$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa File: 77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa (raw, json) Hash identifier: woE1G/U/WC795NKpq1OYSntDvkUclAUqpsAY8x1YDi4= Subject key identifier: 05:CA:27:07:24:D5:6B:D9:FD:1B:F3:25:E4:59:FA:CF:B4:E3:BC:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114DA096E233FD1CFDE380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4d:a0:96:e2:33:fd:1c:fd:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=feaa3cb1-139a-4db2-a459-59d2d5297111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:91:22:f5:ef:81:9c:49:9e:7d:71:94:38:58: 5e:77:85:99:a2:17:d2:d2:70:0d:6c:2e:0b:d5:38: 33:bd:5c:02:b3:32:3a:96:90:84:d7:3d:c8:cf:b8: f6:31:72:ec:ec:86:cd:3e:9d:51:d6:25:bd:8b:62: ef:d0:51:98:3e:c3:9d:42:35:49:9e:b2:90:4d:51: d2:ad:33:20:3c:30:a8:7f:d0:55:5d:65:ce:0e:00: 08:ec:96:f4:58:62:d2:39:28:24:09:29:ca:4e:e5: 18:56:46:57:67:05:ac:19:12:0f:4b:5f:0e:b2:a8: 2e:e3:86:55:c6:4d:74:0d:e5:bc:f1:c9:8f:45:f1: 90:98:23:03:7d:71:1e:dd:b4:03:42:24:c3:3d:bc: 23:12:76:7f:4a:32:ad:7c:dc:9b:65:31:b2:03:56: a9:b2:ab:8a:14:73:b7:c4:9b:6d:00:e7:90:11:af: 09:ff:1d:ec:86:10:94:ba:62:6c:2b:3e:88:0c:1d: 1f:82:8e:4c:de:14:74:1b:d1:62:f1:69:18:1d:cc: 85:69:40:53:2a:d1:30:55:a2:0f:b7:45:88:61:96: 82:9d:cf:c9:71:04:a6:63:56:74:93:cf:a7:d9:fb: 07:c4:b7:0f:cf:c0:92:6c:dd:b9:1e:e8:bd:b9:36: 1e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:CA:27:07:24:D5:6B:D9:FD:1B:F3:25:E4:59:FA:CF:B4:E3:BC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/77c6db04-7ab4-323f-ba9c-9d9d7a6716d0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b9:53:be:ed:74:27:68:10:bc:58:f9:29:a4:b9:07:9e:94:75: 7f:ec:75:b8:36:f0:59:ab:a6:5b:3e:9c:d0:d7:b3:fc:33:dd: 89:6e:c3:fc:b9:e1:c7:fc:ae:ea:32:8f:61:0b:89:65:fd:97: 6d:c6:44:13:84:8b:12:93:f5:37:f0:02:03:ab:7c:70:38:79: 7c:93:e0:86:fe:35:f2:2e:c6:61:43:e5:59:e4:df:82:14:54: 39:14:33:9d:03:b1:c6:03:89:41:60:24:37:b9:ca:e9:77:71: d4:42:6c:2b:1a:6a:d5:06:03:40:f1:27:8c:ad:cc:af:96:60: f0:ad:fc:d4:d7:61:00:26:c1:e5:ba:36:c4:fd:f4:5a:2c:f2: 8b:22:34:68:eb:39:2e:a9:8e:a9:09:7f:9d:73:a1:11:98:16: 52:63:73:93:a0:d5:8f:17:5e:0b:29:37:de:43:70:61:c9:d6: d6:2d:f5:0d:72:96:0a:55:7f:41:60:8a:cb:91:e9:9b:cf:18: 7e:fc:28:d2:40:02:32:e1:b0:e6:d0:31:f5:a4:1d:71:18:e1: 36:a7:16:5a:af:94:90:9d:15:ed:f5:25:c8:33:bd:11:3d:d5: ed:82:ac:8e:30:13:49:7e:1a:f8:cd:3d:98:16:f5:c0:67:7a: 2f:44:5c:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEU2gluIz/Rz944AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZmVhYTNjYjEtMTM5YS00ZGIyLWE0NTktNTlkMmQ1Mjk3MTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuJEi9e+BnEmefXGUOFhed4WZohfS0nANbC4L 1TgzvVwCszI6lpCE1z3Iz7j2MXLs7IbNPp1R1iW9i2Lv0FGYPsOdQjVJnrKQTVHS rTMgPDCof9BVXWXODgAI7Jb0WGLSOSgkCSnKTuUYVkZXZwWsGRIPS18Osqgu44ZV xk10DeW88cmPRfGQmCMDfXEe3bQDQiTDPbwjEnZ/SjKtfNybZTGyA1apsquKFHO3 xJttAOeQEa8J/x3shhCUumJsKz6IDB0fgo5M3hR0G9Fi8WkYHcyFaUBTKtEwVaIP t0WIYZaCnc/JcQSmY1Z0k8+n2fsHxLcPz8CSbN25Hui9uTYe0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAXKJwck1WvZ/RvzJeRZ+s+047zLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzdjNmRiMDQtN2FiNC0z MjNmLWJhOWMtOWQ5ZDdhNjcxNmQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALlTvu10J2gQvFj5KaS5B56UdX/sdbg28Fmrpls+nNDXs/wz3Yluw/y5 4cf8ruoyj2ELiWX9l23GRBOEixKT9TfwAgOrfHA4eXyT4Ib+NfIuxmFD5Vnk34IU VDkUM50DscYDiUFgJDe5yul3cdRCbCsaatUGA0DxJ4ytzK+WYPCt/NTXYQAmweW6 NsT99Fos8osiNGjrOS6pjqkJf51zoRGYFlJjc5Og1Y8XXgspN95DcGHJ1tYt9Q1y lgpVf0FgisuR6ZvPGH78KNJAAjLhsObQMfWkHXEY4TanFlqvlJCdFe31JcgzvRE9 1e2CrI4wE0l+GvjNPZgW9cBnei9EXHo= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:36 2025 by rpki-client