$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d46669d-d13c-30e6-a77b-9554ab96bb89.roa File: 4d46669d-d13c-30e6-a77b-9554ab96bb89.roa (raw, json) Hash identifier: OzH4C0wHi3HUMzxbDpfpQtsOnDwbq6YnMX2atW6rs8c= Subject key identifier: 6B:C0:CB:46:FA:7C:11:AA:64:68:7C:33:72:A5:47:88:84:CE:7B:45 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412058DDCFFF5DE5273B280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d46669d-d13c-30e6-a77b-9554ab96bb89.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:05:8d:dc:ff:f5:de:52:73:b2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cdf5196a-3819-4dc8-bf46-f72038e23dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:56:18:a9:c5:fe:0c:e0:3e:33:2e:8c:64:e5: 4a:db:12:76:18:eb:96:59:1a:e0:14:98:e9:73:2b: e5:8e:d8:20:43:8b:26:96:73:d0:7d:19:f6:11:6b: 48:27:5b:36:d0:4a:de:8d:18:22:d2:1c:9a:da:e0: 49:89:42:e0:64:cd:d0:94:84:5e:6c:21:de:68:22: ae:43:8f:be:d5:f8:a7:d4:e2:ee:76:7c:e1:d8:2a: 44:02:13:31:87:d7:38:ff:2b:59:2f:56:6b:da:6e: 9c:8a:06:7c:d9:a0:69:1e:72:8c:c1:95:b3:e6:86: b7:9c:70:9f:18:01:f8:e4:2d:37:fd:0c:47:a8:58: 75:e5:7e:0a:cf:a3:76:5e:f9:9f:38:cf:0d:60:4d: de:eb:13:4a:fd:21:6e:ce:db:29:e1:22:a3:fc:a9: bd:34:8e:c4:96:7a:70:30:5d:bb:8a:67:64:d3:a2: 8f:46:75:28:20:c9:1e:4c:86:e1:4c:4c:e0:67:a6: c0:03:c5:17:ed:69:eb:11:39:21:64:3e:7e:a2:6f: c0:b1:ac:45:79:f2:b2:f4:e5:96:98:5d:88:49:dd: ad:d8:36:23:71:37:8b:d0:fa:36:82:71:0b:35:3a: 2f:71:ff:bb:6f:c6:f9:cb:1e:52:63:80:03:23:58: 66:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:C0:CB:46:FA:7C:11:AA:64:68:7C:33:72:A5:47:88:84:CE:7B:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4d46669d-d13c-30e6-a77b-9554ab96bb89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b6:37:17:a2:77:25:5e:03:a6:a0:70:01:44:a0:29:49:fc:18: f5:21:d4:0f:20:81:59:c4:2e:f4:a3:18:ca:e7:e4:8d:b7:5a: 6c:9e:d3:6a:1a:30:4f:37:66:6c:85:c6:b7:54:71:25:82:18: 7b:a9:2b:77:77:74:fb:2e:ec:a5:f6:82:23:01:4c:12:69:37: 31:ac:19:b9:58:c6:6a:6d:ac:62:30:6c:74:45:6c:be:64:31: e9:b1:b5:f9:a0:d9:70:54:52:9a:87:63:16:2b:c6:31:74:22: 73:5e:d8:79:49:09:66:fe:f8:3d:d8:96:0e:04:d2:2b:51:61: b8:f6:ef:22:6e:1c:5b:c9:d6:23:05:3c:f2:91:f7:9b:3a:e3: 56:29:4f:66:9f:c7:26:4e:bc:61:6c:03:5f:c0:a8:ea:e3:a4: 3e:14:79:e4:c0:5b:63:c2:ec:e4:a9:9f:ea:15:5c:9b:7e:ab: ec:da:d8:2e:c4:66:ff:eb:ad:85:e2:fa:7c:73:d1:5b:28:6e: 6a:74:97:d2:9f:0e:fa:e8:34:41:1d:36:e3:47:55:f6:94:b8: 24:1a:b1:34:8b:b7:1d:d4:86:c9:fc:d5:68:66:54:af:45:5c: 88:e5:8e:cb:fa:61:8c:74:df:26:f9:47:29:a5:00:d6:0c:e2: 09:03:dc:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgWN3P/13lJzsoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2RmNTE5NmEtMzgxOS00ZGM4LWJmNDYtZjcyMDM4ZTIzZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjFYYqcX+DOA+My6MZOVK2xJ2GOuWWRrgFJjp cyvljtggQ4smlnPQfRn2EWtIJ1s20ErejRgi0hya2uBJiULgZM3QlIRebCHeaCKu Q4++1fin1OLudnzh2CpEAhMxh9c4/ytZL1Zr2m6cigZ82aBpHnKMwZWz5oa3nHCf GAH45C03/QxHqFh15X4Kz6N2XvmfOM8NYE3e6xNK/SFuztsp4SKj/Km9NI7Elnpw MF27imdk06KPRnUoIMkeTIbhTEzgZ6bAA8UX7WnrETkhZD5+om/AsaxFefKy9OWW mF2ISd2t2DYjcTeL0Po2gnELNTovcf+7b8b5yx5SY4ADI1hmhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGvAy0b6fBGqZGh8M3KlR4iEzntFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGQ0NjY2OWQtZDEzYy0z MGU2LWE3N2ItOTU1NGFiOTZiYjg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALY3F6J3JV4DpqBwAUSgKUn8GPUh1A8ggVnELvSjGMrn5I23Wmye02oa ME83ZmyFxrdUcSWCGHupK3d3dPsu7KX2giMBTBJpNzGsGblYxmptrGIwbHRFbL5k Memxtfmg2XBUUpqHYxYrxjF0InNe2HlJCWb++D3Ylg4E0itRYbj27yJuHFvJ1iMF PPKR95s641YpT2afxyZOvGFsA1/AqOrjpD4UeeTAW2PC7OSpn+oVXJt+q+za2C7E Zv/rrYXi+nxz0Vsobmp0l9KfDvroNEEdNuNHVfaUuCQasTSLtx3Uhsn81WhmVK9F XIjljsv6YYx03yb5RymlANYM4gkD3Ag= -----END CERTIFICATE-----Generated at Sat Jul 26 11:15:36 2025 by rpki-client