$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa File: 16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa (raw, json) Hash identifier: IRnukQeAw5yIHATpDGSbhy1aaBlTOyB+O6SrOLNn93E= Subject key identifier: 5D:48:63:FA:A0:4B:67:FC:EC:BE:21:B1:AC:6D:3A:49:A9:C5:57:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412059A52CCD14F6A7F0280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:05:9a:52:cc:d1:4f:6a:7f:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=465a1711-3a9a-403a-999e-64124e76c402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ba:7b:29:55:80:90:04:51:1e:9d:56:20:af: 9b:e1:20:a0:8a:75:d1:5b:77:3f:3e:5d:1a:2f:f0: 08:63:69:91:df:77:71:96:6e:ae:29:c5:01:2c:f5: 1b:9c:a6:ae:c6:97:25:b0:8e:9b:9a:bc:2a:3d:cf: 5c:27:bc:8a:b5:80:47:bb:71:73:5a:1d:8a:0e:e7: 46:d7:d4:ae:9d:16:49:85:db:27:53:4f:45:13:91: b4:b1:26:32:56:b7:d6:67:e1:f9:7f:1a:81:1b:bc: ac:02:f6:e1:6c:d4:ee:6e:42:9e:3b:ab:e1:1b:29: 7f:9d:0e:96:78:54:63:19:61:41:8c:1a:df:63:d7: 4a:9b:a1:6b:f2:58:44:97:19:17:10:c1:59:1d:27: 4d:d9:9c:bd:8a:96:75:0e:b3:3d:94:77:c9:49:c9: d1:5f:5f:18:9c:b3:7d:62:7b:73:1e:1c:7c:0c:3e: 94:55:48:e6:23:eb:06:19:bf:ef:5d:20:41:c5:78: 51:bd:d3:96:86:01:d2:e4:2d:0b:a6:60:7b:96:12: b9:cd:1e:d7:42:9d:2a:de:37:62:48:8b:97:a5:28: 74:ec:1e:fa:e3:08:68:e8:b3:c0:ee:a7:27:f0:c8: 7d:2f:75:de:37:05:38:f6:5d:78:84:6e:09:10:d2: 24:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:48:63:FA:A0:4B:67:FC:EC:BE:21:B1:AC:6D:3A:49:A9:C5:57:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:0e:8f:35:9b:9e:3f:04:db:cf:e7:2d:77:1d:f9:86:0e:f8: 23:18:dc:20:8e:b8:e6:98:b8:36:b6:50:76:91:0c:2a:e0:e9: 31:a7:67:96:a3:2a:c6:46:ff:15:61:71:13:ec:14:d5:08:f4: 60:73:d8:75:61:d4:db:59:f5:b4:1d:af:cd:ce:2a:fe:c6:e1: a5:39:92:5f:c4:97:15:4e:f2:c8:b2:4c:8a:08:10:cd:3f:a4: a1:4c:07:f3:61:c6:87:31:17:63:1a:f3:de:b1:a7:0f:42:69: d1:ca:49:9a:64:10:e5:4a:17:6c:a0:8f:e7:ff:f8:37:df:f4: d2:0d:19:cc:4e:f4:0b:88:d6:ad:db:e9:69:85:6c:a8:ef:de: dd:cc:66:49:30:5b:09:12:fe:57:f5:78:00:21:20:a4:f5:74: b2:7f:f8:d4:76:74:1b:46:57:a0:e9:ae:f6:fc:a8:c8:5d:42: 07:1d:6e:eb:fb:e0:08:ee:db:e4:87:ad:c1:2d:b3:ec:45:42: 61:af:8e:7d:6f:71:a7:1c:a8:df:39:1a:12:c3:44:5e:1c:c9: 5b:9a:73:a4:48:78:c6:43:6e:13:3b:34:f4:b9:f7:9d:ec:0d: 87:b6:50:8f:02:5e:73:a1:12:d4:de:29:9e:a7:66:55:c8:33: d5:4a:46:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgWaUszRT2p/AoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDY1YTE3MTEtM2E5YS00MDNhLTk5OWUtNjQxMjRlNzZjNDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Lp7KVWAkARRHp1WIK+b4SCginXRW3c/Pl0a L/AIY2mR33dxlm6uKcUBLPUbnKauxpclsI6bmrwqPc9cJ7yKtYBHu3FzWh2KDudG 19SunRZJhdsnU09FE5G0sSYyVrfWZ+H5fxqBG7ysAvbhbNTubkKeO6vhGyl/nQ6W eFRjGWFBjBrfY9dKm6Fr8lhElxkXEMFZHSdN2Zy9ipZ1DrM9lHfJScnRX18YnLN9 YntzHhx8DD6UVUjmI+sGGb/vXSBBxXhRvdOWhgHS5C0LpmB7lhK5zR7XQp0q3jdi SIuXpSh07B764who6LPA7qcn8Mh9L3XeNwU49l14hG4JENIkXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1IY/qgS2f87L4hsaxtOkmpxVfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTZhNWVkZTQtYTY2NS0z MGY5LThlYTYtMDgyNzVmZDlkOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwOjzWbnj8E28/nLXcd+YYO+CMY3CCOuOaYuDa2UHaRDCrg6TGnZ5aj KsZG/xVhcRPsFNUI9GBz2HVh1NtZ9bQdr83OKv7G4aU5kl/ElxVO8siyTIoIEM0/ pKFMB/NhxocxF2Ma896xpw9CadHKSZpkEOVKF2ygj+f/+Dff9NINGcxO9AuI1q3b 6WmFbKjv3t3MZkkwWwkS/lf1eAAhIKT1dLJ/+NR2dBtGV6Dprvb8qMhdQgcdbuv7 4Aju2+SHrcEts+xFQmGvjn1vcaccqN85GhLDRF4cyVuac6RIeMZDbhM7NPS5953s DYe2UI8CXnOhEtTeKZ6nZlXIM9VKRnA= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:12 2025 by rpki-client