$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846b0b0b-c388-3725-b36d-3bd42a6286b6.roa File: 846b0b0b-c388-3725-b36d-3bd42a6286b6.roa (raw, json) Hash identifier: oA5Wnee8ixXeEd+pzT1etoZuyx/ubvsMgWs+nn4kFYU= Subject key identifier: 17:AD:CC:2C:C8:3D:C7:54:0A:12:91:CF:41:1F:4E:7D:70:CE:30:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF271014012794913EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846b0b0b-c388-3725-b36d-3bd42a6286b6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:27:10:14:01:27:94:91:3e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=483798f8-31ad-40a8-9f6c-28cc55257cfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:87:7a:91:58:6c:45:07:ee:c0:89:85:5e:0f: 85:20:e5:bd:c8:7f:df:8c:10:d6:51:d9:67:57:59: 1d:0e:9c:a4:f8:dd:0d:d8:60:f4:9d:a0:d5:b6:70: 9e:5b:78:c5:ba:0e:ce:f7:ea:d4:a7:f3:26:49:d8: 8d:57:16:8f:45:5c:b3:c3:7e:d9:7c:5c:43:37:bb: b5:fa:bb:75:86:52:ef:c8:17:65:b0:df:cc:f1:2b: 96:71:2d:26:c1:90:75:47:fe:45:17:02:ee:09:98: 84:b5:f6:5c:e7:1a:b8:70:cc:6e:82:75:fa:34:24: 77:c3:a9:a1:fa:f7:e3:04:e0:95:8c:68:23:8b:f6: 2d:9f:03:5e:9e:bd:f1:74:17:e6:fa:29:42:93:e4: 42:04:cf:3d:e6:22:1d:88:01:b6:9c:8f:6b:ed:66: 13:ee:a8:90:e1:31:0e:16:93:77:e6:26:6e:6f:1b: ba:2c:bf:05:7c:6f:05:70:33:ef:83:bd:0a:b7:c1: 87:e9:7a:d6:32:ba:2c:f8:3a:2f:b8:51:c1:97:cc: 4e:05:51:2b:15:44:28:80:9e:66:8d:66:0a:3a:df: e8:9c:6b:a9:1b:9f:80:fb:d6:ed:fa:92:15:4a:46: 1e:8f:c5:92:36:3f:0c:1f:be:ad:6e:7a:99:03:4e: 55:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:AD:CC:2C:C8:3D:C7:54:0A:12:91:CF:41:1F:4E:7D:70:CE:30:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/846b0b0b-c388-3725-b36d-3bd42a6286b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:5f:74:7d:05:41:65:8a:01:e1:fb:d7:39:57:a8:89:42:28: 4f:10:14:c8:ac:0c:f3:58:ec:f0:73:1c:d1:5d:53:ef:da:7b: 5b:f3:bb:e4:7e:94:f7:ec:50:01:3b:48:d1:06:3f:ca:57:07: 13:2b:8c:d2:41:62:8d:3c:b5:63:55:c3:b8:69:c7:e1:26:a1: bc:a0:b2:e7:08:c0:d7:d5:ce:fb:a2:29:c7:77:be:4a:18:df: f2:77:36:ee:52:f5:bb:1a:c0:56:25:de:03:df:a6:9a:64:7d: 4e:06:70:91:77:fd:d0:2b:00:fe:3a:b3:b9:92:c1:2b:57:bc: 83:44:29:aa:71:60:7b:a4:9a:b0:d6:44:79:14:7f:d3:e1:43: 47:bb:74:62:b7:42:42:a1:78:a7:bd:46:00:54:1e:01:75:a3: d2:aa:5d:b8:49:ce:06:17:26:85:5c:80:3e:cd:86:70:e7:35: bf:50:4a:45:e7:4d:15:de:da:24:9d:a2:b4:bb:0f:78:11:42: 93:45:0c:60:95:02:78:9c:1a:c6:81:fd:49:98:ec:a7:6d:29: ff:98:1b:c9:3a:ac:4f:6a:50:bc:ab:aa:42:8b:52:17:2d:a1: 56:3f:4d:a5:a7:6c:f9:3f:9b:16:37:7a:ac:e0:72:c5:11:4c: cc:3f:68:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf8nEBQBJ5SRPsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDgzNzk4ZjgtMzFhZC00MGE4LTlmNmMtMjhjYzU1MjU3Y2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAood6kVhsRQfuwImFXg+FIOW9yH/fjBDWUdln V1kdDpyk+N0N2GD0naDVtnCeW3jFug7O9+rUp/MmSdiNVxaPRVyzw37ZfFxDN7u1 +rt1hlLvyBdlsN/M8SuWcS0mwZB1R/5FFwLuCZiEtfZc5xq4cMxugnX6NCR3w6mh +vfjBOCVjGgji/YtnwNenr3xdBfm+ilCk+RCBM895iIdiAG2nI9r7WYT7qiQ4TEO FpN35iZubxu6LL8FfG8FcDPvg70Kt8GH6XrWMros+DovuFHBl8xOBVErFUQogJ5m jWYKOt/onGupG5+A+9bt+pIVSkYej8WSNj8MH76tbnqZA05VcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBetzCzIPcdUChKRz0EfTn1wzjDgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODQ2YjBiMGItYzM4OC0z NzI1LWIzNmQtM2JkNDJhNjI4NmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJdfdH0FQWWKAeH71zlXqIlCKE8QFMisDPNY7PBzHNFdU+/ae1vzu+R+ lPfsUAE7SNEGP8pXBxMrjNJBYo08tWNVw7hpx+EmobygsucIwNfVzvuiKcd3vkoY 3/J3Nu5S9bsawFYl3gPfpppkfU4GcJF3/dArAP46s7mSwStXvINEKapxYHukmrDW RHkUf9PhQ0e7dGK3QkKheKe9RgBUHgF1o9KqXbhJzgYXJoVcgD7NhnDnNb9QSkXn TRXe2iSdorS7D3gRQpNFDGCVAnicGsaB/UmY7KdtKf+YG8k6rE9qULyrqkKLUhct oVY/TaWnbPk/mxY3eqzgcsURTMw/aEw= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:49 2025 by rpki-client