$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b5c222c-9681-37a6-beab-22c713dca4fc.roa File: 1b5c222c-9681-37a6-beab-22c713dca4fc.roa (raw, json) Hash identifier: QZkCgwEFr789bKrTxH/frCwCBEdmvn9LlV/NNLN8sXE= Subject key identifier: 29:7A:DE:22:4C:64:1D:E7:6E:9E:DE:CC:D7:9F:FE:06:FE:AD:73:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FFD7467C4A182A600F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b5c222c-9681-37a6-beab-22c713dca4fc.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:d7:46:7c:4a:18:2a:60:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6845e53b-c21e-4e53-b691-c320c38db1a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:a8:79:84:69:24:98:ef:ba:67:84:74:25:08: d3:cd:dc:b9:df:87:91:ba:fe:05:59:53:9c:3a:5a: bd:b3:89:66:4a:16:ca:3d:49:f0:b5:b8:d4:29:29: df:e8:de:f5:7f:ab:14:94:66:cc:2b:79:99:4f:1a: b8:4a:b8:4c:0f:3e:fb:7b:77:26:78:4e:f0:7a:30: 26:09:a4:50:50:a0:05:0a:3c:94:57:e8:09:3b:1f: 77:aa:b4:2f:ba:b3:e3:b0:77:47:92:e2:d5:27:22: 66:ca:f3:1a:e8:ec:1e:81:85:69:bc:ee:bd:e1:7f: 46:85:71:a0:62:6e:36:3f:56:39:e7:d1:de:94:d8: 47:e3:06:f8:f9:55:7d:52:6a:bd:3b:57:ae:2b:b5: a5:f4:c8:a1:8b:aa:98:f3:8f:43:d9:99:44:c5:64: 24:be:e3:49:c6:b9:5b:eb:32:3d:48:1e:13:48:6f: 17:b7:05:a8:7d:09:8c:f2:6d:14:d4:80:21:a0:20: 18:57:aa:99:f6:95:bc:69:ea:3a:6c:f7:22:29:cd: 6b:bd:25:46:e3:92:a0:d1:7a:8b:23:e3:1c:5b:91: 63:e3:00:63:88:bb:24:62:5f:f3:e2:d8:96:29:db: d3:87:95:ba:10:85:ed:11:37:63:94:81:3a:fc:da: 29:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:7A:DE:22:4C:64:1D:E7:6E:9E:DE:CC:D7:9F:FE:06:FE:AD:73:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1b5c222c-9681-37a6-beab-22c713dca4fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:fc:8a:56:2c:06:2d:3e:8d:c7:f4:d2:de:e2:30:c2:a1:78: e4:da:29:ed:c9:74:63:80:c7:e9:70:47:d1:36:6e:5a:a2:32: 23:e6:08:e9:7b:50:29:48:f3:0f:85:24:90:e1:26:88:65:af: e2:94:12:10:d9:dd:60:65:8d:bd:36:8d:dd:35:7c:bf:41:b5: a6:a5:f5:d2:3c:bc:d1:94:18:82:ef:47:dd:65:b3:86:73:66: f8:ee:cc:44:2d:0e:d0:93:96:8e:ec:f1:4e:01:ce:f2:91:4a: 60:cd:f6:24:a6:5f:4e:90:a6:60:d1:a3:b4:de:0e:1f:ce:f7: 9f:7e:3e:f6:31:20:5f:e7:89:91:98:91:a7:71:b6:77:35:8b: ae:a7:97:e8:0d:65:7e:40:d1:16:55:36:b4:f6:83:05:5b:53: 41:98:00:af:5c:57:56:b8:28:cc:09:f5:6c:2e:d2:c6:d2:39: fe:1c:a6:af:53:00:b7:dd:18:21:04:99:31:4d:13:29:1d:44: e7:b6:b1:24:d4:d6:ed:b0:e0:40:3f:fe:f3:b8:78:35:97:d8: fa:a1:d1:f3:26:9c:f3:d7:0b:18:ee:f2:b1:31:2d:92:f3:ea: 54:dc:b7:28:b7:2d:b9:73:ea:68:ba:f1:ba:0e:eb:c9:aa:e5: dd:55:12:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf/XRnxKGCpgDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Njg0NWU1M2ItYzIxZS00ZTUzLWI2OTEtYzMyMGMzOGRiMWE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qh5hGkkmO+6Z4R0JQjTzdy534eRuv4FWVOc Olq9s4lmShbKPUnwtbjUKSnf6N71f6sUlGbMK3mZTxq4SrhMDz77e3cmeE7wejAm CaRQUKAFCjyUV+gJOx93qrQvurPjsHdHkuLVJyJmyvMa6OwegYVpvO694X9GhXGg Ym42P1Y559HelNhH4wb4+VV9Umq9O1euK7Wl9Mihi6qY849D2ZlExWQkvuNJxrlb 6zI9SB4TSG8XtwWofQmM8m0U1IAhoCAYV6qZ9pW8aeo6bPciKc1rvSVG45Kg0XqL I+McW5Fj4wBjiLskYl/z4tiWKdvTh5W6EIXtETdjlIE6/Nop2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCl63iJMZB3nbp7ezNef/gb+rXMdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWI1YzIyMmMtOTY4MS0z N2E2LWJlYWItMjJjNzEzZGNhNGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKn8ilYsBi0+jcf00t7iMMKheOTaKe3JdGOAx+lwR9E2blqiMiPmCOl7 UClI8w+FJJDhJohlr+KUEhDZ3WBljb02jd01fL9Btaal9dI8vNGUGILvR91ls4Zz ZvjuzEQtDtCTlo7s8U4BzvKRSmDN9iSmX06QpmDRo7TeDh/O959+PvYxIF/niZGY kadxtnc1i66nl+gNZX5A0RZVNrT2gwVbU0GYAK9cV1a4KMwJ9Wwu0sbSOf4cpq9T ALfdGCEEmTFNEykdROe2sSTU1u2w4EA//vO4eDWX2Pqh0fMmnPPXCxju8rExLZLz 6lTctyi3Lblz6mi68boO68mq5d1VEvk= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:16 2025 by rpki-client