$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5805eb65-1cfe-3e81-8adb-3564e39a085f.roa File: 5805eb65-1cfe-3e81-8adb-3564e39a085f.roa (raw, json) Hash identifier: toi2chS0r8aynqS1u3cAa1OJQEJv+9/46rO2GwrMKDM= Subject key identifier: B2:12:28:B9:BD:03:0D:5B:27:BA:B1:F6:F1:38:57:62:8F:99:58:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114E363343319DA7973900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5805eb65-1cfe-3e81-8adb-3564e39a085f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4e:36:33:43:31:9d:a7:97:39:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=24bc91f2-d86a-4bb4-a693-c72ff543e59f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:97:cd:d9:88:4c:f6:bf:b1:fd:41:97:72:b3: 05:ee:a5:4b:c2:83:04:5c:09:26:fa:59:20:16:8e: 8c:d1:99:48:d0:dc:81:9e:32:c9:93:6d:e0:b8:fc: 49:d2:65:a1:ca:d7:48:fd:e5:f4:59:8e:e7:47:a4: 35:ae:cb:0b:6e:08:71:b7:67:5b:2a:4c:bb:c4:d4: 23:16:41:c3:e4:34:62:50:09:2e:46:51:f7:29:3f: 59:a8:55:d0:51:05:ec:1e:29:c3:47:2f:3a:b5:42: 92:7f:4d:6d:79:a1:90:e8:e0:3b:ce:1c:a1:e5:2d: ca:6a:a0:78:ab:b7:6b:d2:e9:80:55:2f:97:5c:f5: c2:59:08:b5:05:01:79:56:4b:79:a1:7f:d3:a7:d9: 02:6c:e6:e1:4d:3c:38:f4:0e:24:43:1c:b3:ef:98: a7:b2:6f:80:c4:b3:2d:e6:2d:19:44:44:7f:64:92: f7:88:b3:95:43:46:fd:9b:14:04:93:24:b0:31:85: 8e:89:80:8e:8e:20:96:1e:de:98:92:eb:19:30:20: 32:99:25:27:c7:4a:ca:4f:fe:db:2d:0b:ee:db:75: 9f:8b:de:d6:13:94:51:81:56:15:9a:ac:a7:53:d1: 0a:b6:17:97:e9:00:bb:9d:2b:39:c6:1f:a9:15:56: 89:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:12:28:B9:BD:03:0D:5B:27:BA:B1:F6:F1:38:57:62:8F:99:58:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5805eb65-1cfe-3e81-8adb-3564e39a085f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:60:5f:82:6f:1f:54:38:53:a3:3a:e5:c5:67:25:a3:9b:54: 78:c8:83:24:dd:4e:e1:ad:86:a2:a3:40:36:8b:97:ee:0d:a2: 3d:6a:d0:50:96:e4:b0:bf:31:d3:9d:1d:36:c4:a7:8d:44:cc: d7:0e:a4:70:c2:e9:e2:68:84:12:4d:03:fd:3a:00:ea:c9:b1: ad:49:5d:78:36:eb:29:63:61:ef:ff:a3:94:55:69:44:6c:31: f7:d9:9b:9e:3b:e2:15:99:c7:1c:ac:8a:1c:7e:f3:d2:c0:e7: ec:e6:66:af:ce:f3:25:25:15:97:a9:8e:65:e5:d3:32:8c:17: b3:76:23:49:ed:d2:5d:d6:44:ee:8d:81:e2:62:be:dc:dd:49: 8a:32:d8:75:e5:43:86:97:44:6a:b6:d1:a3:8c:eb:ba:39:67: f0:2c:2a:de:d4:4b:5c:bd:b0:62:cd:5f:d0:ab:44:30:19:da: bc:00:b7:b8:db:ee:9b:7a:4c:8e:46:48:12:6a:d2:78:34:f3: 84:21:3c:2e:1b:24:d4:0d:0c:18:0c:dc:16:14:e7:6b:fd:43: 1e:44:32:aa:4d:08:42:bf:56:2d:03:3c:97:25:2a:81:83:21: ff:2e:75:da:ce:c4:75:5a:e9:a2:92:c0:8e:2b:01:7b:98:11: 4a:e8:72:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEU42M0MxnaeXOQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjRiYzkxZjItZDg2YS00YmI0LWE2OTMtYzcyZmY1NDNlNTlmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZfN2YhM9r+x/UGXcrMF7qVLwoMEXAkm+lkg Fo6M0ZlI0NyBnjLJk23guPxJ0mWhytdI/eX0WY7nR6Q1rssLbghxt2dbKky7xNQj FkHD5DRiUAkuRlH3KT9ZqFXQUQXsHinDRy86tUKSf01teaGQ6OA7zhyh5S3KaqB4 q7dr0umAVS+XXPXCWQi1BQF5Vkt5oX/Tp9kCbObhTTw49A4kQxyz75insm+AxLMt 5i0ZRER/ZJL3iLOVQ0b9mxQEkySwMYWOiYCOjiCWHt6YkusZMCAymSUnx0rKT/7b LQvu23Wfi97WE5RRgVYVmqynU9EKtheX6QC7nSs5xh+pFVaJrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLISKLm9Aw1bJ7qx9vE4V2KPmVhzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTgwNWViNjUtMWNmZS0z ZTgxLThhZGItMzU2NGUzOWEwODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZgX4JvH1Q4U6M65cVnJaObVHjIgyTdTuGthqKjQDaLl+4Noj1q0FCW 5LC/MdOdHTbEp41EzNcOpHDC6eJohBJNA/06AOrJsa1JXXg26yljYe//o5RVaURs MffZm5474hWZxxysihx+89LA5+zmZq/O8yUlFZepjmXl0zKMF7N2I0nt0l3WRO6N geJivtzdSYoy2HXlQ4aXRGq20aOM67o5Z/AsKt7US1y9sGLNX9CrRDAZ2rwAt7jb 7pt6TI5GSBJq0ng084QhPC4bJNQNDBgM3BYU52v9Qx5EMqpNCEK/Vi0DPJclKoGD If8uddrOxHVa6aKSwI4rAXuYEUrocng= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:28 2025 by rpki-client