$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa File: 3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa (raw, json) Hash identifier: zUHxwruYrQuvPHGbCNrGEyu1GrHYo1bMcTkeNt7zDr0= Subject key identifier: 16:15:38:83:71:8B:A8:62:4A:C6:F5:21:57:26:D3:A2:BA:9E:E9:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FD1B6A4AFF616B2C3A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fd:1b:6a:4a:ff:61:6b:2c:3a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=04613f8c-32e3-4fc1-bbd7-96afc5bb9bb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:20:3d:75:9f:a2:cd:61:8a:b6:b2:fd:43:b1: 5b:01:50:83:5c:38:e8:be:a1:c3:0e:b8:dd:7a:09: a4:de:98:04:ab:15:86:3f:12:57:18:1a:ec:1e:f6: 21:af:51:15:dc:1a:96:4e:5a:06:07:9d:f1:72:5c: 86:75:10:3f:24:0a:4e:39:c1:c8:b8:42:6b:44:6b: fc:d2:ac:60:ac:26:86:48:80:fe:d9:ea:79:de:12: 11:73:7d:2c:7d:42:6a:86:b1:0e:f5:c2:c7:4f:6f: f4:6a:6a:af:81:3a:d4:27:5d:e3:69:dd:1f:08:23: 9c:02:07:4a:05:f8:0d:da:38:e0:9b:15:8c:28:67: 2f:6f:72:a4:82:c2:72:6e:95:ce:f4:d0:b0:ac:5d: 9f:9d:62:03:cc:6f:74:7b:38:cf:ba:bb:84:5a:b9: dc:b4:c2:b7:a8:bf:1e:1b:8c:f0:ee:16:b1:de:75: c3:b8:69:48:d7:4c:19:90:1c:4a:15:35:1d:37:ae: 0f:4a:b4:69:dc:24:98:1b:57:06:7d:d3:e9:8f:be: 93:87:da:17:22:97:49:79:51:ba:5d:61:b9:76:f5: 8a:72:22:23:ef:19:bb:41:aa:b7:83:79:04:2d:fb: d2:9b:00:04:29:05:9a:a4:c1:c1:3a:bd:de:03:52: 89:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:15:38:83:71:8B:A8:62:4A:C6:F5:21:57:26:D3:A2:BA:9E:E9:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3fbcdb17-a5ae-3d9c-8e06-5544e098235a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:22:75:39:15:65:57:bd:f4:01:10:a3:7e:b6:f7:6b:fd:da: c5:b4:4b:a1:53:3b:a4:18:f6:4a:0d:2f:11:57:f2:0a:dd:2b: b7:38:40:2e:15:a0:12:3f:40:bf:6c:03:49:61:c7:e6:7a:99: 29:1e:8b:de:f2:0f:b0:58:2c:90:af:c7:77:b6:b9:0d:5a:32: 07:4d:fc:ab:6e:b6:5a:d6:e5:aa:07:c8:fa:fe:db:6a:4b:b4: 84:18:8b:e6:d9:6c:be:32:83:be:1a:1b:c3:37:f7:35:07:75: 5b:de:14:15:0f:c9:0d:e8:df:e3:04:84:72:97:a6:ed:35:0d: c6:c8:a2:b9:f4:fa:e9:62:fd:4a:49:28:05:68:17:a8:49:ca: 95:40:44:3a:5b:ee:af:21:91:bc:5c:a2:e3:d1:6b:7a:65:1f: c4:61:da:17:9c:29:91:c4:36:22:04:ad:dd:8b:f0:3d:8e:29: 1c:ce:dd:f7:70:01:f8:d6:4f:97:f3:49:df:84:4c:16:b0:50: a6:55:b7:03:0b:31:19:8b:cb:bf:e8:50:fe:bc:b2:fd:4f:e5: 2b:da:6d:2b:d5:c0:4a:45:c7:c9:49:d9:98:cc:d2:ea:4b:bb: 21:a0:f8:02:57:2a:8c:1e:be:3b:d9:c5:4f:be:33:95:49:93: 82:64:40:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf0bakr/YWssOgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDQ2MTNmOGMtMzJlMy00ZmMxLWJiZDctOTZhZmM1YmI5YmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnSA9dZ+izWGKtrL9Q7FbAVCDXDjovqHDDrjd egmk3pgEqxWGPxJXGBrsHvYhr1EV3BqWTloGB53xclyGdRA/JApOOcHIuEJrRGv8 0qxgrCaGSID+2ep53hIRc30sfUJqhrEO9cLHT2/0amqvgTrUJ13jad0fCCOcAgdK BfgN2jjgmxWMKGcvb3KkgsJybpXO9NCwrF2fnWIDzG90ezjPuruEWrnctMK3qL8e G4zw7hax3nXDuGlI10wZkBxKFTUdN64PSrRp3CSYG1cGfdPpj76Th9oXIpdJeVG6 XWG5dvWKciIj7xm7Qaq3g3kELfvSmwAEKQWapMHBOr3eA1KJswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYVOINxi6hiSsb1IVcm06K6numXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2ZiY2RiMTctYTVhZS0z ZDljLThlMDYtNTU0NGUwOTgyMzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADEidTkVZVe99AEQo36292v92sW0S6FTO6QY9koNLxFX8grdK7c4QC4V oBI/QL9sA0lhx+Z6mSkei97yD7BYLJCvx3e2uQ1aMgdN/KtutlrW5aoHyPr+22pL tIQYi+bZbL4yg74aG8M39zUHdVveFBUPyQ3o3+MEhHKXpu01DcbIorn0+uli/UpJ KAVoF6hJypVARDpb7q8hkbxcouPRa3plH8Rh2hecKZHENiIErd2L8D2OKRzO3fdw AfjWT5fzSd+ETBawUKZVtwMLMRmLy7/oUP68sv1P5SvabSvVwEpFx8lJ2ZjM0upL uyGg+AJXKowevjvZxU++M5VJk4JkQHE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:01:53 2025 by rpki-client