$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa File: 3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa (raw, json) Hash identifier: IzRQ0sVY3YLAd5wbq/GDcEU3Kt9LpEUo8mn22zkaJ5k= Subject key identifier: F9:FA:6A:41:46:DB:1F:E8:4B:35:DF:9D:42:3C:03:D1:27:B3:04:4D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114CC58C8341452552E000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4c:c5:8c:83:41:45:25:52:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1220dbae-6031-418d-beda-8a67b368b47f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:c4:f2:93:7e:ca:d2:fb:df:eb:46:bb:db:6c: df:a9:3d:ed:e5:56:02:b6:e4:ba:5e:39:cc:1d:17: cd:cd:5b:ba:46:a1:e6:c6:d5:f9:ab:d6:e4:ac:39: 6d:8e:51:a9:c0:86:e4:47:2e:f1:79:6a:33:f2:cf: 03:1d:75:08:99:75:ca:ef:9e:d0:a1:8b:7f:6a:02: a0:97:96:b7:54:10:f7:63:0e:0f:a9:1f:b8:f0:4e: f0:13:34:57:57:7e:fc:15:25:1e:5c:8f:81:a0:af: f5:17:e4:02:8c:37:a5:d2:ba:08:4d:25:5b:87:6b: 64:e9:86:c3:40:b8:bb:17:8b:34:04:41:13:15:fe: de:6d:c5:57:c2:4e:e7:92:02:1e:b7:8d:9e:8d:ce: 93:d7:b0:df:d2:71:e2:d3:d7:e5:fa:37:ad:07:2c: 91:ba:3a:46:e4:d2:3c:b9:14:1b:28:15:a9:48:3a: 87:bd:15:e2:a0:8c:07:84:a1:23:fe:69:f1:55:5c: 9c:fe:ca:b2:0a:d6:0b:85:ed:97:c1:d0:33:31:cb: 5f:42:19:f2:82:c5:d7:48:7d:ca:e6:34:4e:7f:71: fe:67:d0:1d:18:98:d0:28:cf:e0:5c:d1:a3:7d:67: d3:d0:31:dd:03:0f:21:8d:dd:ba:b6:90:8f:ef:b9: 09:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:FA:6A:41:46:DB:1F:E8:4B:35:DF:9D:42:3C:03:D1:27:B3:04:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f3e0bbf-6584-3a4b-9b47-9a4ddc23b404.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ba:14:6c:02:7c:c8:bd:76:38:e4:a2:3e:6c:a5:e1:bb:19:52: 32:26:41:60:f2:e7:47:e9:37:54:a4:64:82:41:da:10:c8:11: 43:1b:5b:6a:09:42:8d:58:c2:93:77:29:4e:8c:5a:ca:63:5d: 4a:c5:87:45:4a:26:34:c9:38:60:bb:1b:4f:1c:94:58:22:3e: 6d:4c:9b:e8:24:a9:90:6d:d0:d8:0c:8f:53:22:0d:a2:98:00: 53:eb:7a:1b:c2:50:0e:2b:13:9d:0d:f2:be:32:b2:72:c4:e7: 10:52:6c:5d:1a:16:8a:f4:bf:55:9b:f7:2a:6c:60:81:6f:28: 4a:a9:c5:97:07:7f:fc:52:d8:b1:7b:04:42:b1:42:2d:dd:99: 6e:cc:0c:c7:3c:16:1e:71:63:3a:f9:26:79:41:11:9a:8d:01: ec:2d:f6:42:70:78:eb:a8:c2:14:76:2c:20:99:44:36:e6:17: 94:84:6b:19:f1:bd:ba:29:bf:be:51:92:9c:06:b5:e9:2a:c0: ea:b2:aa:af:9b:69:c2:67:36:4e:7b:00:e6:63:3f:b5:53:fb: cd:1c:be:66:d0:0d:c2:e9:6a:2a:67:73:ea:cd:6f:2b:df:f2: 84:87:2c:32:84:af:5c:96:8f:07:74:7a:36:44:e5:be:f1:f0: 95:2d:70:e4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUzFjINBRSVS4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTIyMGRiYWUtNjAzMS00MThkLWJlZGEtOGE2N2IzNjhiNDdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8Tyk37K0vvf60a722zfqT3t5VYCtuS6XjnM HRfNzVu6RqHmxtX5q9bkrDltjlGpwIbkRy7xeWoz8s8DHXUImXXK757QoYt/agKg l5a3VBD3Yw4PqR+48E7wEzRXV378FSUeXI+BoK/1F+QCjDel0roITSVbh2tk6YbD QLi7F4s0BEETFf7ebcVXwk7nkgIet42ejc6T17Df0nHi09fl+jetByyRujpG5NI8 uRQbKBWpSDqHvRXioIwHhKEj/mnxVVyc/sqyCtYLhe2XwdAzMctfQhnygsXXSH3K 5jROf3H+Z9AdGJjQKM/gXNGjfWfT0DHdAw8hjd26tpCP77kJyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPn6akFG2x/oSzXfnUI8A9EnswRNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2YzZTBiYmYtNjU4NC0z YTRiLTliNDctOWE0ZGRjMjNiNDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALoUbAJ8yL12OOSiPmyl4bsZUjImQWDy50fpN1SkZIJB2hDIEUMbW2oJ Qo1YwpN3KU6MWspjXUrFh0VKJjTJOGC7G08clFgiPm1Mm+gkqZBt0NgMj1MiDaKY AFPrehvCUA4rE50N8r4ysnLE5xBSbF0aFor0v1Wb9ypsYIFvKEqpxZcHf/xS2LF7 BEKxQi3dmW7MDMc8Fh5xYzr5JnlBEZqNAewt9kJweOuowhR2LCCZRDbmF5SEaxnx vbopv75RkpwGtekqwOqyqq+bacJnNk57AOZjP7VT+80cvmbQDcLpaipnc+rNbyvf 8oSHLDKEr1yWjwd0ejZE5b7x8JUtcOQ= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:38 2025 by rpki-client