$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa File: 41af6d99-9225-3ad6-9547-1b4352413597.roa (raw, json) Hash identifier: vbV8TpNZpMLqcDusYqgrhlYIubck/ewSQhcfdxMNIDE= Subject key identifier: 50:A4:C5:F9:AC:D2:5B:ED:49:25:E2:46:98:A2:DE:C1:56:3B:49:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411425C0F2E760705EE8780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:42:5c:0f:2e:76:07:05:ee:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=106c28c5-c7e4-4dac-bc22-a0053b89cbf7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:e8:63:54:43:e5:68:38:2a:ee:8b:88:e7: e4:f7:1a:f5:7d:a7:b7:db:e9:e6:4d:88:87:e0:ee: 90:cc:e3:0f:26:75:24:26:fd:30:28:6f:14:65:8f: 96:6f:91:5e:69:a2:1f:79:63:11:ae:00:a6:ba:cd: 5e:64:56:cc:31:9b:04:d4:91:37:54:75:8b:ca:7b: c1:84:e0:b3:77:6c:90:75:b4:a7:b0:db:1e:82:cf: a8:d5:5f:ae:26:bb:89:1d:17:c2:e6:9d:ba:f6:2e: 97:25:ca:dd:e0:d2:8c:d1:cc:39:3b:21:db:4f:01: 99:6c:08:55:83:89:ab:87:bd:cf:e7:a7:8a:91:1e: d6:d4:66:ad:06:d5:f7:dd:3a:fc:7d:b7:05:23:9f: 49:07:e0:34:41:f4:10:a5:a0:21:c9:2e:b6:aa:9d: 0b:60:61:92:8c:56:34:79:c4:83:b1:24:58:4e:f8: 74:d8:78:50:67:39:5d:cd:52:b8:9d:fd:bf:37:1f: 9d:31:06:f3:06:24:af:b7:b6:f3:31:e8:d9:2b:56: c5:95:07:77:22:63:48:a0:46:c1:77:e6:dc:40:74: 57:37:38:58:50:fa:46:a9:a2:1e:d4:47:d3:b0:dc: 1c:74:92:2c:1d:0a:a8:fb:ae:09:e7:76:32:aa:f4: 7d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:A4:C5:F9:AC:D2:5B:ED:49:25:E2:46:98:A2:DE:C1:56:3B:49:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41af6d99-9225-3ad6-9547-1b4352413597.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:8e:81:b8:75:60:4e:d1:e8:e8:e3:1f:c7:16:fe:27:18:6c: 7a:3a:53:b7:cf:c8:ab:e7:a8:16:a7:3d:88:12:52:6e:8a:16: c1:33:71:7a:af:bd:3b:34:32:29:47:4f:20:28:1a:f3:98:fd: 9a:11:fb:9f:30:ed:04:40:be:3c:e9:b3:6c:0d:f9:24:0c:f7: 44:7b:5e:54:44:b0:d7:10:8e:64:d0:0e:c5:dd:0c:47:74:b6: bf:ab:63:73:37:1f:92:18:30:d1:fe:0a:42:24:df:26:0c:df: 4c:ab:56:1d:42:2e:d8:26:f7:a8:ca:cf:bb:d3:a0:b0:bc:66: df:54:12:ca:7d:5d:9d:d6:2d:4e:8a:22:5b:46:15:ca:4f:49: 11:8c:b7:3a:e8:ba:f1:72:fa:04:82:11:9a:56:1e:90:6f:09: 07:9e:67:f2:a6:f7:dd:b2:6a:58:24:b8:c2:72:1f:f8:f3:f4: bf:d1:b5:d0:cd:38:d3:46:66:8a:6c:c1:0e:f5:50:eb:b1:ea: 70:dd:16:5d:21:d3:5d:ea:17:99:fd:0a:79:0f:77:b2:9f:53: 5c:fb:3e:58:cf:a9:5e:8c:2d:fd:0a:83:8e:75:cb:aa:f0:a0: 56:83:be:6e:80:75:9f:60:00:34:fe:0d:a8:55:d4:ca:86:19: d7:e7:e6:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUJcDy52BwXuh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTA2YzI4YzUtYzdlNC00ZGFjLWJjMjItYTAwNTNiODljYmY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXPoY1RD5Wg4Ku6LiOfk9xr1fae32+nmTYiH 4O6QzOMPJnUkJv0wKG8UZY+Wb5FeaaIfeWMRrgCmus1eZFbMMZsE1JE3VHWLynvB hOCzd2yQdbSnsNsegs+o1V+uJruJHRfC5p269i6XJcrd4NKM0cw5OyHbTwGZbAhV g4mrh73P56eKkR7W1GatBtX33Tr8fbcFI59JB+A0QfQQpaAhyS62qp0LYGGSjFY0 ecSDsSRYTvh02HhQZzldzVK4nf2/Nx+dMQbzBiSvt7bzMejZK1bFlQd3ImNIoEbB d+bcQHRXNzhYUPpGqaIe1EfTsNwcdJIsHQqo+64J53YyqvR92wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFCkxfms0lvtSSXiRpii3sFWO0kyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFhZjZkOTktOTIyNS0z YWQ2LTk1NDctMWI0MzUyNDEzNTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWOgbh1YE7R6OjjH8cW/icYbHo6U7fPyKvnqBanPYgSUm6KFsEzcXqv vTs0MilHTyAoGvOY/ZoR+58w7QRAvjzps2wN+SQM90R7XlREsNcQjmTQDsXdDEd0 tr+rY3M3H5IYMNH+CkIk3yYM30yrVh1CLtgm96jKz7vToLC8Zt9UEsp9XZ3WLU6K IltGFcpPSRGMtzrouvFy+gSCEZpWHpBvCQeeZ/Km992yalgkuMJyH/jz9L/RtdDN ONNGZopswQ71UOux6nDdFl0h013qF5n9CnkPd7KfU1z7PljPqV6MLf0Kg451y6rw oFaDvm6AdZ9gADT+DahV1MqGGdfn5hw= -----END CERTIFICATE-----Generated at Sat Jul 26 11:47:10 2025 by rpki-client