$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa File: 2af33beb-28bf-3e20-8796-37fd8256bd13.roa (raw, json) Hash identifier: aP8kuGOPAsDPq5W5NPqA9L+FxiuyI7J8Jt+HPCAWPOA= Subject key identifier: 32:36:28:1E:05:D8:1F:2F:E1:48:40:29:C5:35:68:FD:CC:CB:46:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841148D6E5FF060F1743D200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:48:d6:e5:ff:06:0f:17:43:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0b56e046-8a4c-49a7-8f1c-4f90b6665bca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:2b:dc:7d:f4:e7:f9:db:69:e2:89:84:8e:e8: 69:0f:86:13:cb:45:67:8c:a2:76:28:d0:a6:34:2b: f9:2e:87:db:0c:25:b0:97:3a:41:be:6f:d1:dc:13: 8f:8f:9e:a6:90:23:f7:86:c5:01:9e:8f:e2:72:ae: 6c:dc:5c:d5:54:64:72:81:a6:b3:ac:f3:af:e5:11: 80:ef:c6:5a:75:57:aa:e8:a9:82:ee:4d:5c:f3:61: 2a:0e:a2:2a:3d:aa:5b:ed:f7:3f:e7:02:8e:0b:4e: 68:33:7c:4d:98:9b:72:dd:ea:df:22:6d:4e:49:52: da:e2:f3:b1:73:9c:21:2c:4f:c0:59:3e:cb:9c:ee: 43:20:16:d3:a1:0f:6c:56:ef:ca:b5:61:df:ce:c8: 62:73:98:9d:cb:17:58:85:4d:1d:55:b5:54:b4:63: 81:dd:50:e3:ea:39:fe:4a:b7:e0:bf:49:6c:92:be: 06:8e:3a:99:9a:20:e0:ca:47:9d:83:75:a0:06:82: a9:55:a5:7b:b7:92:75:b3:4e:aa:63:3d:33:4a:63: db:1b:fa:d3:9f:5c:d6:d8:c3:15:65:aa:61:de:20: 3b:a0:c5:8a:a9:dd:ce:59:d6:d2:19:f2:f8:f3:6e: b6:5b:90:95:62:49:50:81:e8:b8:5a:87:88:99:e7: 83:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:36:28:1E:05:D8:1F:2F:E1:48:40:29:C5:35:68:FD:CC:CB:46:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:1c:12:39:1e:cb:0e:da:88:31:42:51:be:bc:aa:30:e4:e5: fe:f8:5e:8f:c9:fb:c3:3b:8b:d6:71:ba:da:7f:c9:d3:66:4b: 86:4d:23:71:86:7c:ed:f9:2f:64:63:d9:7c:5d:21:ca:e1:b6: 48:73:1a:3b:04:bc:b9:22:d4:2c:ed:fb:95:09:6d:24:32:09: b1:6a:83:74:a0:0d:36:97:aa:33:f0:62:79:0a:cd:ef:b1:33: ee:66:af:21:25:08:f8:f2:e0:c5:2b:73:98:87:b8:f6:e3:2c: d4:f9:0b:b3:55:44:77:c5:86:63:c5:02:f1:c8:03:aa:da:9c: 56:93:ab:16:97:96:2f:35:e5:7c:e5:6b:f2:92:c3:d9:d8:8d: 7d:9c:56:eb:b7:69:f2:47:72:b8:0e:a2:6e:3f:91:fc:f3:9c: d4:6d:0c:2e:88:a9:be:11:9b:6e:c6:03:25:58:8b:89:88:e1: 5e:06:ae:0a:67:c3:62:8d:af:2e:01:d1:4a:a2:f8:c3:d2:3e: 51:c9:c9:7e:68:ca:b6:b6:81:7c:bd:bc:bb:95:aa:83:da:1c: f0:14:80:19:f6:a4:e9:4c:06:4e:68:42:8b:4b:d0:70:28:f8: 9b:c4:49:93:c4:5d:32:2b:02:4f:40:0c:8a:0c:f6:fe:9b:2f: b1:9e:61:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUjW5f8GDxdD0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGI1NmUwNDYtOGE0Yy00OWE3LThmMWMtNGY5MGI2NjY1YmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCvcffTn+dtp4omEjuhpD4YTy0VnjKJ2KNCm NCv5LofbDCWwlzpBvm/R3BOPj56mkCP3hsUBno/icq5s3FzVVGRygaazrPOv5RGA 78ZadVeq6KmC7k1c82EqDqIqPapb7fc/5wKOC05oM3xNmJty3erfIm1OSVLa4vOx c5whLE/AWT7LnO5DIBbToQ9sVu/KtWHfzshic5idyxdYhU0dVbVUtGOB3VDj6jn+ Srfgv0lskr4GjjqZmiDgykedg3WgBoKpVaV7t5J1s06qYz0zSmPbG/rTn1zW2MMV Zaph3iA7oMWKqd3OWdbSGfL48262W5CVYklQgei4WoeImeeD1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDI2KB4F2B8v4UhAKcU1aP3My0ZjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmFmMzNiZWItMjhiZi0z ZTIwLTg3OTYtMzdmZDgyNTZiZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKkcEjkeyw7aiDFCUb68qjDk5f74Xo/J+8M7i9Zxutp/ydNmS4ZNI3GG fO35L2Rj2XxdIcrhtkhzGjsEvLki1Czt+5UJbSQyCbFqg3SgDTaXqjPwYnkKze+x M+5mryElCPjy4MUrc5iHuPbjLNT5C7NVRHfFhmPFAvHIA6ranFaTqxaXli815Xzl a/KSw9nYjX2cVuu3afJHcrgOom4/kfzznNRtDC6Iqb4Rm27GAyVYi4mI4V4Grgpn w2KNry4B0Uqi+MPSPlHJyX5oyra2gXy9vLuVqoPaHPAUgBn2pOlMBk5oQotL0HAo +JvESZPEXTIrAk9ADIoM9v6bL7GeYXU= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:42 2025 by rpki-client