$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/444d8605-e43f-3a45-9171-1e19616c6a5a.roa File: 444d8605-e43f-3a45-9171-1e19616c6a5a.roa (raw, json) Hash identifier: +BqCws7XiINjgqm4ZkBkRAywUu+JCYFQLJVl5gDyZ60= Subject key identifier: 3C:67:5F:D5:A1:40:CA:49:95:24:F3:AB:04:08:45:9D:C5:14:9C:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114E278EC6F28AC6FE3100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/444d8605-e43f-3a45-9171-1e19616c6a5a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4e:27:8e:c6:f2:8a:c6:fe:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6a44e608-895a-4a53-ae4d-7e95cd4bf857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3c:53:da:70:11:73:12:ca:89:87:47:57:4e: dd:75:d3:a7:06:a8:d9:62:d2:5a:f3:87:03:51:b1: bc:4c:7e:00:7e:b1:78:0f:6b:d8:41:6c:8a:bd:9e: 0c:eb:05:27:79:c3:7e:87:2c:ac:67:60:88:2e:ad: f2:2f:1b:8d:5f:a4:51:26:00:bb:a8:8d:f0:f4:94: 76:8a:23:81:b0:7a:96:eb:7a:b1:d5:57:3d:81:62: c6:a5:1e:b3:11:04:59:4d:19:51:25:c8:f0:30:6f: ef:43:3a:c4:30:d7:52:5c:3f:3b:1b:24:a4:60:51: 01:f9:c3:15:7a:80:13:76:f5:01:9b:76:4f:63:81: d4:42:34:43:a7:a7:34:f9:ce:c4:16:cb:11:8e:35: 65:ba:9d:42:d2:69:f5:96:7c:9e:e6:1c:5e:10:78: c0:a4:64:7c:60:0e:03:fb:c4:59:2a:b1:ac:24:a5: 83:51:77:73:3b:35:eb:76:27:1f:07:30:0a:ef:06: be:c2:1a:12:73:2a:55:ff:86:5b:30:5d:4c:fb:45: aa:7a:a2:aa:48:cc:12:2e:58:1c:c0:bf:b3:22:1b: f8:a2:c2:a2:52:30:cd:2e:19:2e:af:b9:29:d6:4c: c4:98:30:e3:dd:53:b8:80:3c:a0:48:b9:c4:e2:49: b2:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:67:5F:D5:A1:40:CA:49:95:24:F3:AB:04:08:45:9D:C5:14:9C:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/444d8605-e43f-3a45-9171-1e19616c6a5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:06:63:8e:d3:5f:86:bf:ee:94:a3:64:08:8a:ba:8d:43:d0: b9:84:fe:9f:ab:8c:d6:e2:a8:82:15:91:d6:f1:05:50:6d:ef: 24:4d:be:d1:ce:9e:9b:e7:bb:9b:b0:1b:2f:e5:c0:49:a5:37: a2:e9:93:cc:b7:5f:2a:f8:91:30:c5:5d:e5:28:e1:e9:14:cf: f8:63:b5:74:ce:b7:b1:d6:96:3c:e5:36:8d:bf:62:1c:05:5f: d9:00:8e:ae:67:e4:c9:dc:ac:ca:f3:cf:ff:f5:bc:54:7a:c5: 23:4d:cb:72:32:ea:fe:3d:fd:ba:ad:46:67:4e:60:34:7e:3f: eb:87:ed:45:43:01:db:b4:44:c7:e2:cc:46:a2:b4:7e:5b:ff: 4f:bc:bd:19:da:7d:b0:ab:87:3e:3c:09:08:44:fa:35:a6:d1: 6f:28:e8:27:a8:5d:ed:e3:8d:00:03:2a:b2:5b:97:72:bc:8d: cf:a5:f8:e7:5f:eb:29:b3:a3:33:04:a7:88:e1:c6:8f:ec:ef: 28:72:8d:64:16:72:a0:71:06:c9:6f:1c:05:a3:a6:3c:e9:0d: 66:6c:80:e5:60:9e:77:10:b6:c3:41:1c:8a:2e:4c:7e:fa:b0: 46:47:7e:19:b5:cc:15:9c:99:47:a0:0a:da:52:2d:65:48:a9: 27:a5:de:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEU4njsbyisb+MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmE0NGU2MDgtODk1YS00YTUzLWFlNGQtN2U5NWNkNGJmODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjxT2nARcxLKiYdHV07dddOnBqjZYtJa84cD UbG8TH4AfrF4D2vYQWyKvZ4M6wUnecN+hyysZ2CILq3yLxuNX6RRJgC7qI3w9JR2 iiOBsHqW63qx1Vc9gWLGpR6zEQRZTRlRJcjwMG/vQzrEMNdSXD87GySkYFEB+cMV eoATdvUBm3ZPY4HUQjRDp6c0+c7EFssRjjVlup1C0mn1lnye5hxeEHjApGR8YA4D +8RZKrGsJKWDUXdzOzXrdicfBzAK7wa+whoScypV/4ZbMF1M+0WqeqKqSMwSLlgc wL+zIhv4osKiUjDNLhkur7kp1kzEmDDj3VO4gDygSLnE4kmy2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxnX9WhQMpJlSTzqwQIRZ3FFJwgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQ0ZDg2MDUtZTQzZi0z YTQ1LTkxNzEtMWUxOTYxNmM2YTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUGY47TX4a/7pSjZAiKuo1D0LmE/p+rjNbiqIIVkdbxBVBt7yRNvtHO npvnu5uwGy/lwEmlN6Lpk8y3Xyr4kTDFXeUo4ekUz/hjtXTOt7HWljzlNo2/YhwF X9kAjq5n5MncrMrzz//1vFR6xSNNy3Iy6v49/bqtRmdOYDR+P+uH7UVDAdu0RMfi zEaitH5b/0+8vRnafbCrhz48CQhE+jWm0W8o6CeoXe3jjQADKrJbl3K8jc+l+Odf 6ymzozMEp4jhxo/s7yhyjWQWcqBxBslvHAWjpjzpDWZsgOVgnncQtsNBHIouTH76 sEZHfhm1zBWcmUegCtpSLWVIqSel3oA= -----END CERTIFICATE-----Generated at Sat Jul 26 11:34:57 2025 by rpki-client