$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa File: 6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa (raw, json) Hash identifier: fo4vcEwiRuB31+P4Um+Kev/wSMHq+c3HToGWE0N+SEk= Subject key identifier: EC:45:3F:4D:5F:13:66:7F:90:EF:83:43:26:60:14:A1:DC:F4:51:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FA4838319337E1723AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fa:48:38:31:93:37:e1:72:3a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9cfb0a19-ed1f-4d30-946c-a7f52f817aa1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:70:e3:c4:a7:f5:7a:c1:55:52:c4:f6:01:59: 78:19:81:86:05:a4:54:ea:16:84:26:96:47:c8:50: 7a:ca:0b:34:9f:ee:da:be:92:f6:ff:c4:55:da:82: d3:c2:c2:b9:49:06:3d:a0:12:cf:6e:75:55:43:1c: 0c:e3:07:49:51:33:b9:05:4f:f6:71:ed:dd:96:25: 3c:91:90:b7:af:9a:b9:f0:94:9a:f5:6d:f6:f0:cd: a0:6a:2d:87:d6:66:02:d1:06:bc:8f:d9:2c:8c:e1: 7c:85:0f:0c:a7:d2:fc:cd:3f:d5:c1:33:e1:4c:c9: c6:ac:8d:1b:18:74:de:cf:e5:c4:85:5c:e5:8b:29: 06:2c:bd:b1:13:e2:1c:8a:3a:69:8b:9a:ae:86:1a: ee:0b:fc:1e:d8:cc:0b:ff:10:c8:e1:dc:9a:5f:91: c6:18:16:7b:60:a9:30:2a:d6:40:0f:a5:fd:b0:c3: cb:2c:e2:10:59:d5:8a:ac:30:d3:d1:f8:d2:bb:bf: 4b:70:1d:76:a6:9d:a0:46:31:e7:db:e6:27:2a:72: dc:0e:f0:53:e8:7a:70:d4:c8:3d:d3:e9:8d:35:33: b4:df:29:81:d2:9c:fa:57:ac:91:37:9f:93:e8:36: f7:bd:3f:a4:af:4b:f0:9d:17:d0:e0:e6:96:67:b0: 21:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:45:3F:4D:5F:13:66:7F:90:EF:83:43:26:60:14:A1:DC:F4:51:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ad:a7:5e:d4:53:22:3c:46:46:b4:1a:16:b7:61:c7:e2:92:6f: 89:c5:b5:b6:5b:21:7a:f4:64:9a:bc:f6:75:cd:1f:9d:bc:b6: b9:79:96:9d:6a:f7:60:6a:43:38:6c:7b:82:24:0a:a2:29:52: 7f:7e:3b:2e:62:6c:f1:8c:d7:39:92:db:58:44:0b:a8:9d:8e: 3b:99:52:17:0a:f7:0d:10:4b:9a:95:4c:ae:a9:fe:03:48:55: 2b:1b:6c:2b:63:22:f3:e5:33:8b:d1:dc:a7:89:cb:3b:70:1b: 17:02:ae:47:20:15:ca:96:2c:d8:02:8e:56:ec:2f:a9:2f:c8: 04:40:e9:b8:fe:15:32:1b:c3:ce:4d:1f:1e:51:82:65:b7:ce: 6a:bc:f7:c2:17:4c:fa:96:2c:2e:5a:c9:ac:4c:03:64:31:67: 3e:5a:c8:17:c0:ab:56:0b:9b:4c:d0:53:7d:ab:23:2b:0e:18: 16:01:87:8b:5c:3f:ac:95:1f:50:b1:56:7c:e5:d8:f9:34:1b: 3b:98:69:14:64:2e:00:e0:f9:94:98:81:ad:72:37:4f:d0:4f: 8f:f3:e3:7d:b7:73:c3:2e:8f:8e:7f:7f:42:54:f0:5d:e7:05: 1c:72:23:4b:9b:bf:a8:51:af:0f:0e:83:1f:ad:e3:8f:37:06: 27:95:83:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfpIODGTN+FyOsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OWNmYjBhMTktZWQxZi00ZDMwLTk0NmMtYTdmNTJmODE3YWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3DjxKf1esFVUsT2AVl4GYGGBaRU6haEJpZH yFB6ygs0n+7avpL2/8RV2oLTwsK5SQY9oBLPbnVVQxwM4wdJUTO5BU/2ce3dliU8 kZC3r5q58JSa9W328M2gai2H1mYC0Qa8j9ksjOF8hQ8Mp9L8zT/VwTPhTMnGrI0b GHTez+XEhVzliykGLL2xE+Icijppi5quhhruC/we2MwL/xDI4dyaX5HGGBZ7YKkw KtZAD6X9sMPLLOIQWdWKrDDT0fjSu79LcB12pp2gRjHn2+YnKnLcDvBT6Hpw1Mg9 0+mNNTO03ymB0pz6V6yRN5+T6Db3vT+kr0vwnRfQ4OaWZ7Ah2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxFP01fE2Z/kO+DQyZgFKHc9FGvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRkOWMwZjUtNTg0Ny0z YjhmLTkxNmQtM2U5ZWIyMTkwMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK2nXtRTIjxGRrQaFrdhx+KSb4nFtbZbIXr0ZJq89nXNH528trl5lp1q 92BqQzhse4IkCqIpUn9+Oy5ibPGM1zmS21hEC6idjjuZUhcK9w0QS5qVTK6p/gNI VSsbbCtjIvPlM4vR3KeJyztwGxcCrkcgFcqWLNgCjlbsL6kvyARA6bj+FTIbw85N Hx5RgmW3zmq898IXTPqWLC5ayaxMA2QxZz5ayBfAq1YLm0zQU32rIysOGBYBh4tc P6yVH1CxVnzl2Pk0GzuYaRRkLgDg+ZSYga1yN0/QT4/z4323c8Muj45/f0JU8F3n BRxyI0ubv6hRrw8Ogx+t4483BieVg84= -----END CERTIFICATE-----Generated at Sat Jul 26 11:15:27 2025 by rpki-client