$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa File: 3a89969d-cb44-3660-b08d-0ac39c358c16.roa (raw, json) Hash identifier: rFhjqSEdGrrZt5ZvMf5eZFgF+BZ3fEKaFaivzx7oBcc= Subject key identifier: 5F:DC:7E:88:2F:9B:7B:B4:3D:CA:81:EE:7A:CB:68:62:9B:23:8A:09 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412030AE9D150688B81EDC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:03:0a:e9:d1:50:68:8b:81:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=12c23060-7274-45f9-ad7a-5137dcc84ca5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:b8:b3:43:c1:5c:ff:5f:25:81:18:b2:11: 60:90:62:58:57:a6:3c:4c:8b:c4:31:7a:6a:fe:d2: 0c:c6:56:b5:0b:03:cc:e9:e8:26:5c:02:1f:96:55: da:0e:6a:b8:1e:62:a7:42:0e:f9:63:a3:23:26:55: bc:5f:42:62:10:8c:2e:4d:0d:b9:5e:e0:f5:8a:a5: 6b:ed:c2:b1:a7:bd:f6:0c:99:f1:7a:a4:ae:55:81: 22:77:85:a9:8f:56:e9:03:a4:4e:03:56:b6:59:80: df:c0:8c:ee:e7:af:37:32:9e:b6:e1:5a:24:f2:22: 8f:07:72:78:1b:94:8d:07:d1:0e:37:43:6e:64:b7: 15:51:c5:8f:7f:af:d5:a8:ae:ff:b6:b5:cb:1a:fd: 6d:3a:09:14:53:56:37:3a:f2:b0:3e:eb:83:a5:99: 83:29:e3:5f:e9:90:81:1c:7b:a5:58:e6:32:2c:cc: d4:a0:99:eb:97:53:9a:96:1c:b6:b4:20:70:b0:34: 1a:44:0f:61:8a:ce:55:25:b4:c0:63:17:70:90:00: f8:63:21:c9:8b:8b:46:f2:c3:20:49:61:78:d3:3b: fa:74:aa:8a:c2:4d:ab:96:88:a9:8d:52:49:a3:24: fa:d5:fc:eb:44:e4:fb:2e:fb:10:11:19:e8:cb:82: d9:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:7E:88:2F:9B:7B:B4:3D:CA:81:EE:7A:CB:68:62:9B:23:8A:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3a89969d-cb44-3660-b08d-0ac39c358c16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d0:79:61:ba:ce:64:e2:d3:f1:3b:df:6b:90:c2:59:a0:a7:59: 9c:a0:e1:21:8c:ba:fa:ed:e3:9b:07:a1:3c:9d:89:c6:30:7f: ef:2d:bc:0c:33:57:d5:5c:5c:a7:b9:32:58:44:97:bd:c6:a9: a9:66:59:0e:1e:6d:b5:59:13:58:fd:63:f4:93:5d:c5:b9:08: 64:65:96:cf:14:74:69:57:02:b3:fd:66:72:54:61:a3:9d:ca: 44:ed:32:36:43:7b:43:ad:2b:50:87:20:22:a2:41:07:e8:0d: 32:4c:0e:c0:1c:a8:c4:f9:fb:fc:34:a8:ec:a0:b1:9c:e5:ed: c5:31:73:23:5d:07:39:13:e1:2f:6f:4b:0a:bd:49:48:54:cd: 2b:f7:f6:7a:57:c9:01:6c:15:d3:76:0c:13:94:8e:24:e1:ab: dc:9d:d0:a0:fe:7f:43:32:45:9c:09:2e:1d:e1:6e:ab:df:03: 29:5e:8d:6d:b5:b1:d4:51:8a:d0:18:36:12:f9:68:85:bd:33: 0b:7f:4d:10:9d:56:9d:e0:04:54:c1:c1:19:44:db:ed:a1:ea: e0:b4:8a:4c:3e:f0:8b:21:6f:b2:c3:ae:2a:c6:76:a0:2f:64: 89:10:ac:c4:8e:f3:97:9a:d8:28:e9:8b:c7:0f:9f:3b:16:ed: 80:e5:57:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgMK6dFQaIuB7cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTJjMjMwNjAtNzI3NC00NWY5LWFkN2EtNTEzN2RjYzg0Y2E1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApu+4s0PBXP9fJYEYshFgkGJYV6Y8TIvEMXpq /tIMxla1CwPM6egmXAIfllXaDmq4HmKnQg75Y6MjJlW8X0JiEIwuTQ25XuD1iqVr 7cKxp732DJnxeqSuVYEid4Wpj1bpA6ROA1a2WYDfwIzu5683Mp624Vok8iKPB3J4 G5SNB9EON0NuZLcVUcWPf6/VqK7/trXLGv1tOgkUU1Y3OvKwPuuDpZmDKeNf6ZCB HHulWOYyLMzUoJnrl1Oalhy2tCBwsDQaRA9his5VJbTAYxdwkAD4YyHJi4tG8sMg SWF40zv6dKqKwk2rloipjVJJoyT61fzrROT7LvsQERnoy4LZDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/cfogvm3u0PcqB7nrLaGKbI4oJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2E4OTk2OWQtY2I0NC0z NjYwLWIwOGQtMGFjMzljMzU4YzE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANB5YbrOZOLT8Tvfa5DCWaCnWZyg4SGMuvrt45sHoTydicYwf+8tvAwz V9VcXKe5MlhEl73GqalmWQ4ebbVZE1j9Y/STXcW5CGRlls8UdGlXArP9ZnJUYaOd ykTtMjZDe0OtK1CHICKiQQfoDTJMDsAcqMT5+/w0qOygsZzl7cUxcyNdBzkT4S9v Swq9SUhUzSv39npXyQFsFdN2DBOUjiThq9yd0KD+f0MyRZwJLh3hbqvfAylejW21 sdRRitAYNhL5aIW9Mwt/TRCdVp3gBFTBwRlE2+2h6uC0ikw+8Ishb7LDrirGdqAv ZIkQrMSO85ea2Cjpi8cPnzsW7YDlV6c= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:41 2025 by rpki-client