$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa File: 21249c04-184a-348a-8117-43a314e9ce2a.roa (raw, json) Hash identifier: 2mEN/oAeL95Lpq9DdKclRh9bL2ThMOzlihjX8frTTvw= Subject key identifier: 7C:D3:A9:5E:10:C9:D5:0E:4C:04:F5:41:A0:BC:7B:A7:B7:F6:8A:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114664C61E75E2690DF480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.197.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:46:64:c6:1e:75:e2:69:0d:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=93efc557-c725-4937-b498-8d64d32b4cb2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:74:df:ea:8c:40:8b:a3:c8:ed:7f:68:7b:d4: 63:50:ee:f3:73:8a:a8:6d:7e:77:43:4a:a8:1a:28: b4:92:6d:59:77:08:12:f5:6c:12:53:65:77:cc:0e: 89:d4:6e:14:1b:51:4b:ad:b4:8c:5e:d0:cd:93:ee: ff:88:f9:15:d6:89:25:86:7c:b1:d6:e9:78:e4:6a: 7a:3e:bf:d7:4c:e6:b9:f1:54:bc:7f:9e:b3:ed:6d: a0:09:a4:25:d7:88:94:21:31:64:01:67:ee:62:82: a7:76:c0:e6:cf:e4:26:ce:23:f3:35:e9:c8:b4:35: 53:1b:2c:3c:0c:cf:d2:ce:e3:28:e0:e0:df:a4:c0: ec:a6:f3:df:c2:1b:60:b9:e2:b8:08:90:39:13:e8: 9d:86:41:b9:b3:1e:0f:ac:01:6c:26:2f:22:58:d8: 04:60:a0:36:83:c5:13:07:34:df:61:46:5a:3c:40: 9e:d8:c2:3c:32:af:fe:c7:11:ee:1a:1a:b1:d2:b4: 74:ca:50:ab:72:56:ee:38:45:a1:2d:24:c1:94:5b: 09:31:4d:8b:28:22:bb:6d:de:c8:7f:56:57:e2:42: dd:5e:b4:57:39:8c:e3:f3:4f:94:d5:8a:34:52:08: 65:f9:ed:62:46:df:cf:c9:91:4a:e3:0b:4d:50:97: b7:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D3:A9:5E:10:C9:D5:0E:4C:04:F5:41:A0:BC:7B:A7:B7:F6:8A:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/21249c04-184a-348a-8117-43a314e9ce2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.197.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:51:61:78:62:ed:4d:97:0c:5e:34:13:af:ae:fe:2e:25:48: 85:bc:8e:ee:9e:c6:cd:db:1e:66:ad:65:8f:23:3d:ef:d5:70: 8f:52:a7:94:7e:72:ef:ea:c3:59:ce:10:e9:f1:3f:15:bc:9c: 7c:34:4d:2f:32:7b:68:7b:1f:1c:89:96:1d:97:a3:5f:82:c2: 24:cd:a0:b4:d6:bd:80:82:82:ea:b5:b5:1d:ab:5b:da:1d:8c: 26:11:37:66:39:53:d7:f0:22:d8:14:ff:c5:b9:41:7e:67:97: c8:b0:13:56:98:a4:48:70:26:64:8b:7d:4e:9f:d9:46:78:e4: 95:17:7d:34:c1:3e:7a:b2:6c:88:44:10:46:ac:68:91:31:83: 25:d9:9b:9f:a6:85:cd:32:4d:06:a5:c0:76:da:29:40:5d:03: 42:9e:a0:c5:f9:0f:fb:cd:ef:96:8a:18:12:be:68:e6:3e:a3: 22:97:f5:cb:70:7d:a0:c8:16:88:1d:4b:e2:55:f9:0f:8b:99: 8f:9d:e3:d9:b2:ec:0c:e4:34:e1:aa:36:e1:f6:a9:eb:02:d3: 26:da:86:51:83:c6:54:8e:67:d0:f7:91:ff:4b:04:ef:1c:b4: 71:15:ec:b9:b3:c2:a3:9d:84:1e:7f:e2:9b:0a:c5:03:00:62: 3e:c4:ac:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUZkxh514mkN9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTNlZmM1NTctYzcyNS00OTM3LWI0OTgtOGQ2NGQzMmI0Y2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Tf6oxAi6PI7X9oe9RjUO7zc4qobX53Q0qo Gii0km1ZdwgS9WwSU2V3zA6J1G4UG1FLrbSMXtDNk+7/iPkV1oklhnyx1ul45Gp6 Pr/XTOa58VS8f56z7W2gCaQl14iUITFkAWfuYoKndsDmz+QmziPzNenItDVTGyw8 DM/SzuMo4ODfpMDspvPfwhtgueK4CJA5E+idhkG5sx4PrAFsJi8iWNgEYKA2g8UT BzTfYUZaPECe2MI8Mq/+xxHuGhqx0rR0ylCrclbuOEWhLSTBlFsJMU2LKCK7bd7I f1ZX4kLdXrRXOYzj80+U1Yo0Ughl+e1iRt/PyZFK4wtNUJe38wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHzTqV4QydUOTAT1QaC8e6e39oodMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjEyNDljMDQtMTg0YS0z NDhhLTgxMTctNDNhMzE0ZTljZTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFNRYXhi7U2XDF40E6+u/i4lSIW8ju6exs3bHmatZY8jPe/VcI9Sp5R+ cu/qw1nOEOnxPxW8nHw0TS8ye2h7HxyJlh2Xo1+CwiTNoLTWvYCCguq1tR2rW9od jCYRN2Y5U9fwItgU/8W5QX5nl8iwE1aYpEhwJmSLfU6f2UZ45JUXfTTBPnqybIhE EEasaJExgyXZm5+mhc0yTQalwHbaKUBdA0KeoMX5D/vN75aKGBK+aOY+oyKX9ctw faDIFogdS+JV+Q+LmY+d49my7AzkNOGqNuH2qesC0ybahlGDxlSOZ9D3kf9LBO8c tHEV7LmzwqOdhB5/4psKxQMAYj7ErCA= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:17 2025 by rpki-client