$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4890f6c5-5f79-3e6c-91b6-dbe775985e91.roa File: 4890f6c5-5f79-3e6c-91b6-dbe775985e91.roa (raw, json) Hash identifier: hoTXPR36eKUfnThWdGtIbm20d5hjXVfyeiW+D/vGQxI= Subject key identifier: 83:76:E7:63:CD:E5:50:30:36:95:A0:A7:A7:45:82:72:E4:0F:0B:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841204629CA7DD4861BCFC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4890f6c5-5f79-3e6c-91b6-dbe775985e91.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:04:62:9c:a7:dd:48:61:bc:fc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6621a3b8-916f-468e-bc8e-e91609ac83d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:e4:1a:e3:b3:a1:7c:be:02:4b:65:65:3d:37: 02:aa:09:da:4d:ed:f3:97:63:fe:76:d8:f0:59:23: 13:e6:5b:c6:83:d3:a5:9f:bb:1b:f7:e8:37:64:79: e5:56:0f:45:49:f6:78:e6:c1:4f:49:69:fb:15:af: 4d:03:e6:a7:cb:17:22:7b:8b:d4:ac:b9:19:e8:61: 5b:a7:63:f1:8c:fb:af:6b:6b:96:4c:24:37:b0:a0: f1:86:be:bb:14:2a:47:61:ca:3d:a3:6f:f8:46:9f: ae:10:a0:21:1b:1c:af:24:d8:db:75:05:d8:7b:5d: d8:3f:69:f7:85:d5:8e:ee:ea:f9:0e:08:43:4a:b8: 76:da:70:2b:e4:e6:fe:71:99:64:1d:f9:2e:5b:05: 95:62:30:3a:8c:ec:3d:cc:07:ea:d7:1e:75:34:cb: 4d:f9:18:94:18:ae:5c:74:be:c9:0f:e2:ec:4a:3f: 98:6b:a8:4c:ec:70:46:d3:88:02:42:e2:fc:c5:7d: 68:46:4a:09:53:48:f3:eb:a4:06:bc:66:ff:9d:8b: dc:98:12:c1:e5:7d:8e:19:ec:03:92:be:db:b0:8c: 53:a7:f7:c9:11:d6:f1:13:94:25:62:3b:42:4f:cd: 30:2a:de:d9:70:3b:21:65:94:d8:e5:8c:e5:da:52: 75:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:76:E7:63:CD:E5:50:30:36:95:A0:A7:A7:45:82:72:E4:0F:0B:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4890f6c5-5f79-3e6c-91b6-dbe775985e91.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:f5:e0:d8:03:b6:3c:27:91:3f:b8:93:9a:52:04:9d:0c:fe: 6b:7f:e1:39:16:63:58:9e:1d:fe:f2:66:15:c5:f8:65:35:80: fa:47:b5:33:7a:2d:6c:51:f9:25:aa:b2:e4:20:b9:09:26:6f: 80:20:a7:4d:30:23:fc:62:4a:40:c3:5d:e3:b8:e4:14:1e:1e: 63:53:3f:82:47:ca:68:47:a7:6f:b5:f4:9b:d0:1e:a3:bd:e1: 3e:a7:af:7e:f2:a8:45:bf:8f:b8:5b:d2:e9:13:e6:ba:e1:cc: d9:50:2a:6e:1b:2b:31:f9:80:66:a3:05:0e:35:40:d6:af:9c: 4f:fb:2f:ab:a3:66:c9:b1:64:ac:1d:91:32:25:43:6c:c6:36: 38:1a:fb:2a:af:3f:7f:82:d3:59:d9:b8:58:c6:38:c7:a9:c6: b4:2d:f9:8a:0a:41:40:b0:53:80:54:51:17:42:73:e7:04:8f: 12:47:ef:0b:f5:5d:be:a3:3d:0a:0e:dd:b9:7c:66:75:a9:50: c4:e7:d2:f5:69:ee:5c:f2:d7:99:29:45:74:f0:39:a2:dc:70: 0b:77:47:e9:cf:2b:0a:fc:15:9b:8d:fb:4c:23:72:db:65:45: a9:40:64:5c:ed:ad:e7:74:89:ca:df:b7:d9:34:a6:b6:35:82: 20:ae:fc:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgRinKfdSGG8/IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjYyMWEzYjgtOTE2Zi00NjhlLWJjOGUtZTkxNjA5YWM4M2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOQa47OhfL4CS2VlPTcCqgnaTe3zl2P+dtjw WSMT5lvGg9Oln7sb9+g3ZHnlVg9FSfZ45sFPSWn7Fa9NA+anyxcie4vUrLkZ6GFb p2PxjPuva2uWTCQ3sKDxhr67FCpHYco9o2/4Rp+uEKAhGxyvJNjbdQXYe13YP2n3 hdWO7ur5DghDSrh22nAr5Ob+cZlkHfkuWwWVYjA6jOw9zAfq1x51NMtN+RiUGK5c dL7JD+LsSj+Ya6hM7HBG04gCQuL8xX1oRkoJU0jz66QGvGb/nYvcmBLB5X2OGewD kr7bsIxTp/fJEdbxE5QlYjtCT80wKt7ZcDshZZTY5Yzl2lJ1JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIN252PN5VAwNpWgp6dFgnLkDwt6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDg5MGY2YzUtNWY3OS0z ZTZjLTkxYjYtZGJlNzc1OTg1ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABL14NgDtjwnkT+4k5pSBJ0M/mt/4TkWY1ieHf7yZhXF+GU1gPpHtTN6 LWxR+SWqsuQguQkmb4Agp00wI/xiSkDDXeO45BQeHmNTP4JHymhHp2+19JvQHqO9 4T6nr37yqEW/j7hb0ukT5rrhzNlQKm4bKzH5gGajBQ41QNavnE/7L6ujZsmxZKwd kTIlQ2zGNjga+yqvP3+C01nZuFjGOMepxrQt+YoKQUCwU4BUURdCc+cEjxJH7wv1 Xb6jPQoO3bl8ZnWpUMTn0vVp7lzy15kpRXTwOaLccAt3R+nPKwr8FZuN+0wjcttl RalAZFztred0icrft9k0prY1giCu/Bw= -----END CERTIFICATE-----Generated at Sat Jul 26 00:04:54 2025 by rpki-client