$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa File: 32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa (raw, json) Hash identifier: J0eLWYVGSgQf7e84qhosozdCWCiDy86l4nG+9UPSxwE= Subject key identifier: A8:E5:D0:80:CC:7D:61:51:30:FA:62:B1:9A:A5:56:13:F0:07:0A:DB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841202717A942E291706CB40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:02:71:7a:94:2e:29:17:06:cb:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9b37b31d-7647-4621-bc7a-674236656cec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:d5:dc:b4:32:b4:70:5f:6f:b7:88:29:dc:c4: c1:4a:b5:3b:4f:22:64:d6:66:49:d2:84:21:77:eb: 48:5e:a7:99:76:a9:95:9b:71:da:6b:83:f5:51:40: 31:86:07:ec:6d:7f:e1:ea:28:5d:78:e7:b9:11:a0: d5:33:92:30:1e:a6:99:2c:24:11:aa:20:61:72:3f: 26:1a:ba:d8:f4:c3:5a:af:62:35:65:d5:dc:2e:75: cc:83:63:27:74:06:dd:05:4f:9f:5a:5a:86:d9:f2: c6:bf:d9:d1:67:dc:20:41:93:65:35:d0:bb:3e:dc: 6a:f5:56:c0:65:ed:04:e3:b9:79:3c:bd:8f:b9:6d: 9b:15:ba:63:39:39:fc:41:08:e5:da:15:d4:b9:71: c1:6c:16:c7:d3:54:5b:50:d7:d7:89:28:10:f4:27: b7:c3:d8:b0:fd:59:ba:68:3f:19:d3:bf:b9:79:ec: 0f:f4:95:4c:13:4a:c2:e3:f5:b9:82:56:77:35:bf: ef:2c:15:68:0d:5f:1a:21:82:3e:15:bb:b7:4f:c5: e5:f3:d2:3a:4d:3f:b5:6e:c8:b9:d6:c3:07:30:3c: 04:dd:ab:9e:ed:5f:ca:96:3a:bd:f7:be:bb:c5:eb: 07:3e:db:91:04:3f:93:73:1d:04:b6:fb:d0:60:fe: 3a:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:E5:D0:80:CC:7D:61:51:30:FA:62:B1:9A:A5:56:13:F0:07:0A:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:21:f9:8b:88:5f:18:01:f5:9b:cd:98:e2:ae:53:04:a4:8a: 75:27:6c:20:e1:34:a7:a8:89:b8:c4:5f:02:12:00:7f:cb:4f: f1:98:92:83:14:97:51:2c:d1:16:74:6e:d0:e3:21:12:ec:34: 12:3f:0b:9c:3c:7b:5f:3c:74:d6:fd:e3:42:50:92:d7:1c:0d: 05:2b:0e:bf:4f:08:31:d9:a9:19:eb:64:90:13:62:e2:3c:e9: 0c:73:03:12:4b:7f:e7:86:67:c2:18:99:07:4f:5f:aa:22:e7: 7c:f0:e7:bd:72:ee:17:da:2a:fc:ed:a3:51:be:0e:de:74:ea: cf:ac:7c:23:f4:78:8a:2f:26:ec:d1:3f:69:a9:b9:78:47:8f: 76:e8:dc:a9:d0:c5:e1:a4:ad:bc:a6:77:e0:fb:b4:1c:c6:c2: b6:f5:d6:ba:73:69:e9:a4:5a:73:75:3e:52:7d:f9:9d:e3:43: e9:ce:e2:26:a2:f4:84:d4:ad:25:dc:42:14:3f:07:b1:ed:fa: 8c:8c:92:4e:ed:59:b4:83:f2:55:79:52:3c:1a:40:34:79:96: e9:4d:55:da:b3:47:01:05:3a:97:aa:fc:80:e4:3b:3b:a0:5a: a4:ea:f5:87:31:b0:7c:d9:c9:21:df:dd:0a:f8:8d:22:e6:09: c9:17:13:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgJxepQuKRcGy0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWIzN2IzMWQtNzY0Ny00NjIxLWJjN2EtNjc0MjM2NjU2Y2VjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitXctDK0cF9vt4gp3MTBSrU7TyJk1mZJ0oQh d+tIXqeZdqmVm3Haa4P1UUAxhgfsbX/h6ihdeOe5EaDVM5IwHqaZLCQRqiBhcj8m GrrY9MNar2I1ZdXcLnXMg2MndAbdBU+fWlqG2fLGv9nRZ9wgQZNlNdC7Ptxq9VbA Ze0E47l5PL2PuW2bFbpjOTn8QQjl2hXUuXHBbBbH01RbUNfXiSgQ9Ce3w9iw/Vm6 aD8Z07+5eewP9JVME0rC4/W5glZ3Nb/vLBVoDV8aIYI+Fbu3T8Xl89I6TT+1bsi5 1sMHMDwE3aue7V/Kljq99767xesHPtuRBD+Tcx0EtvvQYP46AwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjl0IDMfWFRMPpisZqlVhPwBwrbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIzMzVlY2QtZWQzNC0z YWFlLTllMjYtZjM1ZDRkMjIwMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFwh+YuIXxgB9ZvNmOKuUwSkinUnbCDhNKeoibjEXwISAH/LT/GYkoMU l1Es0RZ0btDjIRLsNBI/C5w8e188dNb940JQktccDQUrDr9PCDHZqRnrZJATYuI8 6QxzAxJLf+eGZ8IYmQdPX6oi53zw571y7hfaKvzto1G+Dt506s+sfCP0eIovJuzR P2mpuXhHj3bo3KnQxeGkrbymd+D7tBzGwrb11rpzaemkWnN1PlJ9+Z3jQ+nO4iai 9ITUrSXcQhQ/B7Ht+oyMkk7tWbSD8lV5UjwaQDR5lulNVdqzRwEFOpeq/IDkOzug WqTq9YcxsHzZySHf3Qr4jSLmCckXE0I= -----END CERTIFICATE-----Generated at Sat Jul 26 20:14:22 2025 by rpki-client