$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa File: 138e208c-b64d-35dc-82cf-e05f0cba2043.roa (raw, json) Hash identifier: eaHkd/SwvgVZiWFyY9FAm/tpckmxExDPuWQLstVaJys= Subject key identifier: 22:20:20:91:16:E0:D4:26:71:26:5D:6A:84:AE:07:32:66:65:F2:9C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114BE03CF3165D45466E20 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4b:e0:3c:f3:16:5d:45:46:6e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d65c35a5-4635-459c-a878-f3e41f9fbca7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:3f:8b:9b:fe:29:7b:cc:7c:cc:95:01:88:1a: 46:49:1c:c7:f3:06:c3:80:dd:1d:97:01:10:46:ed: 7d:48:a5:cc:4d:88:5a:a3:c3:a5:61:17:d6:d8:21: fe:16:96:a9:b6:92:eb:0c:1d:d6:3d:39:ef:2b:8c: d5:b8:c9:3d:62:c9:d3:49:88:c7:84:6d:73:e2:26: e4:83:ae:51:52:52:c4:40:aa:c3:56:e8:01:ac:93: 8d:f0:89:10:dd:dd:2b:23:75:32:5b:23:b3:9f:5b: b3:c4:f2:53:ba:67:54:74:68:c2:f1:66:af:1b:5e: 4f:2e:86:ba:56:0c:43:a2:e8:57:52:56:57:7f:09: e7:82:21:60:e1:ba:bb:b5:ef:cc:85:e7:2c:8d:ba: 37:df:e1:f8:b3:f9:ec:4f:92:68:8e:2e:44:4f:42: bf:08:c9:89:b7:86:b9:88:20:bb:42:c5:3d:4e:24: 5c:99:e3:23:52:0f:ba:2f:46:1f:1d:51:7a:03:a6: 10:15:94:fc:53:0e:ea:53:a3:57:15:4b:e6:88:01: a4:7f:a3:47:90:54:9e:be:32:e0:25:7a:c4:f0:45: d3:ce:7d:06:cf:ea:d2:a1:c2:a1:62:ed:86:55:31: 11:92:a5:e6:33:bb:72:fb:d0:ac:27:79:db:33:4b: 4d:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:20:20:91:16:E0:D4:26:71:26:5D:6A:84:AE:07:32:66:65:F2:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:fe:34:ef:de:85:c8:d1:72:a9:8b:00:de:d8:ab:ad:5f:29: 29:bb:44:01:cf:c9:d3:e2:a2:f8:6f:13:a0:3d:60:8d:91:a1: 8e:de:69:6a:29:d4:c6:a6:88:36:e5:3b:72:0b:d9:7a:e1:6f: 72:65:a9:6b:e7:b7:7f:9d:95:45:6d:e1:3f:51:7a:ac:6e:ba: 87:2f:d4:36:2f:ae:60:62:35:b6:c3:96:2b:16:5f:c3:02:3e: 59:64:07:03:34:7b:0a:c1:34:e7:fd:dd:ac:1f:29:af:4c:fb: fc:c6:9c:78:b1:4e:13:1b:04:d6:2c:f1:9e:16:ea:77:0a:6e: 63:20:62:e5:6c:5e:d8:96:02:dd:a3:a1:1a:cb:42:ec:db:ed: e1:2d:e3:ef:96:42:d9:25:62:8c:99:e6:69:22:af:6e:ea:3a: 57:5c:7a:70:b5:d5:20:66:79:b0:31:cd:a8:79:6a:ee:33:3f: 48:59:70:71:a2:af:ff:dd:67:cc:37:74:00:65:e7:b0:ee:dc: 2b:58:fa:ff:1e:a2:fd:a7:04:89:ca:8c:27:b2:f1:45:e9:9c: 35:e7:58:a1:ff:d4:ee:56:2b:bd:71:56:7f:d7:d6:29:e2:3b: 99:88:49:50:f2:a1:06:11:d8:86:7b:42:f1:08:bc:14:cd:96: 42:21:74:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUvgPPMWXUVGbiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDY1YzM1YTUtNDYzNS00NTljLWE4NzgtZjNlNDFmOWZiY2E3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArT+Lm/4pe8x8zJUBiBpGSRzH8wbDgN0dlwEQ Ru19SKXMTYhao8OlYRfW2CH+FpaptpLrDB3WPTnvK4zVuMk9YsnTSYjHhG1z4ibk g65RUlLEQKrDVugBrJON8IkQ3d0rI3UyWyOzn1uzxPJTumdUdGjC8WavG15PLoa6 VgxDouhXUlZXfwnngiFg4bq7te/Mhecsjbo33+H4s/nsT5Joji5ET0K/CMmJt4a5 iCC7QsU9TiRcmeMjUg+6L0YfHVF6A6YQFZT8Uw7qU6NXFUvmiAGkf6NHkFSevjLg JXrE8EXTzn0Gz+rSocKhYu2GVTERkqXmM7ty+9CsJ3nbM0tNpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIgIJEW4NQmcSZdaoSuBzJmZfKcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTM4ZTIwOGMtYjY0ZC0z NWRjLTgyY2YtZTA1ZjBjYmEyMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFb+NO/ehcjRcqmLAN7Yq61fKSm7RAHPydPiovhvE6A9YI2RoY7eaWop 1MamiDblO3IL2Xrhb3JlqWvnt3+dlUVt4T9Reqxuuocv1DYvrmBiNbbDlisWX8MC PllkBwM0ewrBNOf93awfKa9M+/zGnHixThMbBNYs8Z4W6ncKbmMgYuVsXtiWAt2j oRrLQuzb7eEt4++WQtklYoyZ5mkir27qOldcenC11SBmebAxzah5au4zP0hZcHGi r//dZ8w3dABl57Du3CtY+v8eov2nBInKjCey8UXpnDXnWKH/1O5WK71xVn/X1ini O5mISVDyoQYR2IZ7QvEIvBTNlkIhdNg= -----END CERTIFICATE-----Generated at Sat Jul 26 00:06:51 2025 by rpki-client