$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55bef4b1-e582-3345-9b5d-e4ac58b72f8c.roa File: 55bef4b1-e582-3345-9b5d-e4ac58b72f8c.roa (raw, json) Hash identifier: P42Nw0Z8qExgTQgpbs3AebZbqLLtWWLyqIc01/wZxmI= Subject key identifier: FE:B3:55:BC:B5:8F:4B:7C:07:8A:16:8B:64:C0:75:08:AF:DD:D0:70 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114EA80D5220CE23656E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55bef4b1-e582-3345-9b5d-e4ac58b72f8c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4e:a8:0d:52:20:ce:23:65:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d4ceb6f6-a128-4ef0-acf5-187f49338ccc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:3d:18:48:78:3c:ce:22:cd:ad:52:82:be:59: 27:5a:2a:06:cd:2c:bf:d3:7c:3a:2e:f4:00:e7:bd: 32:90:ac:a9:1f:4b:69:95:07:aa:2e:2a:c1:d7:3b: 92:a8:bc:82:69:1b:95:c9:d2:bd:85:22:da:42:fa: b7:a2:9b:4e:bf:0e:31:45:05:d9:7e:86:ec:66:29: 0b:e5:a1:ee:97:08:22:93:8b:63:96:dd:50:db:4e: f8:be:93:17:e0:d6:46:e5:42:7c:6f:bc:c6:c9:2e: 8c:70:ec:3f:7a:3b:14:10:2b:a2:86:1a:cf:0d:ef: 81:d9:5f:f7:04:d5:9f:ee:d8:c7:5d:58:2d:dd:0c: 7f:9d:6a:1c:23:30:1e:6a:79:57:c8:83:f9:90:52: 2f:18:60:3a:fa:ca:a4:75:28:c7:07:9f:48:b8:6f: 33:f5:2e:44:50:9b:26:f3:48:11:91:39:25:27:33: 0d:c2:60:9e:c6:4c:e2:1a:1f:6f:c7:26:e5:50:d4: 32:db:dd:5c:e3:ff:76:75:d7:78:dc:4a:ca:2a:1a: 83:cb:4c:4c:e2:21:a4:1b:fe:ec:bc:d3:2d:9f:de: 09:7d:fa:b2:ea:24:c2:92:59:3b:43:ee:5d:bf:a0: ab:b1:76:28:ac:6b:93:71:b9:ac:10:0c:28:cb:f2: 98:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B3:55:BC:B5:8F:4B:7C:07:8A:16:8B:64:C0:75:08:AF:DD:D0:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/55bef4b1-e582-3345-9b5d-e4ac58b72f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:38:fe:34:ed:56:b0:d3:88:d1:52:67:be:a6:1a:56:ed:5c: 00:38:f6:ff:e6:a7:66:6e:89:af:0a:f2:ff:10:1a:d4:53:0e: 15:58:4b:14:e7:01:4b:14:03:63:b9:a2:06:5c:48:34:9c:b6: fc:ae:ef:1a:25:35:d7:f1:da:6d:7e:f9:c1:68:e3:33:57:70: 67:e0:30:bb:9f:eb:26:90:37:2d:ed:40:29:72:e3:cb:18:38: 12:a1:9a:96:a0:b2:73:37:c3:63:ed:43:03:68:c5:d7:50:de: 6c:b3:d4:f1:c9:5a:c6:14:ba:ea:47:fe:44:a8:76:b1:6a:3b: 73:ff:39:06:41:b5:bb:fc:f3:41:94:0c:f4:b1:77:ad:b4:aa: d4:90:2b:79:96:65:1d:59:71:46:e4:19:14:a9:fb:47:6e:97: 96:d1:f0:86:5a:06:50:c3:7a:7d:e6:5c:2f:f0:d1:02:b2:27: f5:29:43:f1:1d:f3:1c:cc:85:a1:b0:b7:cd:97:38:27:35:87: ef:16:93:bc:ee:0e:7b:02:20:19:e7:b7:22:10:56:89:3b:3b: 2f:25:1d:ad:f0:a2:99:de:14:fd:12:f8:ce:25:38:6a:91:64: cc:d2:57:00:99:96:62:02:f6:da:95:0b:f8:58:6a:0c:47:d8: 0d:f8:63:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEU6oDVIgziNlbgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDRjZWI2ZjYtYTEyOC00ZWYwLWFjZjUtMTg3ZjQ5MzM4Y2NjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmj0YSHg8ziLNrVKCvlknWioGzSy/03w6LvQA 570ykKypH0tplQeqLirB1zuSqLyCaRuVydK9hSLaQvq3optOvw4xRQXZfobsZikL 5aHulwgik4tjlt1Q2074vpMX4NZG5UJ8b7zGyS6McOw/ejsUECuihhrPDe+B2V/3 BNWf7tjHXVgt3Qx/nWocIzAeanlXyIP5kFIvGGA6+sqkdSjHB59IuG8z9S5EUJsm 80gRkTklJzMNwmCexkziGh9vxyblUNQy291c4/92ddd43ErKKhqDy0xM4iGkG/7s vNMtn94Jffqy6iTCklk7Q+5dv6CrsXYorGuTcbmsEAwoy/KYaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6zVby1j0t8B4oWi2TAdQiv3dBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTViZWY0YjEtZTU4Mi0z MzQ1LTliNWQtZTRhYzU4YjcyZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK44/jTtVrDTiNFSZ76mGlbtXAA49v/mp2Zuia8K8v8QGtRTDhVYSxTn AUsUA2O5ogZcSDSctvyu7xolNdfx2m1++cFo4zNXcGfgMLuf6yaQNy3tQCly48sY OBKhmpagsnM3w2PtQwNoxddQ3myz1PHJWsYUuupH/kSodrFqO3P/OQZBtbv880GU DPSxd620qtSQK3mWZR1ZcUbkGRSp+0dul5bR8IZaBlDDen3mXC/w0QKyJ/UpQ/Ed 8xzMhaGwt82XOCc1h+8Wk7zuDnsCIBnntyIQVok7Oy8lHa3wopneFP0S+M4lOGqR ZMzSVwCZlmIC9tqVC/hYagxH2A34Y8Y= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:35 2025 by rpki-client