYWRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcZ5iJLd5l4JaCBbL5dG8Ax3+jqAJ69ghCcm 6lvK27wgCw9UmiQ9Stu7LF4Tew06d49GuLICR64bS5FGPDAEbvZcwzKNyAoZhN08 ZMwPw2sjBH856z6AAFNj/akx4gwxjLJBeGlOPDZMvim4sIZbYRMA4Xsh9I9zsRCK nioxt6tUqZSKQpnBkNc7OcVyT50fu0Lc7FGIJ08RY6E1JPwb075IeOi97Miai7RC n6db1QSJJ8Bo0C2SoOERhB12VhMnLWj62qQbLiqzfQx5APPNyf432xkJgZGcvsVR 8qEQoGsq8oY+yahlY4epc86juOaB0jHCYKJ1EdVLcgFAo3lOrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCRtSNwonpuSxK662t1ikbrlFPUwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBhODU1ZGUtMmY1Ni0z MGY0LWI3ZDYtYWQ4NDM0MTFiNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAV9RwhnLgBXNJothGGIeZsrJK2ZZtAaMYtJUjBRMZiMY/0nQAZgnIII 9JJqIaMtxBQjO/GHNkr72JgFtAljlBBtRwGajlX/SnFI67VBpVdNCq3Jv/T7Un4C RHaOnMqthGd7K49NLmwE6BVOEthVFATxqn1jaPMUtABFVMk9CCYXqHVjuVTZbncH KF+e+3/ljy4S1uMAADbjpua0VBU1YAwxpzh6TP8Ogspg98Fjc46mKY0/iFfK4MBd /hyVcmDCinvj223SOx4Vztg9Go1SOhru2gpi0mwPKao1FP+fSdlGWl0T7coXZ5dK 7lBTwwLMFMot1Z+Wza0EnqrPt2ImrxY= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:36 2025 by rpki-client