$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30ac792c-270c-3870-94da-ed6d0b1a96c8.roa File: 30ac792c-270c-3870-94da-ed6d0b1a96c8.roa (raw, json) Hash identifier: 58Q3DV9YELtsEwDXIaIZJbskC280dYseon5aLodxvLM= Subject key identifier: 21:72:20:69:13:F6:B7:FF:77:2C:17:75:60:50:5D:15:66:F2:A1:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841202EC891A88B737440120 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30ac792c-270c-3870-94da-ed6d0b1a96c8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:02:ec:89:1a:88:b7:37:44:01:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=46ba67a3-71dd-48d5-a9ba-6c6c8b80df27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:cf:aa:7b:c0:73:27:10:40:eb:47:f3:9d:6c: ae:18:4c:db:24:a3:4e:1a:8b:b3:5c:cc:17:dd:36: 40:51:97:9b:22:82:ab:33:dd:10:54:2c:88:91:c2: d3:20:28:a8:01:ad:44:45:99:62:78:d1:1f:b8:23: a7:fd:37:ca:3d:2b:26:b3:ea:52:b5:e3:d6:ac:bd: ed:bc:68:36:53:08:a4:c3:cd:83:64:a9:6c:af:7a: d1:76:63:23:1d:07:09:2d:4e:fd:c0:9a:ef:eb:dc: ee:8b:31:bc:59:a1:49:75:31:c3:a7:a8:d2:2e:1a: 5e:68:15:1b:7d:2a:a8:cb:d3:08:0c:5e:82:28:6b: 88:e0:31:ab:d1:ef:2b:f4:a4:d9:68:ae:47:df:9f: ac:3d:ed:6d:30:d4:e1:0b:11:13:51:a5:61:3c:20: b1:6e:ba:a7:73:d8:a9:22:9e:af:52:3b:18:d7:e0: 5b:58:05:b1:4c:2e:b9:b0:7c:58:e0:43:3a:b5:6a: 65:78:6f:bf:97:dc:25:d4:94:7c:cd:af:89:2b:82: 7b:60:0c:73:6a:41:f9:20:ce:34:b5:d5:91:8e:94: f6:f3:0d:5c:9c:f8:08:0e:71:f0:34:bd:62:d5:b0: e2:2f:f5:a1:75:b0:84:c9:eb:01:f6:b0:b2:d1:15: 37:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:72:20:69:13:F6:B7:FF:77:2C:17:75:60:50:5D:15:66:F2:A1:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/30ac792c-270c-3870-94da-ed6d0b1a96c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:a6:43:5f:74:8a:2a:62:ac:f4:a4:e7:54:30:fd:83:9f:d2: 3e:4f:ac:96:ab:03:8d:ee:03:41:5d:ff:7d:56:06:9e:69:4c: 57:f8:f3:64:15:82:56:fe:28:7f:02:72:a8:b3:93:5e:6d:35: ec:5e:17:2b:e7:b7:0d:17:db:aa:29:d0:1b:b2:bd:48:af:14: 28:d0:51:17:be:b0:3f:e6:51:34:de:3d:32:74:9b:f9:cf:08: 7e:a1:0f:b3:93:83:14:2f:7d:e4:10:96:4a:6d:b4:dd:57:9a: ba:f1:5f:9b:e3:a9:f4:a6:79:3f:0b:41:99:db:48:85:48:5f: 45:08:69:ba:65:fe:4f:5a:64:fb:88:bc:77:a5:e5:6f:ba:23: 5c:a6:cc:df:c8:16:02:45:05:6d:fb:b3:a5:24:24:46:2b:e8: 9b:49:66:7b:c0:43:45:3d:ac:11:25:24:94:df:bf:2d:f5:20: a7:2f:59:b5:d8:df:86:4e:1e:80:a8:6e:d8:5d:63:d0:a4:df: 4f:7e:8c:92:d7:31:1d:b8:8b:6a:51:d0:e3:ec:b6:cb:48:6f: 46:0f:ba:88:5a:a0:dd:3e:a1:5f:95:5f:25:f7:3c:86:c6:91: 69:c0:30:68:ce:39:83:97:fa:74:e6:21:e8:ae:76:ba:f6:e4: 56:4d:69:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgLsiRqItzdEASAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDZiYTY3YTMtNzFkZC00OGQ1LWE5YmEtNmM2YzhiODBkZjI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc+qe8BzJxBA60fznWyuGEzbJKNOGouzXMwX 3TZAUZebIoKrM90QVCyIkcLTICioAa1ERZlieNEfuCOn/TfKPSsms+pStePWrL3t vGg2Uwikw82DZKlsr3rRdmMjHQcJLU79wJrv69zuizG8WaFJdTHDp6jSLhpeaBUb fSqoy9MIDF6CKGuI4DGr0e8r9KTZaK5H35+sPe1tMNThCxETUaVhPCCxbrqnc9ip Ip6vUjsY1+BbWAWxTC65sHxY4EM6tWpleG+/l9wl1JR8za+JK4J7YAxzakH5IM40 tdWRjpT28w1cnPgIDnHwNL1i1bDiL/WhdbCEyesB9rCy0RU3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCFyIGkT9rf/dywXdWBQXRVm8qHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzBhYzc5MmMtMjcwYy0z ODcwLTk0ZGEtZWQ2ZDBiMWE5NmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKGmQ190iipirPSk51Qw/YOf0j5PrJarA43uA0Fd/31WBp5pTFf482QV glb+KH8Ccqizk15tNexeFyvntw0X26op0BuyvUivFCjQURe+sD/mUTTePTJ0m/nP CH6hD7OTgxQvfeQQlkpttN1XmrrxX5vjqfSmeT8LQZnbSIVIX0UIabpl/k9aZPuI vHel5W+6I1ymzN/IFgJFBW37s6UkJEYr6JtJZnvAQ0U9rBElJJTfvy31IKcvWbXY 34ZOHoCobthdY9Ck309+jJLXMR24i2pR0OPststIb0YPuohaoN0+oV+VXyX3PIbG kWnAMGjOOYOX+nTmIeiudrr25FZNae8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:56 2025 by rpki-client