$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7094c99d-de74-3c33-9177-33bb5817299b.roa File: 7094c99d-de74-3c33-9177-33bb5817299b.roa (raw, json) Hash identifier: feouKHHNmcg20po7bKB6koI93/8+RSTFm5LY60YDt1s= Subject key identifier: 64:AD:BE:B7:23:34:64:68:1A:35:EA:78:C4:F8:0D:28:3D:4B:27:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114D682A2CB6A7D50CC130 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7094c99d-de74-3c33-9177-33bb5817299b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4d:68:2a:2c:b6:a7:d5:0c:c1:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=332badb1-9e88-4f47-947c-fb1fc7fe2607 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:40:5a:96:bb:7c:5d:8f:fc:b6:9c:c2:f0:9a: 46:e7:d8:f5:3c:69:8e:bc:e6:8c:02:e3:19:65:a7: f0:1c:f0:af:68:8c:f5:e3:34:b6:0a:87:7e:39:4a: f5:d9:cf:d9:cd:e1:02:c2:3c:22:ad:0f:2f:18:ed: 88:5c:2e:83:93:15:5f:39:79:4a:fc:1f:17:c4:62: 1e:3b:ca:ff:8d:0b:55:4c:5d:df:9b:21:a7:59:54: 1d:25:7a:f5:3c:d7:ca:6b:1e:88:03:2b:b2:de:fe: 72:b1:ad:1b:34:92:21:80:ad:c8:49:8e:60:41:39: a2:ee:69:f5:ba:ca:98:15:66:cc:b5:b0:09:b7:fb: 1b:e6:82:97:d1:b6:dd:e7:f8:46:94:eb:df:a1:95: 72:be:c2:c5:b4:f5:7b:4b:10:5c:a9:15:aa:a7:8b: 8f:16:08:94:f9:59:1e:3d:f4:ae:32:13:9d:e8:41: fe:12:46:68:b8:65:85:c4:29:d0:46:32:c3:43:41: 90:11:08:0f:6e:d3:35:a3:c4:53:36:ad:10:8f:3b: 5b:46:65:cd:9d:63:35:33:ce:11:49:81:bf:3e:5b: 87:3d:38:4f:ed:3a:9c:89:5e:16:98:bd:95:a1:bb: 47:68:fb:f1:24:03:63:7e:01:ed:2c:76:94:a1:1c: b1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AD:BE:B7:23:34:64:68:1A:35:EA:78:C4:F8:0D:28:3D:4B:27:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7094c99d-de74-3c33-9177-33bb5817299b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:e7:82:69:4b:51:c4:0a:fc:30:db:a9:62:39:34:d7:7b:c5: 89:93:96:79:1c:47:0a:ad:67:8b:11:ee:42:66:af:7b:79:26: 3d:b4:b3:82:d5:e8:4e:f4:0c:89:de:7e:2d:8d:88:ca:f2:f1: 45:a7:e5:15:f4:4e:26:5f:2d:26:76:b7:e8:11:51:c9:58:69: 72:a0:fd:83:ba:76:df:ca:0a:fc:6e:ec:47:4f:b2:ec:13:7d: c1:66:bb:74:91:38:1a:a5:95:9a:af:4b:5a:c0:4a:a3:87:42: 46:1a:73:9e:bb:3e:8d:30:1f:cc:d5:cf:a7:65:a6:a2:42:df: 36:34:c1:09:8c:4e:60:f8:24:e4:38:ce:90:71:c1:b7:7c:be: df:9a:a0:13:4e:6f:dc:cd:ae:30:63:2a:cf:ad:7b:d4:95:c7: bd:68:14:2d:4f:52:4e:44:23:d5:57:e6:44:fa:bc:6b:2e:c2: b4:77:1a:98:97:ba:2e:15:cd:5d:57:cc:a6:63:b8:90:e3:aa: a9:9b:59:20:79:74:44:b9:a0:98:65:99:50:f6:af:ed:3b:71: 88:44:88:44:59:78:95:1c:d4:cd:e4:8a:61:b8:5c:0e:52:f1: 20:ee:26:e1:87:ba:de:46:4c:ce:3e:76:33:b1:0b:a8:12:c5: 65:44:42:b2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEU1oKiy2p9UMwTAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzMyYmFkYjEtOWU4OC00ZjQ3LTk0N2MtZmIxZmM3ZmUyNjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Balrt8XY/8tpzC8JpG59j1PGmOvOaMAuMZ ZafwHPCvaIz14zS2Cod+OUr12c/ZzeECwjwirQ8vGO2IXC6DkxVfOXlK/B8XxGIe O8r/jQtVTF3fmyGnWVQdJXr1PNfKax6IAyuy3v5ysa0bNJIhgK3ISY5gQTmi7mn1 usqYFWbMtbAJt/sb5oKX0bbd5/hGlOvfoZVyvsLFtPV7SxBcqRWqp4uPFgiU+Vke PfSuMhOd6EH+EkZouGWFxCnQRjLDQ0GQEQgPbtM1o8RTNq0QjztbRmXNnWM1M84R SYG/PluHPThP7TqciV4WmL2VobtHaPvxJANjfgHtLHaUoRyx4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGStvrcjNGRoGjXqeMT4DSg9Syd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzA5NGM5OWQtZGU3NC0z YzMzLTkxNzctMzNiYjU4MTcyOTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPO9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABfngmlLUcQK/DDbqWI5NNd7xYmTlnkcRwqtZ4sR7kJmr3t5Jj20s4LV 6E70DInefi2NiMry8UWn5RX0TiZfLSZ2t+gRUclYaXKg/YO6dt/KCvxu7EdPsuwT fcFmu3SROBqllZqvS1rASqOHQkYac567Po0wH8zVz6dlpqJC3zY0wQmMTmD4JOQ4 zpBxwbd8vt+aoBNOb9zNrjBjKs+te9SVx71oFC1PUk5EI9VX5kT6vGsuwrR3GpiX ui4VzV1XzKZjuJDjqqmbWSB5dES5oJhlmVD2r+07cYhEiERZeJUc1M3kimG4XA5S 8SDuJuGHut5GTM4+djOxC6gSxWVEQrI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:16:17 2025 by rpki-client