$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2808ffa8-dd82-3492-9899-bb02a50ff806.roa File: 2808ffa8-dd82-3492-9899-bb02a50ff806.roa (raw, json) Hash identifier: DL0Oc7F51JWPkoB1rUkgmQVYRuaNWBC1EqBHHd1Jgx0= Subject key identifier: 8B:61:CA:BE:46:7E:8C:3E:EB:71:10:EE:B6:33:4E:E6:D0:5C:9D:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412008CDF8C1C20DF9C6A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2808ffa8-dd82-3492-9899-bb02a50ff806.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:00:8c:df:8c:1c:20:df:9c:6a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b3d8ca54-c3cc-47b9-b3e4-989a0d3a4997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d1:1d:c9:9d:51:77:2a:76:29:1f:71:4f:3a: 23:f3:61:e8:3c:ee:0d:4a:4e:a9:c8:17:5e:ee:cb: 9d:01:cf:37:c1:bd:75:a8:56:d5:16:46:cd:1b:3b: 79:1c:e7:3d:d8:a2:a9:80:23:cc:e1:f3:94:77:7d: 29:9c:65:48:86:6b:fd:0d:69:7b:dd:0f:18:02:04: 98:66:db:3b:ab:6f:7d:4d:99:39:c4:79:f1:b9:3e: 9e:77:49:ce:ec:14:ae:68:c5:1d:df:17:6b:e2:ec: 9b:9e:ff:ec:8d:ba:6b:a0:b4:e4:12:28:b2:32:62: a1:e1:86:cf:bb:f7:8d:98:c7:28:21:75:78:c1:b4: 41:5d:f4:87:ff:58:ba:2c:8b:9b:8e:ff:a3:06:96: 18:2d:d9:d3:a8:65:d9:9b:2b:cd:5f:c4:c7:aa:ec: 9e:0b:f7:62:c4:a7:07:65:fb:20:28:d1:45:27:c8: 7e:df:7b:64:0d:1e:22:2d:09:66:c9:3f:34:11:6b: 6c:ce:5d:8e:7c:ba:88:f9:63:b6:f3:6a:56:fc:f9: c9:3c:5e:fc:f6:8f:2a:ed:3b:f9:29:ab:cd:5e:82: d2:c2:48:19:2f:e3:75:be:c2:38:c4:83:62:89:9e: 97:ee:ab:c0:b9:94:42:87:0f:ce:10:7c:12:32:c3: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:61:CA:BE:46:7E:8C:3E:EB:71:10:EE:B6:33:4E:E6:D0:5C:9D:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2808ffa8-dd82-3492-9899-bb02a50ff806.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:79:d2:46:1a:a8:79:10:4c:77:de:76:43:df:ce:bc:b1:d5: fc:d7:4e:43:60:30:89:5b:62:f6:76:49:96:83:0f:5a:70:1d: e5:64:22:c4:ec:ff:f3:be:fc:9d:d6:7e:84:34:de:cb:ee:8f: 99:42:25:c7:14:d7:b9:fb:2c:9d:09:eb:27:c5:28:be:06:77: 1d:63:1f:28:3c:94:60:8e:68:f3:e0:63:02:7b:0a:f5:9c:c6: 7d:15:de:8f:02:92:92:7f:14:48:d5:10:e6:22:b5:df:eb:6c: ea:18:2c:7a:14:a1:6a:a1:aa:22:27:51:f2:95:ad:6d:61:72: e5:53:bc:78:4c:10:42:e6:59:fe:a1:97:a3:9f:84:cb:e6:82: 3b:29:76:45:e9:67:d3:9c:0e:35:77:9c:10:1c:bf:23:27:96: ec:2e:e7:fe:83:78:77:ea:bd:52:e4:24:0d:74:fa:fd:61:69: 3d:f3:69:8f:ab:9b:25:0a:a0:c6:9f:63:aa:19:ee:92:94:26: d3:8a:b7:5e:9a:1e:1f:c8:ba:67:3f:00:0f:3a:10:69:14:a8: b2:5d:b2:ee:01:7b:54:d2:46:df:19:c1:37:1b:d5:70:a9:2e: be:60:62:95:d2:ba:0c:7f:1d:dc:48:6b:66:d8:bd:9f:a3:e4: c2:ab:fc:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgCM34wcIN+caoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjNkOGNhNTQtYzNjYy00N2I5LWIzZTQtOTg5YTBkM2E0OTk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNEdyZ1Rdyp2KR9xTzoj82HoPO4NSk6pyBde 7sudAc83wb11qFbVFkbNGzt5HOc92KKpgCPM4fOUd30pnGVIhmv9DWl73Q8YAgSY Zts7q299TZk5xHnxuT6ed0nO7BSuaMUd3xdr4uybnv/sjbproLTkEiiyMmKh4YbP u/eNmMcoIXV4wbRBXfSH/1i6LIubjv+jBpYYLdnTqGXZmyvNX8THquyeC/dixKcH ZfsgKNFFJ8h+33tkDR4iLQlmyT80EWtszl2OfLqI+WO282pW/PnJPF789o8q7Tv5 KavNXoLSwkgZL+N1vsI4xINiiZ6X7qvAuZRChw/OEHwSMsMuJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIthyr5Gfow+63EQ7rYzTubQXJ30MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjgwOGZmYTgtZGQ4Mi0z NDkyLTk4OTktYmIwMmE1MGZmODA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIR50kYaqHkQTHfedkPfzryx1fzXTkNgMIlbYvZ2SZaDD1pwHeVkIsTs //O+/J3WfoQ03svuj5lCJccU17n7LJ0J6yfFKL4Gdx1jHyg8lGCOaPPgYwJ7CvWc xn0V3o8CkpJ/FEjVEOYitd/rbOoYLHoUoWqhqiInUfKVrW1hcuVTvHhMEELmWf6h l6OfhMvmgjspdkXpZ9OcDjV3nBAcvyMnluwu5/6DeHfqvVLkJA10+v1haT3zaY+r myUKoMafY6oZ7pKUJtOKt16aHh/Iumc/AA86EGkUqLJdsu4Be1TSRt8ZwTcb1XCp Lr5gYpXSugx/HdxIa2bYvZ+j5MKr/Oo= -----END CERTIFICATE-----Generated at Sat Jul 26 11:40:23 2025 by rpki-client