$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa File: 68f42845-cc20-3621-b523-10070dd8ca9f.roa (raw, json) Hash identifier: oIuftFE1Ouwty4Ee/DOIwhQu3n3O9HnrNm2vYsqlAtw= Subject key identifier: 8F:B6:CD:D7:EE:68:38:B5:17:37:86:FD:58:AC:8E:CE:60:2F:CD:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FA0C9BCF1DE6882F3480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fa:0c:9b:cf:1d:e6:88:2f:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=90c48846-ca3a-4a0d-aa39-3b7c4206c2f4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:d8:2b:b6:7e:06:74:db:d7:fa:17:a2:71:ab: 5a:c8:cd:01:d7:1c:e7:56:9a:e8:31:14:a3:3e:38: 5c:b8:56:52:b8:ef:19:33:47:77:72:ca:6b:bd:43: 0c:44:b2:3c:92:2a:b4:d0:f5:f7:f2:7c:58:06:6e: 7d:7e:8f:f9:7a:4d:70:13:f1:6d:24:5b:8c:1b:8b: 49:1d:d9:7e:43:20:0d:10:e7:cb:7c:96:db:21:bc: 5f:1f:06:ad:45:32:81:f3:13:86:18:1d:9b:3d:b6: e4:79:a4:da:dd:a4:72:cb:48:06:e6:0b:2e:ca:f6: e1:3f:3d:57:fc:1c:55:bf:d6:34:90:32:48:54:d3: aa:84:6c:05:d1:a9:84:27:c5:d7:34:a4:79:d4:74: e7:46:5b:4a:20:94:60:c8:60:15:95:1e:5c:fd:1c: 21:4c:8b:6a:41:21:f2:56:ac:92:62:e4:87:18:0d: 4f:28:cf:d9:10:78:b7:6d:53:00:21:19:26:69:e7: 28:22:af:6e:25:bd:53:86:ef:e2:4a:74:f6:43:ae: 7b:d2:2f:72:26:ab:7c:b2:4f:3b:c8:4b:ed:c7:89: 18:d1:84:34:56:7a:82:65:d0:06:5f:c5:3d:d4:d6: 17:e7:8a:7d:fc:24:97:30:13:a6:7f:89:2b:94:40: 63:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:B6:CD:D7:EE:68:38:B5:17:37:86:FD:58:AC:8E:CE:60:2F:CD:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/68f42845-cc20-3621-b523-10070dd8ca9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:5a:5e:fd:ec:e4:ac:a1:b9:77:f3:4b:58:f0:f2:97:55:2f: e1:9d:df:87:04:e4:1e:a9:d4:e5:b0:d9:74:9f:6c:f9:1c:fa: 5a:a2:f2:e5:4f:89:3b:55:b2:cb:4f:dc:66:ed:cd:0a:9f:71: 4e:63:e1:2b:45:b1:b6:54:7c:0f:7e:4b:89:77:7e:3b:2e:e7: af:84:6d:e9:d6:7b:a6:07:56:d7:61:38:ee:00:ff:b6:46:9a: d5:1f:8f:0b:a9:1c:65:7e:30:c6:9a:2e:26:3d:1f:b8:ac:f2: 26:83:18:be:cf:42:13:62:1b:22:29:41:85:07:5e:c5:8f:6e: 49:73:ca:b6:f3:f3:40:86:e1:ef:33:5d:b0:85:a2:8c:3e:20: 87:11:b7:c1:ac:37:12:fb:c8:e8:a6:d1:df:06:a2:7b:13:e1: d0:b3:6f:4f:d9:3d:33:11:fa:07:a6:b6:e6:b7:0d:1a:d9:7e: fb:ef:b5:b4:f9:94:1b:eb:01:b5:1a:0a:66:91:ab:37:38:b5: 65:f8:47:27:86:f0:4c:44:3d:db:fc:b3:1f:12:78:0a:c8:c0: ae:d0:37:03:95:d6:d0:47:c3:94:c5:cf:fb:8d:c5:67:7a:a8: 45:b6:7b:6b:ed:29:cd:ff:25:a5:50:cb:a2:37:a4:3c:7b:1a: ab:e1:3c:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfoMm88d5ogvNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTBjNDg4NDYtY2EzYS00YTBkLWFhMzktM2I3YzQyMDZjMmY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNgrtn4GdNvX+heicatayM0B1xznVproMRSj PjhcuFZSuO8ZM0d3csprvUMMRLI8kiq00PX38nxYBm59fo/5ek1wE/FtJFuMG4tJ Hdl+QyANEOfLfJbbIbxfHwatRTKB8xOGGB2bPbbkeaTa3aRyy0gG5gsuyvbhPz1X /BxVv9Y0kDJIVNOqhGwF0amEJ8XXNKR51HTnRltKIJRgyGAVlR5c/RwhTItqQSHy VqySYuSHGA1PKM/ZEHi3bVMAIRkmaecoIq9uJb1Thu/iSnT2Q6570i9yJqt8sk87 yEvtx4kY0YQ0VnqCZdAGX8U91NYX54p9/CSXMBOmf4krlEBjzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI+2zdfuaDi1FzeG/Visjs5gL83LMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjhmNDI4NDUtY2MyMC0z NjIxLWI1MjMtMTAwNzBkZDhjYTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPITMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpaXv3s5KyhuXfzS1jw8pdVL+Gd34cE5B6p1OWw2XSfbPkc+lqi8uVP iTtVsstP3GbtzQqfcU5j4StFsbZUfA9+S4l3fjsu56+EbenWe6YHVtdhOO4A/7ZG mtUfjwupHGV+MMaaLiY9H7is8iaDGL7PQhNiGyIpQYUHXsWPbklzyrbz80CG4e8z XbCFoow+IIcRt8GsNxL7yOim0d8GonsT4dCzb0/ZPTMR+gemtua3DRrZfvvvtbT5 lBvrAbUaCmaRqzc4tWX4RyeG8ExEPdv8sx8SeArIwK7QNwOV1tBHw5TFz/uNxWd6 qEW2e2vtKc3/JaVQy6I3pDx7GqvhPG0= -----END CERTIFICATE-----Generated at Sat Jul 26 00:17:14 2025 by rpki-client