$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa File: 50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa (raw, json) Hash identifier: OpS4t0wrvxLcoMcLGg/6S6KCbXGAnxtUX0GuxdG8Ngs= Subject key identifier: E2:DF:8D:28:F7:4A:FF:6C:BA:B9:FD:5C:D9:E6:75:C5:DF:5E:31:0E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114B064FD82C186A6FF180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4b:06:4f:d8:2c:18:6a:6f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7da63956-6aa0-4817-b5ff-92a2293d8a00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:96:a7:60:e2:07:21:46:01:18:36:4f:50:03: aa:80:37:87:04:c1:35:2b:1e:a2:8d:6f:04:1e:2a: ce:c1:60:d4:b4:5b:13:0d:07:0e:f3:5a:4a:cb:be: 62:5c:ae:19:22:96:0e:24:28:ec:8f:5e:c2:e3:4b: cb:07:3b:48:ba:80:8c:9b:40:2c:39:5c:7b:94:00: aa:50:59:83:44:8b:22:dc:9e:6f:4e:b5:8a:48:0a: 06:15:f8:32:31:81:00:95:75:7b:c5:d4:74:0b:56: ee:cd:22:7d:2b:92:00:4c:de:bf:25:3a:8e:d0:36: bd:81:41:cb:20:87:3f:55:e7:7d:e2:34:2f:1c:85: c5:28:d3:3f:5e:9d:52:00:ea:b0:e8:d4:e7:2f:42: 13:4c:4d:52:60:bf:a2:2a:01:70:ca:d7:f3:93:65: 4f:e4:9b:a6:cc:8d:55:2f:bc:13:8e:8d:91:7b:e1: 0c:42:cb:95:fd:98:85:41:8d:1f:ec:4f:c6:c2:8b: 27:c4:e8:f3:9d:52:5a:53:37:03:9e:0f:49:46:49: 3a:8d:e7:9d:ec:3d:2c:d9:83:fc:fe:24:8f:44:76: f7:76:19:97:ad:e2:6a:4b:23:15:6b:7d:f8:c8:2e: 3f:23:0a:ee:ad:b4:32:cb:1a:e5:c8:fb:73:3d:72: 1d:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:DF:8D:28:F7:4A:FF:6C:BA:B9:FD:5C:D9:E6:75:C5:DF:5E:31:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/50d2c3f0-52cd-340d-bedf-ea1f163bd67b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:da:2c:79:09:10:41:38:9a:87:bc:66:b4:99:80:ce:03:c0: ac:06:24:d7:62:1d:f7:28:d9:3f:33:06:05:f4:22:49:2c:ad: 76:5f:46:15:d7:e1:f8:23:75:49:73:ef:d4:9c:91:8e:29:f7: 7e:06:cc:f2:4c:e6:0e:77:4f:a5:10:4d:2d:fc:72:c3:92:b6: 7c:9e:8b:4b:04:51:b8:29:b5:71:97:d7:b4:f9:8a:22:64:e3: 4f:35:0f:6a:00:df:00:be:6e:40:e6:ff:5e:67:6c:ab:77:c2: 78:11:66:9f:2d:5b:dd:3f:cc:a9:cd:a2:35:16:11:06:ff:5a: fe:0a:2c:50:5e:ea:96:56:dc:44:ec:e0:bf:55:e2:22:d4:ff: 56:47:c5:9d:ea:57:97:d4:53:f5:ac:cd:9b:25:b1:2a:ac:67: b0:d9:cf:2b:7e:85:a8:0f:83:5d:c0:31:28:d6:cb:d8:2a:20: 95:47:11:86:75:4a:27:70:82:04:87:17:99:59:cb:e9:e9:c3: 77:4d:39:78:e3:1e:a3:7b:bd:51:00:58:6c:30:3f:c8:91:a2: 7d:94:61:76:b2:44:14:f0:49:ba:66:ae:98:32:08:90:55:f9: f4:d1:bb:c2:3b:04:25:4b:d6:52:e6:82:82:ae:ce:5a:5c:55: 98:0f:95:12 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUsGT9gsGGpv8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk N2RhNjM5NTYtNmFhMC00ODE3LWI1ZmYtOTJhMjI5M2Q4YTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJanYOIHIUYBGDZPUAOqgDeHBME1Kx6ijW8E HirOwWDUtFsTDQcO81pKy75iXK4ZIpYOJCjsj17C40vLBztIuoCMm0AsOVx7lACq UFmDRIsi3J5vTrWKSAoGFfgyMYEAlXV7xdR0C1buzSJ9K5IATN6/JTqO0Da9gUHL IIc/Ved94jQvHIXFKNM/Xp1SAOqw6NTnL0ITTE1SYL+iKgFwytfzk2VP5JumzI1V L7wTjo2Re+EMQsuV/ZiFQY0f7E/GwosnxOjznVJaUzcDng9JRkk6jeed7D0s2YP8 /iSPRHb3dhmXreJqSyMVa334yC4/IwrurbQyyxrlyPtzPXId7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOLfjSj3Sv9surn9XNnmdcXfXjEOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTBkMmMzZjAtNTJjZC0z NDBkLWJlZGYtZWExZjE2M2JkNjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKfaLHkJEEE4moe8ZrSZgM4DwKwGJNdiHfco2T8zBgX0IkksrXZfRhXX 4fgjdUlz79SckY4p934GzPJM5g53T6UQTS38csOStnyei0sEUbgptXGX17T5iiJk 4081D2oA3wC+bkDm/15nbKt3wngRZp8tW90/zKnNojUWEQb/Wv4KLFBe6pZW3ETs 4L9V4iLU/1ZHxZ3qV5fUU/WszZslsSqsZ7DZzyt+hagPg13AMSjWy9gqIJVHEYZ1 SidwggSHF5lZy+npw3dNOXjjHqN7vVEAWGwwP8iRon2UYXayRBTwSbpmrpgyCJBV +fTRu8I7BCVL1lLmgoKuzlpcVZgPlRI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:17 2025 by rpki-client