$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/577a73a0-6e1d-3ea0-83c3-93a8c4b58117.roa File: 577a73a0-6e1d-3ea0-83c3-93a8c4b58117.roa (raw, json) Hash identifier: bDBh0cO5EaEjnKQHFOjgoVYA3aNKF9xOVfA2OuiGT00= Subject key identifier: F5:01:5A:8E:07:32:EF:DD:4A:63:2C:F2:C6:56:DA:05:47:F5:E3:CD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FE6DA9245543DCA3B1E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/577a73a0-6e1d-3ea0-83c3-93a8c4b58117.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.179.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fe:6d:a9:24:55:43:dc:a3:b1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=cfb61f0e-7cf5-46c1-b009-12d2bac6cd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ca:66:c7:3e:6e:a4:ea:a5:f6:3d:4e:77:d7: 68:9a:c0:1a:73:d0:f0:cb:d1:0a:67:e9:f2:00:91: 02:3c:14:1a:da:e3:5d:32:2a:21:fa:9c:f2:83:9d: a7:a7:d1:fd:46:29:2d:16:8a:c1:26:b3:e5:93:e5: f4:1f:20:4b:c9:a5:60:f8:f1:1b:da:2c:b4:d8:31: 6a:aa:32:cd:a1:00:d6:98:6b:2c:b1:0b:b4:11:d3: bc:da:c3:9d:df:b6:ed:ce:9d:9e:48:c0:fa:08:eb: 82:af:62:47:c1:b4:72:f0:6a:c0:0d:86:68:43:00: 4f:85:30:b5:f1:fe:b9:0f:23:c5:ad:bb:e1:0e:74: 4f:eb:f8:14:70:b2:1f:c9:78:43:f1:18:70:27:ab: a1:33:03:98:02:b2:d4:6c:a9:46:b0:ab:bb:29:b2: f5:8b:3e:7e:a2:b7:aa:89:59:ea:4f:8b:02:01:f2: 1a:e8:bb:48:a9:c8:fa:c6:d7:05:75:1e:d7:f5:cb: 0c:61:ca:bf:57:c4:c6:6c:36:3b:65:84:88:92:f8: e1:8c:34:2f:7c:9e:86:a1:e6:34:78:24:de:03:85: 3a:61:2f:ce:68:c6:0e:25:44:81:72:42:ad:d4:68: 58:d1:0a:5a:a4:5b:72:47:b8:14:ba:b9:5b:99:d7: f3:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:01:5A:8E:07:32:EF:DD:4A:63:2C:F2:C6:56:DA:05:47:F5:E3:CD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/577a73a0-6e1d-3ea0-83c3-93a8c4b58117.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.179.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:10:4d:13:1c:ee:52:4b:0f:41:d1:0c:e4:48:b0:06:1f:32: c5:3d:b8:c9:fc:16:46:79:6e:7f:21:ec:9f:4a:a8:c2:8e:e0: c7:c7:4f:a7:dd:41:02:61:4d:c2:0a:95:04:29:92:34:9e:ba: 42:18:09:bc:84:98:dc:0d:d0:99:6d:c9:c6:41:9f:0f:eb:99: 14:cb:c6:cf:e7:96:86:e8:f6:a6:6f:fa:ba:37:5a:66:93:2b: 37:9a:af:b8:b4:9d:7b:39:5c:84:2f:29:df:26:f9:f8:ad:79: 5f:9d:a1:cf:34:01:83:f8:18:01:74:ac:64:af:47:b4:97:f6: d9:3c:ae:44:cc:69:fd:12:d7:4b:0b:09:63:d0:74:c1:05:23: c1:c4:54:dd:b7:5d:85:fc:23:61:67:eb:b2:49:9c:96:d7:51: d7:f0:4c:ac:e9:87:79:e2:f8:3d:a5:4f:bd:b5:1d:6a:f3:a1: f6:4c:ea:91:82:9d:b2:bd:8b:c2:b7:7e:31:c3:c1:83:36:d6: 53:df:5b:ab:38:61:0c:bb:c8:0f:0a:c5:fb:ae:32:04:3c:79: c6:44:57:d4:e8:47:ee:47:49:17:f4:6a:18:3a:0e:3e:dd:b9: f9:54:a7:c5:a0:ff:0a:81:a7:10:35:d1:ff:2b:b1:20:58:b1: b4:f7:0d:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf5tqSRVQ9yjseAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk Y2ZiNjFmMGUtN2NmNS00NmMxLWIwMDktMTJkMmJhYzZjZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcpmxz5upOql9j1Od9domsAac9Dwy9EKZ+ny AJECPBQa2uNdMioh+pzyg52np9H9RiktForBJrPlk+X0HyBLyaVg+PEb2iy02DFq qjLNoQDWmGsssQu0EdO82sOd37btzp2eSMD6COuCr2JHwbRy8GrADYZoQwBPhTC1 8f65DyPFrbvhDnRP6/gUcLIfyXhD8RhwJ6uhMwOYArLUbKlGsKu7KbL1iz5+oreq iVnqT4sCAfIa6LtIqcj6xtcFdR7X9csMYcq/V8TGbDY7ZYSIkvjhjDQvfJ6GoeY0 eCTeA4U6YS/OaMYOJUSBckKt1GhY0QpapFtyR7gUurlbmdfzkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUBWo4HMu/dSmMs8sZW2gVH9ePNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTc3YTczYTAtNmUxZC0z ZWEwLTgzYzMtOTNhOGM0YjU4MTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQQTRMc7lJLD0HRDORIsAYfMsU9uMn8FkZ5bn8h7J9KqMKO4MfHT6fd QQJhTcIKlQQpkjSeukIYCbyEmNwN0JltycZBnw/rmRTLxs/nlobo9qZv+ro3WmaT Kzear7i0nXs5XIQvKd8m+fiteV+doc80AYP4GAF0rGSvR7SX9tk8rkTMaf0S10sL CWPQdMEFI8HEVN23XYX8I2Fn67JJnJbXUdfwTKzph3ni+D2lT721HWrzofZM6pGC nbK9i8K3fjHDwYM21lPfW6s4YQy7yA8KxfuuMgQ8ecZEV9ToR+5HSRf0ahg6Dj7d uflUp8Wg/wqBpxA10f8rsSBYsbT3DV8= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:34 2025 by rpki-client