$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa File: 121cc18c-0912-3d8b-a52d-deed28211e88.roa (raw, json) Hash identifier: rFtx6xtQXygdHSZ3eVjIZXbVOE4qIQqdfyLP6GnMLOU= Subject key identifier: DD:8A:2F:70:CE:2E:B4:F7:3C:0D:96:EE:2D:AE:21:33:03:45:68:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411434E610237824C222F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:43:4e:61:02:37:82:4c:22:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a45c2db0-c088-4d3e-a9fd-cc916ce8abec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:87:95:95:43:06:77:2e:2e:4a:ba:cc:eb: 1a:ea:58:de:fb:df:5f:64:d2:d0:90:c8:19:69:51: c4:2e:49:9c:db:cf:b6:fa:43:f3:60:83:43:10:4a: 3b:6e:ae:9c:6b:14:fe:f4:67:dd:72:af:72:23:24: ac:f3:97:3b:4b:06:7c:b5:0e:5a:db:eb:20:61:ed: f5:fd:d4:e6:64:eb:39:0a:6d:2e:80:28:6a:58:15: 23:20:55:48:86:47:5d:e4:c0:5b:80:42:18:55:66: 18:73:bf:c7:4f:88:51:90:29:0b:fc:ca:77:b9:be: 78:b8:2d:6f:01:31:35:3d:22:0c:f0:53:49:c2:65: 6a:cb:0a:26:c7:86:e7:3f:90:da:fb:65:f5:c2:f0: a9:dc:1e:6b:cd:2f:81:75:76:e8:b3:0a:7c:d5:d4: 3e:96:a9:ce:76:4b:03:d9:4e:32:74:0e:32:22:18: 20:d5:68:ff:af:1a:7a:95:f0:23:36:ba:48:22:5d: f3:71:e5:83:b9:ee:1e:e8:02:35:bb:2f:a4:77:fc: 8d:7e:73:31:ef:97:6c:61:25:96:f5:98:06:0a:48: 61:dd:d3:b5:0d:61:ba:4e:03:65:f8:f8:89:b1:7a: de:f1:65:f7:05:7d:19:14:70:e7:79:2f:4b:b1:10: 08:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:8A:2F:70:CE:2E:B4:F7:3C:0D:96:EE:2D:AE:21:33:03:45:68:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/121cc18c-0912-3d8b-a52d-deed28211e88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d7:1c:e9:7b:b2:de:15:8b:92:f7:6b:3d:97:24:6b:03:2f:db: 93:dd:c8:df:73:9a:97:77:52:80:5e:c8:e0:bd:e5:7b:c6:79: 91:d7:29:6e:9e:25:b2:7f:0f:7e:9f:52:61:c1:36:92:d2:7f: 83:1e:78:e8:24:b8:27:2d:06:22:01:04:6c:76:06:7f:0a:14: 68:4e:14:c2:5c:d4:b1:33:e6:f4:77:00:b1:4f:cf:5a:f2:91: 70:c8:0a:a3:e8:39:60:32:14:cf:c1:12:95:1a:3a:7f:b8:73: 6e:d3:2b:b5:94:8c:97:ec:e3:1f:d3:d1:75:91:7b:4e:06:93: fc:3b:85:45:a8:ef:ab:9d:2b:72:89:73:46:49:e5:b5:82:a6: 99:47:ea:72:6a:34:6a:b0:86:86:4e:f2:d8:0d:b5:5f:8b:0a: 92:b9:a2:fb:3b:2f:be:1a:81:43:53:29:38:cc:67:8c:64:2d: 6c:1c:99:28:71:51:6b:42:39:28:05:e4:16:32:55:80:f1:05: 12:80:38:e4:f1:7d:fb:df:da:d6:08:b6:e8:b4:32:33:5e:4d: 82:71:1d:01:d6:da:13:9f:ff:c3:21:d7:f8:7f:5b:12:95:74: 3a:a0:67:64:08:32:7f:36:f6:63:64:e2:5a:de:1e:20:63:60: c4:5e:95:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUNOYQI3gkwiLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTQ1YzJkYjAtYzA4OC00ZDNlLWE5ZmQtY2M5MTZjZThhYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydiHlZVDBncuLkq6zOsa6lje+99fZNLQkMgZ aVHELkmc28+2+kPzYINDEEo7bq6caxT+9Gfdcq9yIySs85c7SwZ8tQ5a2+sgYe31 /dTmZOs5Cm0ugChqWBUjIFVIhkdd5MBbgEIYVWYYc7/HT4hRkCkL/Mp3ub54uC1v ATE1PSIM8FNJwmVqywomx4bnP5Da+2X1wvCp3B5rzS+BdXboswp81dQ+lqnOdksD 2U4ydA4yIhgg1Wj/rxp6lfAjNrpIIl3zceWDue4e6AI1uy+kd/yNfnMx75dsYSWW 9ZgGCkhh3dO1DWG6TgNl+PiJsXre8WX3BX0ZFHDneS9LsRAIIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN2KL3DOLrT3PA2W7i2uITMDRWhxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTIxY2MxOGMtMDkxMi0z ZDhiLWE1MmQtZGVlZDI4MjExZTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANcc6Xuy3hWLkvdrPZckawMv25PdyN9zmpd3UoBeyOC95XvGeZHXKW6e JbJ/D36fUmHBNpLSf4MeeOgkuCctBiIBBGx2Bn8KFGhOFMJc1LEz5vR3ALFPz1ry kXDICqPoOWAyFM/BEpUaOn+4c27TK7WUjJfs4x/T0XWRe04Gk/w7hUWo76udK3KJ c0ZJ5bWCpplH6nJqNGqwhoZO8tgNtV+LCpK5ovs7L74agUNTKTjMZ4xkLWwcmShx UWtCOSgF5BYyVYDxBRKAOOTxffvf2tYItui0MjNeTYJxHQHW2hOf/8Mh1/h/WxKV dDqgZ2QIMn829mNk4lreHiBjYMRelVI= -----END CERTIFICATE-----Generated at Sat Jul 26 11:15:41 2025 by rpki-client