$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/233a5479-fa77-3612-a148-7c9b716b6490.roa File: 233a5479-fa77-3612-a148-7c9b716b6490.roa (raw, json) Hash identifier: JQQVhkIlXWOTFpSEIRAAT17o2UZgAZ35dyz8ahSXJUg= Subject key identifier: C8:55:04:B1:7A:EB:47:C9:63:1A:56:86:E5:4E:14:69:3F:DF:6D:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841200F3D713E588432FE820 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/233a5479-fa77-3612-a148-7c9b716b6490.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.54.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:00:f3:d7:13:e5:88:43:2f:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=ed9f1d28-1e76-431c-a3dc-3381ab57a02a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:0f:ed:ef:e9:1b:43:fb:ee:de:33:5b:66:81: 4e:af:d2:a2:1a:df:14:e0:01:53:99:bf:89:4d:bc: 5e:37:5e:dd:72:74:34:78:41:d9:4a:5d:19:c0:13: 8c:a6:82:55:08:c8:4d:1f:cd:95:00:a8:89:3e:e0: ea:39:7a:8b:1c:15:a4:a7:06:ba:a1:66:e8:ae:c5: 6f:ad:71:f7:09:0d:b6:af:94:c6:82:a7:3f:6f:ae: fc:f1:fa:3a:0a:09:ec:74:d3:f4:9f:6c:a5:f2:d8: a5:62:85:b7:10:a6:77:1c:62:b2:73:d2:01:58:6f: 12:71:f7:2b:f9:cd:1f:ba:af:87:87:49:e4:66:3f: db:ad:a1:06:60:88:f3:53:11:ca:43:d1:56:5c:48: 41:9e:dd:7d:7b:88:1b:75:84:27:e1:40:e2:3b:08: cb:8e:48:03:54:18:cf:42:92:80:80:d5:b5:4f:a0: 2e:81:31:6c:6e:d2:4c:1f:99:a3:09:8a:67:db:d3: fd:df:1c:92:5b:a4:15:c7:1e:98:98:bb:c3:d8:90: 26:fd:3e:33:3e:19:6c:17:77:1e:eb:53:d8:58:b8: b6:c0:26:a2:3c:2a:01:71:d2:70:51:63:e8:fe:7c: 8a:65:7f:d4:d5:03:bd:47:18:4e:30:0b:bc:83:61: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:55:04:B1:7A:EB:47:C9:63:1A:56:86:E5:4E:14:69:3F:DF:6D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/233a5479-fa77-3612-a148-7c9b716b6490.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.54.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ce:30:3e:5d:16:ac:94:b2:59:9b:3f:a2:17:7d:08:43:13:33: 93:ea:7f:f8:74:67:de:df:3e:99:6f:c5:60:72:25:0e:68:b6: 0d:e3:a4:54:83:a0:76:9f:6f:f0:a1:31:cf:cb:2d:f5:be:e9: 79:21:d8:17:e6:3b:d3:90:b4:b2:17:89:0a:c9:37:a9:80:88: db:1e:58:58:1b:1d:98:85:d0:8e:20:d5:1c:bd:33:2b:d6:c8: 51:55:86:7b:66:02:1b:98:3e:2f:ab:ab:10:c3:e8:df:1c:fa: 91:77:c4:40:ca:75:1e:be:40:ae:0c:2f:3e:3f:63:f0:4b:2a: ad:63:9e:64:0d:5c:3d:87:2c:fe:24:ba:ae:62:47:f9:48:f3: a7:6d:94:15:6d:f7:07:47:ac:ad:30:ff:f4:26:09:f4:c0:1a: 78:41:6c:92:bc:29:c6:fa:3b:77:65:53:fe:69:56:10:88:80: e1:85:25:67:eb:3d:30:5a:80:b1:e1:82:ed:6f:7d:21:93:75: 9a:16:45:a2:5d:ac:5f:39:80:bd:87:49:fb:32:2d:e2:74:9f: c8:e2:29:f3:31:9a:a9:92:db:3d:78:fd:6d:ff:5a:76:e8:56: 30:8f:b9:c8:71:69:a3:f7:33:55:50:65:c4:e6:ea:e3:38:94: b9:3b:d5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgDz1xPliEMv6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZWQ5ZjFkMjgtMWU3Ni00MzFjLWEzZGMtMzM4MWFiNTdhMDJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgw/t7+kbQ/vu3jNbZoFOr9KiGt8U4AFTmb+J TbxeN17dcnQ0eEHZSl0ZwBOMpoJVCMhNH82VAKiJPuDqOXqLHBWkpwa6oWborsVv rXH3CQ22r5TGgqc/b6788fo6CgnsdNP0n2yl8tilYoW3EKZ3HGKyc9IBWG8Scfcr +c0fuq+Hh0nkZj/braEGYIjzUxHKQ9FWXEhBnt19e4gbdYQn4UDiOwjLjkgDVBjP QpKAgNW1T6AugTFsbtJMH5mjCYpn29P93xySW6QVxx6YmLvD2JAm/T4zPhlsF3ce 61PYWLi2wCaiPCoBcdJwUWPo/nyKZX/U1QO9RxhOMAu8g2H6ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMhVBLF660fJYxpWhuVOFGk/321sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjMzYTU0NzktZmE3Ny0z NjEyLWExNDgtN2M5YjcxNmI2NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM4wPl0WrJSyWZs/ohd9CEMTM5Pqf/h0Z97fPplvxWByJQ5otg3jpFSD oHafb/ChMc/LLfW+6Xkh2BfmO9OQtLIXiQrJN6mAiNseWFgbHZiF0I4g1Ry9MyvW yFFVhntmAhuYPi+rqxDD6N8c+pF3xEDKdR6+QK4MLz4/Y/BLKq1jnmQNXD2HLP4k uq5iR/lI86dtlBVt9wdHrK0w//QmCfTAGnhBbJK8Kcb6O3dlU/5pVhCIgOGFJWfr PTBagLHhgu1vfSGTdZoWRaJdrF85gL2HSfsyLeJ0n8jiKfMxmqmS2z14/W3/Wnbo VjCPuchxaaP3M1VQZcTm6uM4lLk71fk= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:20 2025 by rpki-client