$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa File: 638d0c7c-5c12-3419-add7-d1fee46c98fa.roa (raw, json) Hash identifier: 2sZi7BbrlLULgVorh0E7k53TGROsGzWemP+VBuRpzGw= Subject key identifier: F6:28:08:E5:53:EE:BB:1C:43:0C:9E:D7:03:8F:7E:EC:37:84:1C:59 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841145D0C0BDBED0754BA4C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:45:d0:c0:bd:be:d0:75:4b:a4:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=fb5e6f98-ac9b-4bdc-915b-b5bbffc7df16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:7a:41:7b:a5:fc:e7:6b:43:f3:0d:13:eb:6d: de:8c:b6:ba:84:ab:a5:3d:39:67:76:ae:54:6f:b2: 14:d9:ae:53:ed:cb:aa:60:40:65:15:08:b7:d2:ea: 2f:55:b1:44:48:da:49:e7:af:5a:d6:71:3a:81:32: 20:3b:6f:78:f2:be:07:20:62:6b:a8:af:20:68:9f: a5:28:ce:67:fe:8a:a9:d5:3d:08:e3:1d:ca:fd:f2: 2a:17:a9:eb:24:be:e1:7f:fd:1a:a8:ad:a6:7d:e9: 07:b3:30:59:44:87:32:2f:58:3e:81:9e:83:4a:44: 2a:cf:a0:bd:df:38:80:0e:49:1b:d5:61:ad:8a:b9: fc:de:93:65:1b:8e:72:cc:13:0b:e5:8f:8a:f8:28: 33:a2:ab:c4:9e:dd:c4:4f:a1:77:c7:5a:a2:98:65: 5a:63:ae:16:66:21:a5:39:5b:0d:6c:7f:35:d1:80: 98:f4:b3:15:f1:fa:d8:1c:c7:b1:cb:2f:b2:07:8d: 36:97:46:36:46:a3:45:03:93:f4:ea:85:f8:4e:6e: 86:08:31:c0:0b:0b:c9:24:fc:3e:db:e2:a8:3f:d1: 2f:f8:16:c3:d1:5a:dd:6c:64:be:35:b1:b1:6c:f9: 8b:cd:ea:78:98:2d:ea:75:ec:61:5b:a3:75:59:b2: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:28:08:E5:53:EE:BB:1C:43:0C:9E:D7:03:8F:7E:EC:37:84:1C:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/638d0c7c-5c12-3419-add7-d1fee46c98fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:00:70:80:74:c7:6c:69:97:28:2b:24:f6:dc:1d:8d:32:09: 93:b3:67:20:59:ab:6e:e8:82:19:72:ec:a5:bf:7f:15:90:6e: eb:a7:d5:e9:5c:ad:bc:9b:68:dc:06:66:d7:08:6b:de:ab:34: fd:dc:6b:30:ba:a8:ca:5c:c7:f6:40:8a:76:10:6e:e0:ef:72: 96:b0:31:df:d1:0c:7a:2e:5a:53:16:90:1d:13:59:e9:ea:21: 74:4d:20:bd:db:0a:10:80:6c:ad:a5:78:c7:9c:65:98:ef:5b: 17:81:fc:bf:99:6b:cb:c6:4e:1f:44:4a:39:7f:a9:8e:f8:3d: bd:21:c4:13:6e:a9:f9:ed:cb:53:33:b6:24:34:34:05:88:59: 3a:cd:76:33:cf:10:63:ec:1d:2a:e0:af:84:45:08:2f:a6:51: cd:c2:68:ba:e2:e9:92:3f:e6:05:b0:39:a4:f1:91:3f:21:bd: fa:85:6a:33:12:f9:11:60:ff:d5:3a:fc:80:97:aa:0b:9e:d6: 48:0c:bf:cf:37:53:06:3e:51:e7:e9:5c:44:c5:fd:09:52:e6: b5:ad:71:09:62:bb:59:e4:22:a9:a4:76:b3:17:f2:e3:59:a0: b9:d0:d5:47:01:8c:18:d2:a2:97:7c:9c:04:ef:92:86:0a:15: 29:65:07:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUXQwL2+0HVLpMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmI1ZTZmOTgtYWM5Yi00YmRjLTkxNWItYjViYmZmYzdkZjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnpBe6X852tD8w0T623ejLa6hKulPTlndq5U b7IU2a5T7cuqYEBlFQi30uovVbFESNpJ569a1nE6gTIgO2948r4HIGJrqK8gaJ+l KM5n/oqp1T0I4x3K/fIqF6nrJL7hf/0aqK2mfekHszBZRIcyL1g+gZ6DSkQqz6C9 3ziADkkb1WGtirn83pNlG45yzBML5Y+K+CgzoqvEnt3ET6F3x1qimGVaY64WZiGl OVsNbH810YCY9LMV8frYHMexyy+yB402l0Y2RqNFA5P06oX4Tm6GCDHACwvJJPw+ 2+KoP9Ev+BbD0VrdbGS+NbGxbPmLzep4mC3qdexhW6N1WbLVCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPYoCOVT7rscQwye1wOPfuw3hBxZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjM4ZDBjN2MtNWMxMi0z NDE5LWFkZDctZDFmZWU0NmM5OGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0AcIB0x2xplygrJPbcHY0yCZOzZyBZq27oghly7KW/fxWQbuun1elc rbybaNwGZtcIa96rNP3cazC6qMpcx/ZAinYQbuDvcpawMd/RDHouWlMWkB0TWenq IXRNIL3bChCAbK2leMecZZjvWxeB/L+Za8vGTh9ESjl/qY74Pb0hxBNuqfnty1Mz tiQ0NAWIWTrNdjPPEGPsHSrgr4RFCC+mUc3CaLri6ZI/5gWwOaTxkT8hvfqFajMS +RFg/9U6/ICXqgue1kgMv883UwY+UefpXETF/QlS5rWtcQliu1nkIqmkdrMX8uNZ oLnQ1UcBjBjSopd8nATvkoYKFSllB6M= -----END CERTIFICATE-----Generated at Sat Jul 26 11:14:23 2025 by rpki-client