$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa File: 2a9afe68-8094-375c-b738-96068d4adc6f.roa (raw, json) Hash identifier: jxTgsDk2tMgCDUNI06KkbxIBZH4lUD7gkLTtz2328pw= Subject key identifier: 5D:69:83:E0:6F:F8:08:F7:AA:4E:87:EC:2C:10:9C:38:35:34:71:FC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114859AC2A4F969F10A300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:48:59:ac:2a:4f:96:9f:10:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c2393026-e7f6-49ba-a65b-ff89163b61fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:6f:47:9c:46:c2:f0:2e:97:9f:72:ab:7b: 92:96:ef:f6:e5:7e:c1:8c:6d:d6:ba:a0:e3:2b:5b: 09:ca:e4:25:4f:2d:56:51:01:5d:6d:d5:80:5d:71: 58:4e:ad:e3:40:8f:83:1d:11:ad:83:d6:31:91:f7: 0e:37:95:61:45:88:f1:22:2f:13:47:2c:92:75:6b: 50:dd:4a:ae:fa:80:c8:b8:1c:b3:7d:f9:07:da:57: 09:c3:db:15:d7:29:08:2b:98:1d:97:80:dd:2f:d6: e6:20:0b:5a:84:f6:8b:7c:95:11:75:a2:76:c2:9c: 6d:13:0b:57:33:31:76:7e:93:a5:73:8e:69:46:31: 7d:ef:92:51:8f:f1:9b:ab:a0:93:eb:5c:db:e6:f8: 94:4e:e0:8b:ec:b4:a0:87:19:58:8e:8b:10:a2:e4: 9d:24:8a:c3:55:53:8a:3a:69:62:76:c3:76:90:2d: 54:63:b3:f6:c1:ff:a0:6a:15:a3:95:9e:59:03:6a: 3d:c9:cc:59:5b:83:00:73:ef:ab:84:63:07:8e:13: 57:34:a5:37:f7:cc:88:e1:1c:e7:4f:db:eb:5b:e4: 28:64:63:67:c0:0f:d0:92:be:ae:5f:82:d7:a4:af: df:48:f2:4b:55:46:e9:b2:cc:97:8b:22:00:f5:fa: 9d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:69:83:E0:6F:F8:08:F7:AA:4E:87:EC:2C:10:9C:38:35:34:71:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a9afe68-8094-375c-b738-96068d4adc6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:1f:0e:44:4a:d8:48:7c:51:bf:7c:90:05:28:84:f0:0a:19: 38:54:2d:32:10:9a:fd:a7:4e:70:7b:97:42:0f:20:be:3f:51: bb:4f:06:73:ba:c1:2f:e6:19:15:ea:a8:b7:f9:bb:da:0c:ac: bb:44:43:ec:5d:2a:9f:6b:bc:ae:39:45:3d:52:7a:4b:ee:a5: aa:ab:ff:ed:9a:6e:3c:fb:cf:c7:af:9b:f7:b7:6a:43:96:e1: e0:2e:e1:fd:e1:f8:38:f0:57:53:48:89:2f:76:bc:1a:56:f0: 64:00:7e:69:4c:66:d1:5a:fc:9c:e9:1f:de:39:8f:50:f7:8a: 9f:6c:79:b3:d7:9a:b1:09:8d:ea:8f:04:05:d3:b7:ca:31:da: 22:87:30:44:1d:8e:36:34:4a:27:ce:8f:50:d9:13:ec:fb:76: de:ce:b3:62:0e:ce:cc:d5:6a:7f:8e:fe:51:fd:c1:81:e5:ab: aa:de:e8:68:bd:67:66:2d:45:86:18:aa:d9:40:3f:d5:46:91: 02:47:e8:40:21:58:8f:73:92:5f:ee:bf:71:e8:97:84:d0:e4: 22:0b:36:71:37:8f:34:5a:76:9b:20:8d:29:5d:23:80:38:47: 68:f1:91:66:89:79:52:9f:c6:b1:0e:ce:d0:84:99:e1:99:d0: 2d:96:1b:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUhZrCpPlp8QowAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzIzOTMwMjYtZTdmNi00OWJhLWE2NWItZmY4OTE2M2I2MWZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbpvR5xGwvAul59yq3uSlu/25X7BjG3WuqDj K1sJyuQlTy1WUQFdbdWAXXFYTq3jQI+DHRGtg9YxkfcON5VhRYjxIi8TRyySdWtQ 3Uqu+oDIuByzffkH2lcJw9sV1ykIK5gdl4DdL9bmIAtahPaLfJURdaJ2wpxtEwtX MzF2fpOlc45pRjF975JRj/Gbq6CT61zb5viUTuCL7LSghxlYjosQouSdJIrDVVOK OmlidsN2kC1UY7P2wf+gahWjlZ5ZA2o9ycxZW4MAc++rhGMHjhNXNKU398yI4Rzn T9vrW+QoZGNnwA/Qkr6uX4LXpK/fSPJLVUbpssyXiyIA9fqdkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF1pg+Bv+Aj3qk6H7CwQnDg1NHH8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE5YWZlNjgtODA5NC0z NzVjLWI3MzgtOTYwNjhkNGFkYzZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMfDkRK2Eh8Ub98kAUohPAKGThULTIQmv2nTnB7l0IPIL4/UbtPBnO6 wS/mGRXqqLf5u9oMrLtEQ+xdKp9rvK45RT1Sekvupaqr/+2abjz7z8evm/e3akOW 4eAu4f3h+DjwV1NIiS92vBpW8GQAfmlMZtFa/JzpH945j1D3ip9sebPXmrEJjeqP BAXTt8ox2iKHMEQdjjY0SifOj1DZE+z7dt7Os2IOzszVan+O/lH9wYHlq6re6Gi9 Z2YtRYYYqtlAP9VGkQJH6EAhWI9zkl/uv3Hol4TQ5CILNnE3jzRadpsgjSldI4A4 R2jxkWaJeVKfxrEOztCEmeGZ0C2WG+M= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:38 2025 by rpki-client