$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa File: 8233cdc7-f67f-348a-b8e0-676094f6c24b.roa (raw, json) Hash identifier: osNdHif05LXz6TWvXcFK0q+dQOmHosd29420DI4z+fE= Subject key identifier: 45:E6:B1:4E:5A:68:98:65:1E:93:7A:2E:D8:5D:61:5A:6D:C8:7B:14 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114AD46ED239C233A0E820 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4a:d4:6e:d2:39:c2:33:a0:e8:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=00d34163-258e-4f7c-84fa-b4b59ad20eb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:73:9c:ff:03:5a:f5:73:15:3c:db:17:b7:71: a3:f2:11:61:af:85:b6:a1:ca:f2:d8:ef:c4:02:55: a4:eb:05:35:a6:fa:6b:d3:ae:cd:7d:87:50:99:dd: c2:90:45:55:d4:0b:8c:cc:08:e7:b3:75:04:5d:60: b9:98:fa:37:3d:cb:55:d0:3b:11:de:5d:d5:55:af: 78:cb:38:d1:aa:fe:29:b8:ed:54:5d:de:52:16:46: 3d:79:72:87:15:d7:ab:db:10:6a:c2:cd:7b:d6:dc: fb:07:66:86:02:fd:dd:c8:e2:95:55:4d:e5:f0:7d: 0f:f5:98:74:00:0e:b1:bc:9b:be:f1:09:de:c2:a0: 87:9d:78:b1:8a:96:e4:1b:f2:91:ca:fd:92:ee:95: cd:ac:7e:a8:63:b1:e8:55:96:88:04:27:2a:39:65: 74:c9:40:cf:63:8f:07:92:69:03:6b:64:2c:97:67: b3:07:b0:95:4d:05:f2:e7:bb:bc:7f:23:27:f5:7c: 7a:1a:96:2f:da:a3:e5:06:14:96:1c:18:5d:6a:73: 2f:ef:18:c1:49:a8:34:2e:82:fb:9d:ab:4b:5d:68: 59:91:e2:ac:79:51:02:6e:7b:9c:10:2e:d6:6f:b1: 5d:40:61:f3:8f:31:1b:59:eb:7d:c0:d8:ce:e8:ec: 46:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E6:B1:4E:5A:68:98:65:1E:93:7A:2E:D8:5D:61:5A:6D:C8:7B:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8233cdc7-f67f-348a-b8e0-676094f6c24b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:a9:56:e3:c4:dc:35:cd:6d:a3:f8:f5:eb:14:a5:17:56:ef: 76:7a:0d:6f:80:3c:bf:a9:1c:24:0e:a4:3c:b4:1f:65:6d:aa: 92:9f:8a:95:8a:73:ea:d8:1a:ab:5c:28:66:4f:24:e1:f5:18: f5:02:23:f4:64:b2:a7:7a:0b:01:d7:38:06:71:76:ba:c5:3a: 85:29:6b:78:7e:82:19:23:f1:0c:6d:4d:8d:65:0b:1b:ee:86: 92:09:62:d0:77:17:5d:b9:c9:25:32:2c:25:44:86:77:dc:5c: 93:a4:b7:12:5d:dc:b1:9f:8b:7f:ef:7c:48:84:94:fe:d1:54: a6:d0:4d:a3:5e:58:b5:d5:81:f4:4b:0e:a0:20:ad:ba:79:ae: 19:55:fb:26:ad:01:96:d9:06:ba:62:fe:a0:92:aa:ca:a8:22: 34:f9:7c:14:fd:20:e3:8a:c3:72:3b:b4:10:b1:de:54:15:53: 97:8d:79:c0:b9:31:d8:de:3c:af:8e:2e:a2:6d:80:7e:22:47: 4e:bf:36:d1:c7:2b:f2:7a:05:7e:80:f0:2e:a5:67:89:81:54: 4a:5e:54:60:64:df:20:41:fe:0f:7d:ed:53:74:c9:64:72:09: 2d:6c:4d:d2:04:7a:18:1f:99:02:f6:65:28:5f:b5:4d:75:54: c6:46:a0:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUrUbtI5wjOg6CAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDBkMzQxNjMtMjU4ZS00ZjdjLTg0ZmEtYjRiNTlhZDIwZWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAunOc/wNa9XMVPNsXt3Gj8hFhr4W2ocry2O/E AlWk6wU1pvpr067NfYdQmd3CkEVV1AuMzAjns3UEXWC5mPo3PctV0DsR3l3VVa94 yzjRqv4puO1UXd5SFkY9eXKHFder2xBqws171tz7B2aGAv3dyOKVVU3l8H0P9Zh0 AA6xvJu+8QnewqCHnXixipbkG/KRyv2S7pXNrH6oY7HoVZaIBCcqOWV0yUDPY48H kmkDa2Qsl2ezB7CVTQXy57u8fyMn9Xx6GpYv2qPlBhSWHBhdanMv7xjBSag0LoL7 natLXWhZkeKseVECbnucEC7Wb7FdQGHzjzEbWet9wNjO6OxGcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXmsU5aaJhlHpN6LthdYVptyHsUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODIzM2NkYzctZjY3Zi0z NDhhLWI4ZTAtNjc2MDk0ZjZjMjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFSpVuPE3DXNbaP49esUpRdW73Z6DW+APL+pHCQOpDy0H2VtqpKfipWK c+rYGqtcKGZPJOH1GPUCI/Rksqd6CwHXOAZxdrrFOoUpa3h+ghkj8QxtTY1lCxvu hpIJYtB3F125ySUyLCVEhnfcXJOktxJd3LGfi3/vfEiElP7RVKbQTaNeWLXVgfRL DqAgrbp5rhlV+yatAZbZBrpi/qCSqsqoIjT5fBT9IOOKw3I7tBCx3lQVU5eNecC5 MdjePK+OLqJtgH4iR06/NtHHK/J6BX6A8C6lZ4mBVEpeVGBk3yBB/g997VN0yWRy CS1sTdIEehgfmQL2ZShftU11VMZGoHk= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:26 2025 by rpki-client