$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa File: 2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa (raw, json) Hash identifier: 3rKCQsH8c6Nxyi22mPmupIhTs6Xq4UHshLUjLPX7yzA= Subject key identifier: 12:DF:91:7F:90:32:23:B5:7C:16:78:12:B4:CB:97:A1:4E:FC:EC:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FEB427E5367A5B202400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.194.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fe:b4:27:e5:36:7a:5b:20:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=20682e9e-0351-417c-8f44-e30b69e6e8e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:db:0a:d2:4b:e8:48:e7:67:4b:5a:95:70:c8: f1:91:95:f7:74:57:91:6a:fb:5f:0a:98:76:72:31: 48:25:3d:62:16:68:64:1b:45:86:ef:21:ab:94:ea: f6:57:c4:6b:75:26:58:e3:f5:b5:8d:b7:22:ff:7f: 5c:03:78:4c:b6:76:03:62:6a:ec:86:aa:fe:42:92: 09:33:83:b3:96:f4:f9:73:f1:7c:81:06:7e:26:6f: 09:65:8d:ba:ac:8b:79:6c:f3:c3:99:65:16:91:2e: 0f:95:15:14:7e:8e:d5:20:40:04:3e:1d:4f:5a:5f: 04:e6:f3:6c:e0:d8:f7:2a:45:46:d8:68:c1:37:a6: 8a:f5:30:a0:3b:56:4a:98:4e:dc:9d:1e:51:68:41: b8:e6:85:d8:11:94:03:2b:e1:99:b3:ca:f6:d8:ee: 5b:8e:0d:c0:dc:66:b5:9d:25:58:69:82:77:a4:05: 10:de:6d:f4:c5:8b:2d:26:c7:24:1e:57:81:c3:f9: 89:4b:d7:31:a4:36:25:02:84:b7:1f:14:8b:f8:e0: 9a:39:10:9f:13:86:6c:42:02:8d:35:e6:e9:09:6c: 00:a8:ca:ec:f6:5c:5b:bb:98:36:a5:cd:43:db:80: 0e:d7:fb:cb:77:c9:49:c4:b6:23:22:54:c2:22:4d: c0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:DF:91:7F:90:32:23:B5:7C:16:78:12:B4:CB:97:A1:4E:FC:EC:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a75357a-d4af-3cf5-9703-5226ae5d9f08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.194.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:e7:1e:c9:96:a6:cd:29:51:67:d8:41:f9:3c:5b:e4:19:00: 51:59:b6:32:ce:ee:54:69:fd:a5:25:25:5c:56:4a:1f:d9:f0: a0:dc:6f:fa:c6:ae:55:6c:af:89:26:4e:08:ef:cd:1f:56:ee: 3e:00:60:ee:db:75:77:89:77:55:18:0e:5e:a5:9b:32:44:4e: ed:32:8b:04:5d:06:3d:ad:0b:8e:0f:2f:50:a7:fa:dc:18:9c: 09:2b:2e:bd:95:f7:78:23:31:e3:cf:28:c2:f6:72:74:f3:3d: dd:73:eb:31:b5:82:3b:52:8a:24:d4:82:01:69:10:a0:7c:6f: 6d:f8:e8:d4:e3:95:fd:59:a8:8c:70:6b:94:e4:4a:7b:73:43: 84:a8:e3:e4:57:98:3d:df:e1:d5:a5:19:f7:1c:5b:8d:cb:a7: b1:35:1b:ea:f9:27:13:4d:40:c9:01:6c:1e:5b:10:1b:e0:f3: 19:b4:e0:ab:50:41:d0:3a:d0:0b:4f:df:2a:17:98:f3:b9:8d: 68:35:36:8a:2d:50:43:d3:be:3c:fe:c0:6f:5f:ba:00:c7:3b: a0:a2:3c:7b:4a:3b:61:60:6f:0d:37:68:83:2e:d2:82:c2:b4: 50:60:55:b5:e3:41:a8:12:9a:29:59:7f:9b:b9:cb:58:30:e7: 24:b7:11:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf60J+U2elsgJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjA2ODJlOWUtMDM1MS00MTdjLThmNDQtZTMwYjY5ZTZlOGUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNsK0kvoSOdnS1qVcMjxkZX3dFeRavtfCph2 cjFIJT1iFmhkG0WG7yGrlOr2V8RrdSZY4/W1jbci/39cA3hMtnYDYmrshqr+QpIJ M4OzlvT5c/F8gQZ+Jm8JZY26rIt5bPPDmWUWkS4PlRUUfo7VIEAEPh1PWl8E5vNs 4Nj3KkVG2GjBN6aK9TCgO1ZKmE7cnR5RaEG45oXYEZQDK+GZs8r22O5bjg3A3Ga1 nSVYaYJ3pAUQ3m30xYstJsckHleBw/mJS9cxpDYlAoS3HxSL+OCaORCfE4ZsQgKN NebpCWwAqMrs9lxbu5g2pc1D24AO1/vLd8lJxLYjIlTCIk3A6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLfkX+QMiO1fBZ4ErTLl6FO/Oy2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE3NTM1N2EtZDRhZi0z Y2Y1LTk3MDMtNTIyNmFlNWQ5ZjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALjnHsmWps0pUWfYQfk8W+QZAFFZtjLO7lRp/aUlJVxWSh/Z8KDcb/rG rlVsr4kmTgjvzR9W7j4AYO7bdXeJd1UYDl6lmzJETu0yiwRdBj2tC44PL1Cn+twY nAkrLr2V93gjMePPKML2cnTzPd1z6zG1gjtSiiTUggFpEKB8b2346NTjlf1ZqIxw a5TkSntzQ4So4+RXmD3f4dWlGfccW43Lp7E1G+r5JxNNQMkBbB5bEBvg8xm04KtQ QdA60AtP3yoXmPO5jWg1NootUEPTvjz+wG9fugDHO6CiPHtKO2Fgbw03aIMu0oLC tFBgVbXjQagSmilZf5u5y1gw5yS3EY8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:11 2025 by rpki-client