$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57a58d63-87ff-3389-8f1c-2b8febc74f56.roa File: 57a58d63-87ff-3389-8f1c-2b8febc74f56.roa (raw, json) Hash identifier: o4gGAcd+8EHJtEQuz/fkbYtMMrAxchQw0YMB/pJCs6g= Subject key identifier: CE:FE:60:5C:B9:2D:9B:67:78:57:C7:CD:9C:CA:C0:BB:0B:F5:23:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FEC57FE4B5C8975EFE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57a58d63-87ff-3389-8f1c-2b8febc74f56.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fe:c5:7f:e4:b5:c8:97:5e:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f361ea9b-ef6c-41af-bcdc-8aee51709f78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:f7:81:ed:ec:1c:30:97:80:2f:80:6d:1f:d9: 4c:7d:61:0d:4e:5c:9e:b8:de:63:ae:02:5b:2e:66: 7f:3d:13:32:e5:88:e5:cd:c0:b8:67:26:f7:04:ed: 13:9d:72:e4:d7:36:c8:5a:df:33:a8:48:05:bf:52: cf:9f:d5:25:71:c0:01:62:24:4b:b3:41:dd:1d:c0: 8e:a7:0a:b4:41:4c:21:6c:f6:20:8b:62:a8:31:2a: a4:7a:56:97:cf:b7:ed:f2:7e:f8:49:74:f1:37:51: 6a:09:fb:73:d3:c6:66:05:59:eb:86:6b:86:4c:15: 9f:a3:47:5e:b4:05:31:95:08:d7:fb:9c:ae:94:73: b6:9d:21:58:f1:52:12:a6:20:50:6b:c6:51:8a:9f: 57:36:0b:a5:b9:4d:22:aa:27:0f:20:97:c8:87:f3: 79:21:1c:4c:06:0b:ce:a4:71:6e:56:d5:d4:4b:95: e9:2a:45:b7:90:3f:08:fc:0b:bd:44:36:2c:15:c9: 9d:ca:0b:b0:38:9b:e8:cf:2b:25:45:8b:0e:da:55: e9:52:99:85:c3:45:48:df:a8:da:ad:2c:41:98:f9: 16:8b:d1:f9:db:32:62:01:c5:65:ce:e3:b3:ef:b6: ce:11:22:8f:ff:27:cb:d5:bf:a6:d9:19:da:7d:d6: c6:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:FE:60:5C:B9:2D:9B:67:78:57:C7:CD:9C:CA:C0:BB:0B:F5:23:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57a58d63-87ff-3389-8f1c-2b8febc74f56.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:1c:45:62:5d:eb:07:a4:78:a0:7d:5f:90:7b:5a:53:9b:f6: cb:b7:92:dd:c6:20:ea:6d:86:f1:e8:4a:1d:c4:3d:df:e2:69: 31:1c:60:6b:75:3c:36:ae:dd:ff:07:ce:d6:b3:f4:f9:16:7f: d7:dd:7c:46:b6:40:74:38:7b:1e:49:0f:cc:c1:5a:16:ba:e6: 88:73:8d:b3:d3:ea:84:4e:da:fb:3b:ac:e8:0b:ed:f0:38:5f: 4a:b4:7c:c6:b3:b6:29:a4:99:76:1e:eb:3e:de:77:c4:e4:b2: 45:35:69:de:d9:19:96:6f:cf:12:2c:53:24:28:73:e5:9c:13: fc:8f:78:4a:33:c1:7a:8f:c9:dc:e3:65:f9:d6:03:9f:db:db: 3d:ed:59:64:73:39:a4:82:fd:c1:2d:6d:2f:a3:64:56:4d:8b: df:2b:6c:13:91:72:58:fb:bc:38:6a:f1:69:61:4d:09:20:64: 2b:2b:c7:97:be:15:4d:49:20:59:f6:58:6d:62:62:23:1f:f8: 67:dd:e9:2a:f1:06:30:86:b2:33:24:8f:65:6d:7d:ef:97:f6: 2a:35:e6:cc:22:20:98:3c:05:de:7b:7d:39:d9:5e:a1:10:54: 34:20:a4:d4:19:62:44:b4:a2:ec:82:6b:cf:1e:e6:47:9b:24: 1f:a5:7b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf7Ff+S1yJde/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjM2MWVhOWItZWY2Yy00MWFmLWJjZGMtOGFlZTUxNzA5Zjc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsveB7ewcMJeAL4BtH9lMfWENTlyeuN5jrgJb LmZ/PRMy5YjlzcC4Zyb3BO0TnXLk1zbIWt8zqEgFv1LPn9UlccABYiRLs0HdHcCO pwq0QUwhbPYgi2KoMSqkelaXz7ft8n74SXTxN1FqCftz08ZmBVnrhmuGTBWfo0de tAUxlQjX+5yulHO2nSFY8VISpiBQa8ZRip9XNguluU0iqicPIJfIh/N5IRxMBgvO pHFuVtXUS5XpKkW3kD8I/Au9RDYsFcmdyguwOJvozyslRYsO2lXpUpmFw0VI36ja rSxBmPkWi9H52zJiAcVlzuOz77bOESKP/yfL1b+m2RnafdbGuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM7+YFy5LZtneFfHzZzKwLsL9SMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTdhNThkNjMtODdmZi0z Mzg5LThmMWMtMmI4ZmViYzc0ZjU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABEcRWJd6wekeKB9X5B7WlOb9su3kt3GIOpthvHoSh3EPd/iaTEcYGt1 PDau3f8Hztaz9PkWf9fdfEa2QHQ4ex5JD8zBWha65ohzjbPT6oRO2vs7rOgL7fA4 X0q0fMaztimkmXYe6z7ed8TkskU1ad7ZGZZvzxIsUyQoc+WcE/yPeEozwXqPydzj ZfnWA5/b2z3tWWRzOaSC/cEtbS+jZFZNi98rbBORclj7vDhq8WlhTQkgZCsrx5e+ FU1JIFn2WG1iYiMf+Gfd6SrxBjCGsjMkj2Vtfe+X9io15swiIJg8Bd57fTnZXqEQ VDQgpNQZYkS0ouyCa88e5kebJB+le0s= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:32 2025 by rpki-client