$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa File: 4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa (raw, json) Hash identifier: Rpt8VBfHaLmlN3pWf1HAqyxETjAD3JUyK0a5TyFORg0= Subject key identifier: 49:AF:4A:E5:A6:DE:E7:41:68:CC:90:71:E0:B8:8C:33:1C:4A:BE:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841204D0A2CD496D53003E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:04:d0:a2:cd:49:6d:53:00:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e410cfe1-5416-4242-8c91-8e10c7aabe9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6a:ce:c2:2d:63:09:57:26:12:fa:27:e5:27: d6:7f:e9:22:a3:0d:14:33:0f:3a:c5:e6:58:42:59: cf:57:72:d6:26:26:1d:f8:a8:05:a9:58:42:70:d8: c8:ae:e4:ee:9d:76:c2:ae:25:fe:bb:d6:06:60:18: f2:34:6c:1c:b6:a7:b7:3b:14:e5:b4:34:53:28:9a: 23:a7:32:8b:2b:18:06:64:53:ad:6a:9d:95:fa:13: 40:73:b7:b2:37:d3:fe:6c:45:96:ba:33:94:13:23: 48:5e:76:9d:6d:b7:1f:22:62:68:2d:d4:63:c8:b7: eb:8f:8f:ab:03:88:95:61:0d:b2:15:b7:c0:62:13: 4a:c1:06:5f:33:ed:5a:ae:a6:4f:aa:af:0e:0c:cf: 48:79:2d:0b:79:56:ae:c1:ad:92:98:99:82:d3:52: 55:0a:9f:f0:59:6a:70:5f:cc:23:d9:1e:2b:86:92: 7d:bc:30:a9:fd:81:c3:e6:de:cc:91:ed:6d:0c:e7: e6:06:ef:72:96:e2:ed:35:82:48:6a:f9:d4:10:08: 41:61:de:f4:46:24:85:71:43:ed:bf:9c:16:1d:de: 4d:65:e9:02:41:9f:35:93:c1:89:1e:c4:81:eb:f5: 28:58:fb:a9:d1:8a:a5:03:0c:c7:e5:a6:95:44:17: fc:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:AF:4A:E5:A6:DE:E7:41:68:CC:90:71:E0:B8:8C:33:1C:4A:BE:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:be:10:d4:cc:6f:eb:d6:3e:e6:e8:f9:f0:89:ae:b4:01:81: 9a:2e:5a:a9:5a:2e:34:13:4f:7f:8a:29:b1:c3:69:b5:6a:c5: ec:b5:1a:bd:eb:d8:ce:e2:dc:82:7a:8b:72:73:22:37:6b:0b: 9c:bc:75:b7:3f:66:1f:37:98:4b:c9:6b:6a:d2:93:fb:76:1e: 01:72:a6:71:4e:15:ff:a4:d3:f8:6a:77:f0:f4:ce:4d:ed:90: 77:c7:71:0d:ea:b6:23:27:69:bd:c6:8c:ed:13:bb:e5:b3:6d: 1e:bb:4a:ce:c2:95:34:5d:18:e1:22:95:b6:ad:6e:22:cc:f6: f8:33:76:01:de:08:a2:6f:80:32:ea:42:f0:74:37:2d:f2:a3: d7:98:3d:0d:8e:bd:66:b5:78:a7:16:1a:00:7c:de:85:a8:6b: 60:9e:c3:6e:e9:65:3e:b4:b6:32:16:00:0c:f7:c6:ef:b3:6b: b6:ea:50:98:b9:db:e6:2a:86:c4:3f:22:0d:9b:08:ac:c5:9e: 9a:17:c8:a0:1f:5d:26:64:e9:a2:0e:83:04:7c:00:66:1f:e3: 48:b9:98:79:f8:39:1b:a5:c5:41:4c:6f:bf:ab:2d:eb:50:df: 60:e7:14:45:a4:2c:ed:e9:a8:ce:b1:2f:bf:13:a5:ed:14:6c: 73:07:a0:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgTQos1JbVMAPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTQxMGNmZTEtNTQxNi00MjQyLThjOTEtOGUxMGM3YWFiZTljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WrOwi1jCVcmEvon5SfWf+kiow0UMw86xeZY QlnPV3LWJiYd+KgFqVhCcNjIruTunXbCriX+u9YGYBjyNGwctqe3OxTltDRTKJoj pzKLKxgGZFOtap2V+hNAc7eyN9P+bEWWujOUEyNIXnadbbcfImJoLdRjyLfrj4+r A4iVYQ2yFbfAYhNKwQZfM+1arqZPqq8ODM9IeS0LeVauwa2SmJmC01JVCp/wWWpw X8wj2R4rhpJ9vDCp/YHD5t7Mke1tDOfmBu9yluLtNYJIavnUEAhBYd70RiSFcUPt v5wWHd5NZekCQZ81k8GJHsSB6/UoWPup0YqlAwzH5aaVRBf8RwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEmvSuWm3udBaMyQceC4jDMcSr6RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQ5MmFiMGEtOWM3OC0z ZGJlLTg1ZWQtZGI5ODFjYTJlNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMG+ENTMb+vWPubo+fCJrrQBgZouWqlaLjQTT3+KKbHDabVqxey1Gr3r 2M7i3IJ6i3JzIjdrC5y8dbc/Zh83mEvJa2rSk/t2HgFypnFOFf+k0/hqd/D0zk3t kHfHcQ3qtiMnab3GjO0Tu+WzbR67Ss7ClTRdGOEilbatbiLM9vgzdgHeCKJvgDLq QvB0Ny3yo9eYPQ2OvWa1eKcWGgB83oWoa2Cew27pZT60tjIWAAz3xu+za7bqUJi5 2+YqhsQ/Ig2bCKzFnpoXyKAfXSZk6aIOgwR8AGYf40i5mHn4ORulxUFMb7+rLetQ 32DnFEWkLO3pqM6xL78Tpe0UbHMHoJ8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:09 2025 by rpki-client