$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa File: 442ff00f-ad65-3434-8575-a778d87e141b.roa (raw, json) Hash identifier: SulxVoKP/UMeB/EGej52YDuSvd1/Wnp15jsiXcWtEOA= Subject key identifier: 9F:8B:D0:63:12:EA:9D:66:DA:06:95:20:99:1D:E5:EC:49:9B:52:DC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841202BBC1FC4F5C72818F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:02:bb:c1:fc:4f:5c:72:81:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=db8a1389-b667-4af4-be96-03fc75a5c1ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:24:07:b2:7a:b1:53:5e:99:bb:5b:12:7d:fd: 09:66:06:87:6b:12:a8:34:a1:8a:4b:97:6f:96:33: f6:e9:fb:c9:4c:2f:8a:6b:8f:89:b6:8c:28:db:ad: 61:8e:3c:5e:8d:2f:68:9d:22:86:00:37:b6:d8:5c: f8:ce:4f:f7:41:0a:93:cd:63:7c:10:d3:93:47:60: 28:ce:7b:e4:5d:f9:43:be:67:98:36:26:31:bc:22: c3:aa:6f:45:2e:04:df:56:5d:91:3a:5c:1c:df:31: 99:e7:97:ef:31:80:76:df:5a:f5:47:0d:02:36:89: 8c:4d:a5:8e:d6:8e:55:09:23:ee:31:b3:2b:ce:02: d9:a2:72:69:d1:5d:aa:91:8d:db:18:27:11:b9:f3: 14:10:62:55:c8:25:ca:86:bd:3d:da:ba:1a:0f:d7: 0c:2b:d1:1f:d8:49:be:53:e2:9e:4a:c9:16:c5:05: 66:54:99:29:88:bd:a3:4a:c3:11:54:0f:f3:7c:8c: 61:0c:0c:4d:e0:79:fd:03:90:68:c2:21:e9:ed:7a: d7:13:88:4f:7c:0c:e0:a1:ef:b1:7f:7b:1a:40:16: 3b:0e:83:20:ef:c9:f3:22:4c:0f:63:d7:5e:16:43: 4b:43:18:cb:a8:41:01:48:56:b7:ef:86:61:23:e2: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8B:D0:63:12:EA:9D:66:DA:06:95:20:99:1D:E5:EC:49:9B:52:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/442ff00f-ad65-3434-8575-a778d87e141b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:99:91:2f:66:a7:86:03:14:74:8f:5d:80:11:f4:b0:22:37: 75:c1:62:98:20:1d:3e:61:2b:e8:57:4a:69:7e:bf:6c:8e:6c: f4:f7:5c:39:32:ec:34:f8:41:81:be:e2:1c:c6:ac:bd:a5:c1: bf:54:d1:04:a4:f6:5a:4d:52:4b:02:c3:4c:7f:ca:65:d4:b8: bb:da:e2:36:3a:c2:11:f0:46:70:ad:33:5d:05:5a:ff:d6:9a: 3a:b3:23:ab:a9:7a:28:79:f8:7b:c9:ca:35:16:65:8f:91:5e: f9:25:77:8a:14:fc:92:40:6a:bc:d4:f9:46:d1:72:dd:e0:2c: 7f:c1:d9:dc:5c:79:38:74:12:10:d0:04:27:30:19:6e:72:c4: 2f:e0:53:21:0c:8f:2d:7c:ab:2b:1d:6c:7d:85:31:eb:ab:22: 91:2c:01:7a:24:72:a7:a2:cd:67:7d:ad:fc:89:b6:0d:58:bc: 48:f3:ec:14:ec:46:c1:5c:db:13:79:08:6e:5c:c7:34:d6:fb: 5d:47:93:99:a1:07:89:88:65:60:06:f6:46:3b:ac:c2:50:ea: ec:cb:aa:51:d2:99:6e:b4:e8:4f:1b:05:fc:46:ba:e4:94:3f: a3:81:98:1d:77:00:13:92:a8:ac:39:f9:4c:3e:35:b9:79:5c: fc:23:7d:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgK7wfxPXHKBj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGI4YTEzODktYjY2Ny00YWY0LWJlOTYtMDNmYzc1YTVjMWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSQHsnqxU16Zu1sSff0JZgaHaxKoNKGKS5dv ljP26fvJTC+Ka4+Jtowo261hjjxejS9onSKGADe22Fz4zk/3QQqTzWN8ENOTR2Ao znvkXflDvmeYNiYxvCLDqm9FLgTfVl2ROlwc3zGZ55fvMYB231r1Rw0CNomMTaWO 1o5VCSPuMbMrzgLZonJp0V2qkY3bGCcRufMUEGJVyCXKhr092roaD9cMK9Ef2Em+ U+KeSskWxQVmVJkpiL2jSsMRVA/zfIxhDAxN4Hn9A5BowiHp7XrXE4hPfAzgoe+x f3saQBY7DoMg78nzIkwPY9deFkNLQxjLqEEBSFa374ZhI+JvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+L0GMS6p1m2gaVIJkd5exJm1LcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQyZmYwMGYtYWQ2NS0z NDM0LTg1NzUtYTc3OGQ4N2UxNDFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJCZkS9mp4YDFHSPXYAR9LAiN3XBYpggHT5hK+hXSml+v2yObPT3XDky 7DT4QYG+4hzGrL2lwb9U0QSk9lpNUksCw0x/ymXUuLva4jY6whHwRnCtM10FWv/W mjqzI6upeih5+HvJyjUWZY+RXvkld4oU/JJAarzU+UbRct3gLH/B2dxceTh0EhDQ BCcwGW5yxC/gUyEMjy18qysdbH2FMeurIpEsAXokcqeizWd9rfyJtg1YvEjz7BTs RsFc2xN5CG5cxzTW+11Hk5mhB4mIZWAG9kY7rMJQ6uzLqlHSmW606E8bBfxGuuSU P6OBmB13ABOSqKw5+Uw+Nbl5XPwjfW0= -----END CERTIFICATE-----Generated at Sat Jul 26 20:12:58 2025 by rpki-client