$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa File: 5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa (raw, json) Hash identifier: TwG7rchNGF/qPuAolWS6E6RlffbBajbdIbh8It6gdh4= Subject key identifier: F9:C5:0E:BF:37:5E:71:80:00:75:22:2E:2B:B9:BB:1B:EA:F4:AF:FC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841147944E62ECBCBA5DD910 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:47:94:4e:62:ec:bc:ba:5d:d9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=aee9d295-898d-414d-b481-5052862cf3c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9b:05:83:a9:b9:25:05:f7:27:46:0a:95:54: b2:96:af:69:61:41:5a:a0:01:9f:27:a9:6f:9a:eb: f7:14:b5:eb:13:ac:c6:df:37:55:1b:f7:6d:e5:2f: b8:55:00:07:8c:c3:c3:f6:fc:f3:c8:10:90:48:60: ec:b0:9e:b4:ac:29:74:a9:34:ac:f3:6c:e6:b8:9c: c7:f1:4e:4d:52:ba:89:9b:64:3f:c0:25:6d:06:74: ba:63:ca:c4:32:fa:55:c5:27:38:d0:a8:5c:fb:26: fd:4c:a9:c9:36:77:0b:b6:79:5d:bd:c1:d7:94:27: 75:6a:ab:de:66:a3:b8:3e:8b:5c:87:17:3f:01:b8: 81:a1:00:c5:22:91:b1:36:3c:af:99:98:69:68:96: 1e:ef:4d:48:10:ef:05:df:06:0c:05:11:eb:06:c7: 68:a2:f4:6d:42:09:43:89:79:1a:d1:40:7d:7e:39: e8:70:41:ca:86:d3:a7:47:f1:e2:68:1f:ea:38:4d: 89:d2:a3:3a:93:36:58:11:64:c5:81:39:cd:57:fb: a0:28:37:f9:7d:d5:3a:4a:b9:08:4a:98:51:eb:88: 2a:92:b8:a1:3b:88:b0:fe:37:9f:43:3c:77:13:8e: 0b:9a:c5:76:60:b7:c0:ef:9c:78:b1:ea:51:64:00: 9d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:C5:0E:BF:37:5E:71:80:00:75:22:2E:2B:B9:BB:1B:EA:F4:AF:FC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:4f:b4:b2:ab:6a:0c:e0:c6:5a:47:38:22:2f:6a:c0:69:2c: 53:a5:3e:a6:95:57:c8:1d:ed:78:15:58:c3:d9:64:da:72:41: d8:a3:ec:77:0b:f5:28:e4:62:0a:0f:d5:fb:7d:a0:1d:55:bf: e5:eb:12:3d:d5:34:c5:8b:2f:39:d6:2e:f0:3d:3f:ef:c5:83: e0:c7:5d:e0:e0:91:39:44:35:20:ef:41:27:3a:f8:f9:31:35: 38:68:84:e5:86:b0:c1:d2:55:2c:81:fa:4f:77:c5:1f:99:bc: 1e:12:36:65:2f:56:11:d7:96:65:1a:fb:44:01:4f:80:b9:8e: b0:f0:d9:a2:18:8f:56:bd:1b:83:39:bf:cd:7f:51:ba:92:b4: 1e:79:bd:c8:ad:e8:80:8b:dd:11:b4:b2:33:19:b8:82:a6:0f: 0e:f1:f6:c2:cc:b8:06:8a:e4:e0:5e:e9:5b:0e:db:8f:9f:23: 7c:f0:24:09:df:b5:81:a7:fa:65:57:a5:f0:f0:7a:7b:98:54: 55:44:3b:51:54:52:44:99:27:3b:b7:38:f1:62:99:6b:50:0d: 6c:5a:25:ad:48:cd:e9:72:de:82:a8:ba:e4:7f:2b:41:46:6e: 02:75:12:22:16:70:2d:6d:33:f0:38:8e:95:35:cb:be:68:3c: 98:1b:a8:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUeUTmLsvLpd2RAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YWVlOWQyOTUtODk4ZC00MTRkLWI0ODEtNTA1Mjg2MmNmM2M4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5sFg6m5JQX3J0YKlVSylq9pYUFaoAGfJ6lv muv3FLXrE6zG3zdVG/dt5S+4VQAHjMPD9vzzyBCQSGDssJ60rCl0qTSs82zmuJzH 8U5NUrqJm2Q/wCVtBnS6Y8rEMvpVxSc40Khc+yb9TKnJNncLtnldvcHXlCd1aqve ZqO4Potchxc/AbiBoQDFIpGxNjyvmZhpaJYe701IEO8F3wYMBRHrBsdoovRtQglD iXka0UB9fjnocEHKhtOnR/HiaB/qOE2J0qM6kzZYEWTFgTnNV/ugKDf5fdU6SrkI SphR64gqkrihO4iw/jefQzx3E44LmsV2YLfA75x4sepRZACdMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnFDr83XnGAAHUiLiu5uxvq9K/8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWI0ZWQyYzQtMTE0Yy0z Y2YwLTliZmMtMGQwY2VjZTgwMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAhPtLKragzgxlpHOCIvasBpLFOlPqaVV8gd7XgVWMPZZNpyQdij7HcL 9SjkYgoP1ft9oB1Vv+XrEj3VNMWLLznWLvA9P+/Fg+DHXeDgkTlENSDvQSc6+Pkx NThohOWGsMHSVSyB+k93xR+ZvB4SNmUvVhHXlmUa+0QBT4C5jrDw2aIYj1a9G4M5 v81/UbqStB55vcit6ICL3RG0sjMZuIKmDw7x9sLMuAaK5OBe6VsO24+fI3zwJAnf tYGn+mVXpfDwenuYVFVEO1FUUkSZJzu3OPFimWtQDWxaJa1Izely3oKouuR/K0FG bgJ1EiIWcC1tM/A4jpU1y75oPJgbqMg= -----END CERTIFICATE-----Generated at Sat Jul 26 00:04:04 2025 by rpki-client