$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c2acff5-7b82-3ef3-a64c-302c0dc48d9e.roa File: 4c2acff5-7b82-3ef3-a64c-302c0dc48d9e.roa (raw, json) Hash identifier: HJEVJvqanaK3cYNFynSZhx1VSqwuMgiuZA0LlSO5fKo= Subject key identifier: 30:C1:2F:D2:BD:47:A6:26:82:5B:F8:1D:75:C9:7D:FB:11:31:DD:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841144343D930BB03179B000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c2acff5-7b82-3ef3-a64c-302c0dc48d9e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:44:34:3d:93:0b:b0:31:79:b0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=30ed52ad-da82-4ec9-a5a8-7c640011367a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:cd:cd:45:6c:7c:88:74:56:93:bf:68:b0:c3: 2a:24:d0:63:79:bc:aa:65:8d:48:68:1f:44:32:65: 82:54:f0:b8:af:10:9a:2d:66:60:67:8e:31:20:6f: dc:60:64:87:7a:05:ff:9e:d4:a8:36:7c:3c:1f:bf: 2d:e5:3c:22:93:4a:23:03:42:2d:e1:e8:3e:2c:32: fc:7f:6f:ad:0a:b0:d7:80:6e:0a:a6:45:97:36:46: c8:34:8f:fa:69:e9:9c:e5:1f:ff:10:f5:75:77:56: 7a:4b:83:b3:b2:90:e6:df:e7:ba:4f:3b:ad:2b:31: cf:0d:63:92:ca:23:5f:0f:99:40:7f:3e:8a:96:67: bc:2b:e8:61:0e:ea:6c:73:79:0f:04:23:17:9c:b3: 73:94:f4:72:61:e0:f5:21:dd:5e:6b:94:15:00:c5: 8d:b7:87:4a:05:71:58:ec:6b:e4:95:3f:56:80:fc: 41:aa:77:d0:cf:21:a2:5b:e2:0a:d4:6d:54:3d:52: ec:77:81:dc:fb:74:5a:7e:7a:a4:f7:9f:4e:06:92: 4c:c3:8c:51:12:18:ba:9e:52:a2:bd:bc:ef:ce:0a: 2a:f8:d2:e8:b6:b8:37:f4:39:d0:e7:7b:5d:0e:30: 23:d6:5a:4d:c1:42:e8:75:59:c0:d4:0c:7b:b2:be: 83:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:C1:2F:D2:BD:47:A6:26:82:5B:F8:1D:75:C9:7D:FB:11:31:DD:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4c2acff5-7b82-3ef3-a64c-302c0dc48d9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:f2:d5:e4:d4:67:93:ab:43:e2:05:4f:bb:dd:dc:72:79:ed: c3:63:5d:fe:70:29:b9:21:9e:a5:1a:5b:3b:23:c0:3d:c0:37: 52:7e:9e:1f:b4:d9:04:81:29:3c:08:df:21:d6:8e:5b:05:86: 74:06:b8:c5:cb:94:e5:40:ca:c1:e5:e7:f4:1c:8f:0e:e3:92: 74:41:43:bf:7c:a0:1e:59:76:32:9d:d0:f2:90:99:b2:2f:32: 99:41:9c:f7:b6:04:8f:d5:4b:53:78:93:24:0d:52:4b:a3:1b: a2:2f:80:6a:39:57:84:da:51:a1:f1:e9:b3:ae:96:dc:bb:71: b4:33:2e:ec:bd:38:d4:3c:81:be:36:22:26:12:02:52:22:b4: 30:6c:80:81:4b:10:fd:68:ab:55:6e:58:cb:d6:77:d5:03:06: 3b:af:33:d9:c6:2f:be:d0:a0:79:3d:d2:1b:fc:bd:fb:e7:09: 4a:0b:53:0e:e5:46:d0:e4:1c:03:ff:a9:b2:33:12:df:b6:a1: 3b:a1:be:28:e1:19:66:76:4a:26:c4:9b:c2:8c:22:a6:64:65: 96:2c:f3:7a:bd:6a:43:d7:fb:13:68:64:9f:db:85:ab:1f:8f: 63:dc:e6:f2:16:93:d8:bf:9d:6b:06:51:59:de:25:99:69:50: 2d:70:4f:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUQ0PZMLsDF5sAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzBlZDUyYWQtZGE4Mi00ZWM5LWE1YTgtN2M2NDAwMTEzNjdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjc3NRWx8iHRWk79osMMqJNBjebyqZY1IaB9E MmWCVPC4rxCaLWZgZ44xIG/cYGSHegX/ntSoNnw8H78t5Twik0ojA0It4eg+LDL8 f2+tCrDXgG4KpkWXNkbINI/6aemc5R//EPV1d1Z6S4OzspDm3+e6TzutKzHPDWOS yiNfD5lAfz6Klme8K+hhDupsc3kPBCMXnLNzlPRyYeD1Id1ea5QVAMWNt4dKBXFY 7GvklT9WgPxBqnfQzyGiW+IK1G1UPVLsd4Hc+3Rafnqk959OBpJMw4xREhi6nlKi vbzvzgoq+NLotrg39DnQ53tdDjAj1lpNwULodVnA1Ax7sr6DGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDDBL9K9R6Ymglv4HXXJffsRMd0GMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGMyYWNmZjUtN2I4Mi0z ZWYzLWE2NGMtMzAyYzBkYzQ4ZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzy1eTUZ5OrQ+IFT7vd3HJ57cNjXf5wKbkhnqUaWzsjwD3AN1J+nh+0 2QSBKTwI3yHWjlsFhnQGuMXLlOVAysHl5/Qcjw7jknRBQ798oB5ZdjKd0PKQmbIv MplBnPe2BI/VS1N4kyQNUkujG6IvgGo5V4TaUaHx6bOulty7cbQzLuy9ONQ8gb42 IiYSAlIitDBsgIFLEP1oq1VuWMvWd9UDBjuvM9nGL77QoHk90hv8vfvnCUoLUw7l RtDkHAP/qbIzEt+2oTuhvijhGWZ2SibEm8KMIqZkZZYs83q9akPX+xNoZJ/bhasf j2Pc5vIWk9i/nWsGUVneJZlpUC1wT8k= -----END CERTIFICATE-----Generated at Sat Jul 26 11:06:11 2025 by rpki-client