$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39706815-eaf4-3076-a7f8-18b455781e7d.roa File: 39706815-eaf4-3076-a7f8-18b455781e7d.roa (raw, json) Hash identifier: 3fwvptAqa7AC/rbFQqEhrBUKnrcD+e7GseCmCRrk6S4= Subject key identifier: 18:FA:19:42:91:78:50:C6:12:56:07:65:AC:67:64:32:8B:AF:F2:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FFAE13FBD189FDC07A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39706815-eaf4-3076-a7f8-18b455781e7d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:ae:13:fb:d1:89:fd:c0:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9e06a834-35ae-4ba7-8785-7833b07a35c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:39:36:8b:ff:5e:01:fa:95:d8:e7:bf:de:88: 85:3a:a0:94:a1:b7:f6:78:5a:6e:1a:00:e7:7f:5e: 6e:0e:3b:b3:42:53:78:6b:ba:13:68:23:4f:c5:ff: 35:71:f5:e6:69:88:4a:20:61:69:a8:52:62:23:8c: 33:9e:28:4d:df:a8:5a:8f:35:91:fe:ae:e7:18:6e: fb:02:bf:33:98:1b:e1:a9:34:27:c0:cd:0c:0d:d1: bf:9a:c6:67:05:68:64:f2:8f:40:e4:be:0b:0e:70: b2:27:48:e4:45:38:d7:c9:4c:45:7e:a0:5d:1f:8c: 35:9d:5b:ba:00:ac:0f:e3:ec:b2:9b:1f:46:47:66: c4:a6:a7:b4:f9:ae:e4:bc:f0:ce:c3:8f:a8:de:32: f0:71:23:01:ca:1c:f3:b5:f0:35:80:06:cc:72:e2: e3:e4:2f:1d:9f:45:ec:83:64:c4:26:9b:20:f9:84: 6d:ff:bd:81:49:12:f4:df:08:3d:21:2a:52:12:e5: 7e:a9:bc:5c:50:7a:4d:1c:9b:35:9a:99:df:e5:e7: a1:90:8c:c7:f4:ff:ed:4e:8f:51:2f:69:20:f0:e6: 1e:03:ce:15:d3:fb:00:92:71:1f:17:7c:2c:02:c6: 25:65:0a:e6:fa:2a:75:bb:76:9a:56:97:64:97:93: 23:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:FA:19:42:91:78:50:C6:12:56:07:65:AC:67:64:32:8B:AF:F2:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/39706815-eaf4-3076-a7f8-18b455781e7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:5a:89:a3:76:c1:27:50:1a:df:c9:4c:1f:18:df:16:71:fb: 45:82:44:93:5e:02:24:81:ab:94:2c:9b:15:79:19:c7:93:ac: 0b:43:ee:c3:de:92:65:9a:73:52:9d:04:50:58:cf:5a:57:56: ce:2b:2e:0b:8b:bd:01:56:1e:eb:d6:a2:4b:b7:9b:b3:1f:df: 1e:b9:c1:c2:55:88:f2:30:2f:6f:25:38:6d:cd:a8:79:a8:de: 67:91:0b:97:fb:0f:12:3a:e1:c2:bd:2e:7a:f5:d5:73:20:fc: 83:66:2e:a4:d2:d6:25:f6:c7:5b:8c:02:86:2e:03:b9:50:44: a9:b9:f9:08:b8:67:27:37:90:10:f7:a6:16:c3:3b:c2:64:8e: 24:dc:1c:af:55:e3:54:7e:b2:d9:c2:29:34:f8:32:0a:16:4f: 31:e8:20:ac:28:b1:10:fb:d0:4d:87:3d:71:bc:48:07:cc:09: 4d:02:e8:5c:8c:df:2a:24:d4:b0:33:ce:d8:aa:ca:bc:16:7f: 82:4c:ac:38:42:c3:0a:24:24:dc:24:db:05:39:4d:dc:23:0b: 54:96:97:c8:fd:28:c0:eb:a1:ab:be:54:3e:e9:73:97:56:a0: c8:0f:03:79:a5:2e:91:81:d7:80:e6:99:3f:7c:88:ed:33:0c: 2f:f1:db:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf+uE/vRif3AegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWUwNmE4MzQtMzVhZS00YmE3LTg3ODUtNzgzM2IwN2EzNWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtzk2i/9eAfqV2Oe/3oiFOqCUobf2eFpuGgDn f15uDjuzQlN4a7oTaCNPxf81cfXmaYhKIGFpqFJiI4wznihN36hajzWR/q7nGG77 Ar8zmBvhqTQnwM0MDdG/msZnBWhk8o9A5L4LDnCyJ0jkRTjXyUxFfqBdH4w1nVu6 AKwP4+yymx9GR2bEpqe0+a7kvPDOw4+o3jLwcSMByhzztfA1gAbMcuLj5C8dn0Xs g2TEJpsg+YRt/72BSRL03wg9ISpSEuV+qbxcUHpNHJs1mpnf5eehkIzH9P/tTo9R L2kg8OYeA84V0/sAknEfF3wsAsYlZQrm+ip1u3aaVpdkl5MjiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBj6GUKReFDGElYHZaxnZDKLr/L/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzk3MDY4MTUtZWFmNC0z MDc2LWE3ZjgtMThiNDU1NzgxZTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACtaiaN2wSdQGt/JTB8Y3xZx+0WCRJNeAiSBq5QsmxV5GceTrAtD7sPe kmWac1KdBFBYz1pXVs4rLguLvQFWHuvWoku3m7Mf3x65wcJViPIwL28lOG3NqHmo 3meRC5f7DxI64cK9Lnr11XMg/INmLqTS1iX2x1uMAoYuA7lQRKm5+Qi4Zyc3kBD3 phbDO8JkjiTcHK9V41R+stnCKTT4MgoWTzHoIKwosRD70E2HPXG8SAfMCU0C6FyM 3yok1LAzztiqyrwWf4JMrDhCwwokJNwk2wU5TdwjC1SWl8j9KMDroau+VD7pc5dW oMgPA3mlLpGB14DmmT98iO0zDC/x28k= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:00 2025 by rpki-client