$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe572f-9792-3c11-892a-f18bb9a98374.roa File: 36fe572f-9792-3c11-892a-f18bb9a98374.roa (raw, json) Hash identifier: G4uxwHzyeVwgbxzhvFWNUwGc9fSi+QEFw4oz67O66+A= Subject key identifier: CB:8B:AA:DD:01:2C:07:13:01:B4:29:EF:82:6D:16:E8:94:09:00:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FA3A2688C54AF7DD7180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe572f-9792-3c11-892a-f18bb9a98374.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.22.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fa:3a:26:88:c5:4a:f7:dd:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=264bfc19-9c04-46ac-9ebb-bf2334910ae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:e9:fd:b3:8d:34:a9:ad:88:76:d2:d0:fe: 16:c5:91:f0:aa:a8:56:0c:b0:ea:e1:97:2c:20:5a: f5:c3:44:e5:05:8c:1f:a0:8a:a2:c5:33:72:3a:f0: 6e:48:02:f6:91:da:6b:90:5a:d2:a5:64:98:19:3d: 9e:7e:24:57:b0:03:d4:6b:3d:21:4a:c4:d3:be:75: ac:3a:16:9a:e0:6c:3f:16:54:e0:dd:ee:bc:13:09: 84:d3:4f:69:c4:63:9e:2c:45:b3:00:ae:d0:51:e1: 33:ba:c3:af:d7:04:cd:28:d2:d6:bc:9a:5a:df:2b: 53:0f:92:9b:ca:f3:36:53:a5:e7:f9:a0:6a:4d:02: 55:02:3c:80:e1:9e:b0:4a:42:8e:c5:c2:59:e4:49: 52:6e:21:61:97:b2:23:c1:53:23:c3:8c:df:f8:c7: 04:2e:c3:7b:04:43:49:a9:43:4f:65:1f:d2:d0:cb: de:6b:d3:12:e7:f9:3b:21:1a:85:a8:b0:59:f1:da: 4d:83:47:25:42:3a:b4:c6:05:1b:4e:92:89:03:30: 51:68:94:ec:65:9f:52:00:e2:17:23:18:e7:90:9b: 64:03:55:16:b6:96:2b:c5:33:00:ac:8d:a1:0d:0c: 90:77:80:b4:12:73:08:62:3e:9c:0f:da:19:9c:ce: 54:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:8B:AA:DD:01:2C:07:13:01:B4:29:EF:82:6D:16:E8:94:09:00:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/36fe572f-9792-3c11-892a-f18bb9a98374.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.22.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:06:45:a6:a7:95:90:17:13:14:b6:8e:73:d6:63:b2:9f:fd: d7:37:de:1e:54:92:f5:e6:12:b3:02:82:c4:49:c4:fb:59:39: 20:fc:4c:c3:77:48:48:83:5b:fe:6d:a2:d1:b4:17:6f:b1:72: 7f:e0:6e:d9:c3:61:57:76:9a:5f:a5:72:bd:ae:5f:89:43:ce: 32:06:2a:76:7f:76:7b:56:60:de:bb:f5:96:47:d6:2d:42:46: b3:b2:a7:5a:94:c3:77:bd:c5:b4:50:eb:17:e6:c4:f0:02:16: dd:1a:d9:ad:78:55:37:57:42:85:29:02:ef:ae:29:0d:66:ee: 4e:2f:7c:c2:ca:4b:af:b8:1d:8b:d9:c2:cf:f6:75:fa:fb:72: a3:ea:63:61:5e:8a:97:5e:b2:7c:eb:4d:a2:73:d7:e5:98:6d: 3d:30:c7:fd:1c:e6:ea:61:c6:ad:de:ff:79:83:54:d6:8f:c2: 9d:fe:da:ea:86:93:0c:d0:ad:36:78:42:24:79:75:98:0c:7d: 1d:ec:a5:a7:e8:27:6c:c7:1b:60:4e:ef:c4:ec:c7:f7:d5:1a: ef:21:46:68:9f:d1:f2:2a:b3:fd:64:9f:b9:2f:9f:b0:bb:46: 8a:10:95:c9:52:f6:39:68:23:4a:08:1d:d8:0a:47:8d:f8:b6: 4a:cc:d9:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfo6JojFSvfdcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjY0YmZjMTktOWMwNC00NmFjLTllYmItYmYyMzM0OTEwYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQXp/bONNKmtiHbS0P4WxZHwqqhWDLDq4Zcs IFr1w0TlBYwfoIqixTNyOvBuSAL2kdprkFrSpWSYGT2efiRXsAPUaz0hSsTTvnWs Ohaa4Gw/FlTg3e68EwmE009pxGOeLEWzAK7QUeEzusOv1wTNKNLWvJpa3ytTD5Kb yvM2U6Xn+aBqTQJVAjyA4Z6wSkKOxcJZ5ElSbiFhl7IjwVMjw4zf+McELsN7BENJ qUNPZR/S0Mvea9MS5/k7IRqFqLBZ8dpNg0clQjq0xgUbTpKJAzBRaJTsZZ9SAOIX IxjnkJtkA1UWtpYrxTMArI2hDQyQd4C0EnMIYj6cD9oZnM5U5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMuLqt0BLAcTAbQp74JtFuiUCQAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzZmZTU3MmYtOTc5Mi0z YzExLTg5MmEtZjE4YmI5YTk4Mzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHgGRaanlZAXExS2jnPWY7Kf/dc33h5UkvXmErMCgsRJxPtZOSD8TMN3 SEiDW/5totG0F2+xcn/gbtnDYVd2ml+lcr2uX4lDzjIGKnZ/dntWYN679ZZH1i1C RrOyp1qUw3e9xbRQ6xfmxPACFt0a2a14VTdXQoUpAu+uKQ1m7k4vfMLKS6+4HYvZ ws/2dfr7cqPqY2FeipdesnzrTaJz1+WYbT0wx/0c5uphxq3e/3mDVNaPwp3+2uqG kwzQrTZ4QiR5dZgMfR3spafoJ2zHG2BO78Tsx/fVGu8hRmif0fIqs/1kn7kvn7C7 RooQlclS9jloI0oIHdgKR434tkrM2ec= -----END CERTIFICATE-----Generated at Sat Jul 26 00:12:44 2025 by rpki-client