$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa File: 3507b290-125c-3f58-85ba-ed6602ee5ef5.roa (raw, json) Hash identifier: 1r/PYEKgmPyU8Gb5TzUiYEW2X6ijttjEHuuECMilFTI= Subject key identifier: 53:2A:33:C1:D8:E3:09:94:56:DA:7F:2E:B1:62:80:2B:86:4D:7F:9F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841144D8FDFB0D5C531DDF48 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:44:d8:fd:fb:0d:5c:53:1d:df:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1ae5493a-ec65-4013-80bb-72b2babbcecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:31:b6:20:ca:4f:e7:e8:a4:83:f9:ce:f2:8b: ea:b4:70:2f:1a:3e:bb:8c:9b:fd:84:09:64:17:19: 13:00:82:c1:30:d0:d9:57:eb:5a:10:f6:b4:dc:ed: 10:fd:f8:ee:4c:80:96:62:1a:b0:e2:14:d9:52:72: 34:eb:14:d3:1a:5f:e2:04:df:37:3f:3a:b9:ba:ea: 3a:94:47:cc:39:30:5e:b1:6c:1d:f7:99:54:42:eb: b2:7b:d0:42:5f:d0:ae:30:6f:93:97:16:34:df:1b: 57:49:a1:0f:fe:0f:e8:c6:88:d1:be:ed:0e:f9:ad: 62:4e:82:1c:1d:08:b5:25:77:cb:f5:0f:c6:57:c5: 02:0f:52:96:9b:74:24:3f:1f:9e:dc:a2:b7:4e:3e: e8:45:e6:c8:9a:3c:8d:db:67:ce:06:c8:14:de:41: 9f:61:fe:8d:92:e9:bb:31:f8:e4:57:10:56:b6:3e: ab:33:56:3c:d0:38:c9:6a:13:de:38:e8:37:5b:82: a3:dc:fc:d3:3e:3d:ab:4c:eb:93:c2:47:d1:0a:ed: 81:a4:23:8f:90:f3:a4:21:ba:c2:48:a2:37:71:0d: 8d:d8:ad:5c:16:aa:42:95:4e:31:2f:c8:98:d0:e0: c0:4c:6b:28:26:43:f8:d1:db:ca:34:4c:a8:23:18: d1:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:2A:33:C1:D8:E3:09:94:56:DA:7F:2E:B1:62:80:2B:86:4D:7F:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:5e:c8:c8:87:b8:85:4e:f1:4c:4e:74:0b:70:2c:d1:7d:22: 9c:89:f0:3e:12:8a:b6:ee:e6:7b:5b:06:d5:04:0d:7f:6e:7b: d4:8a:5f:51:fd:e3:c5:a7:dc:3e:1a:2e:cb:5f:f4:41:ab:1d: d9:27:a2:03:8a:78:a4:00:8a:6f:d9:2b:eb:0f:d0:6e:bc:37: e0:af:59:c0:89:41:a5:7f:d8:6c:6e:7d:56:5d:10:f5:41:f5: a7:e4:cf:9d:8a:72:69:d4:ba:b6:b0:ef:43:2c:23:96:1b:05: 92:0e:2d:21:75:b6:49:67:1a:49:35:08:b4:c3:a7:ee:92:be: 08:6c:02:d0:dc:7c:c3:30:b5:28:e1:89:2e:0a:a8:1a:a9:21: 0d:eb:c6:c7:8d:2b:92:7a:ef:49:57:cd:8d:b5:43:5a:1b:94: ad:89:c1:2a:66:66:4c:af:5d:47:9b:37:b7:fa:f6:09:23:d5: 23:3c:b7:6e:27:30:23:2e:ad:b6:0e:5e:b7:a0:66:c8:69:13: f6:bc:36:73:2c:2e:72:d8:7c:d9:b6:78:a5:77:9b:a8:af:8f: c5:8f:f5:9f:e4:8b:67:2d:bd:00:f3:a3:1a:23:4a:8c:55:ea: d3:03:b6:cb:98:bb:df:67:0b:9b:7d:07:93:cf:a0:98:9a:f2: e1:09:cf:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUTY/fsNXFMd30gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWFlNTQ5M2EtZWM2NS00MDEzLTgwYmItNzJiMmJhYmJjZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTG2IMpP5+ikg/nO8ovqtHAvGj67jJv9hAlk FxkTAILBMNDZV+taEPa03O0Q/fjuTICWYhqw4hTZUnI06xTTGl/iBN83Pzq5uuo6 lEfMOTBesWwd95lUQuuye9BCX9CuMG+TlxY03xtXSaEP/g/oxojRvu0O+a1iToIc HQi1JXfL9Q/GV8UCD1KWm3QkPx+e3KK3Tj7oRebImjyN22fOBsgU3kGfYf6Nkum7 MfjkVxBWtj6rM1Y80DjJahPeOOg3W4Kj3PzTPj2rTOuTwkfRCu2BpCOPkPOkIbrC SKI3cQ2N2K1cFqpClU4xL8iY0ODATGsoJkP40dvKNEyoIxjRswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMqM8HY4wmUVtp/LrFigCuGTX+fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzUwN2IyOTAtMTI1Yy0z ZjU4LTg1YmEtZWQ2NjAyZWU1ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ9eyMiHuIVO8UxOdAtwLNF9IpyJ8D4Sirbu5ntbBtUEDX9ue9SKX1H9 48Wn3D4aLstf9EGrHdknogOKeKQAim/ZK+sP0G68N+CvWcCJQaV/2GxufVZdEPVB 9afkz52KcmnUuraw70MsI5YbBZIOLSF1tklnGkk1CLTDp+6SvghsAtDcfMMwtSjh iS4KqBqpIQ3rxseNK5J670lXzY21Q1oblK2JwSpmZkyvXUebN7f69gkj1SM8t24n MCMurbYOXregZshpE/a8NnMsLnLYfNm2eKV3m6ivj8WP9Z/ki2ctvQDzoxojSoxV 6tMDtsuYu99nC5t9B5PPoJia8uEJz1w= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:00 2025 by rpki-client