$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa File: 88861554-d029-3df4-bb93-b6245c989af7.roa (raw, json) Hash identifier: p5JGOtll+Ldfrt7aY5Q5RfYi4ugcQPR587frBrxL9ug= Subject key identifier: F9:16:3B:00:74:91:0B:60:00:6C:4E:86:B7:3B:D4:BD:11:48:97:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84120000FAF9A28A93838A40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:00:00:fa:f9:a2:8a:93:83:8a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0b2b2aff-f9e6-4b50-9657-6b15f479ebdc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b5:4a:c5:a5:45:12:0d:58:7b:52:a5:59:7c: 49:26:47:e7:8a:61:16:fd:28:56:d0:7b:2b:ce:78: be:e7:3d:bb:e9:72:38:cf:bf:99:5e:ea:2a:33:01: 15:aa:5b:5b:f0:9b:38:56:50:2e:8f:bc:d5:4b:2f: 2e:bd:72:91:50:55:15:c5:9b:29:1d:38:f7:07:2d: e9:9b:0d:22:e1:04:13:62:2c:c7:fc:76:e4:8d:58: e6:6f:ea:07:4f:c0:92:8b:fa:26:43:45:52:71:1c: ff:86:ca:c9:97:63:b5:3c:39:d5:81:4d:c0:ab:a9: d0:06:df:ba:f9:f9:06:78:0f:44:22:91:ed:17:4e: 69:03:44:bf:e8:ca:84:b9:cc:b8:65:93:fe:4b:52: 58:73:00:ab:3b:29:f4:f1:ce:42:3e:fd:51:b3:23: 54:47:f5:ec:42:9f:de:bd:de:b0:a6:36:bd:e2:75: a2:58:d2:3b:45:d4:69:bd:a6:8a:d8:33:44:9d:4c: 5b:e7:e0:b5:68:b8:7a:67:99:7e:81:d8:0c:16:b4: 9e:ab:43:82:ce:e9:d7:65:e9:a6:fd:ee:08:e0:c8: 38:42:d6:cd:36:c8:2e:af:66:72:2e:fd:a4:c5:c7: 1f:9d:8d:48:86:2e:c3:1a:f5:cc:38:12:c8:9e:ee: 4d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:16:3B:00:74:91:0B:60:00:6C:4E:86:B7:3B:D4:BD:11:48:97:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88861554-d029-3df4-bb93-b6245c989af7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:83:b8:da:94:45:78:f2:0e:72:7b:c8:95:fc:2d:26:cb:0c: a7:50:86:6c:33:ab:ab:70:0c:40:d3:c6:06:54:26:74:f2:0c: 5e:c0:ad:ec:23:2f:7e:00:50:e2:65:4f:68:3b:90:c4:ee:d1: 55:69:dc:36:83:64:a0:65:88:d9:fb:05:98:a8:dc:75:b7:32: c5:a8:9f:a3:20:de:b6:65:e7:5c:0d:70:60:14:5a:3a:c7:99: d0:b3:28:45:41:4d:e9:63:28:14:1c:df:7e:21:62:b5:70:b8: c6:b9:b6:df:fc:56:9f:d6:d1:80:d8:ea:01:d5:68:2c:a4:41: 1a:0c:69:e7:22:dd:ab:ca:d9:50:5a:5c:11:f1:02:e6:ae:67: 87:83:d9:e7:30:c7:6a:07:76:a8:68:85:58:77:0f:e3:38:5d: be:75:9c:e8:68:68:73:9d:34:af:6b:37:88:75:79:ab:de:cb: 54:30:7f:aa:ee:07:76:f7:de:85:d0:f3:f3:0d:03:ee:0f:ce: 16:40:b6:ce:05:c4:81:52:91:52:b6:78:81:95:0b:c2:ef:8a: 47:63:68:ef:57:8e:70:66:3d:5c:71:40:b2:41:22:cb:bc:ae: 28:1e:48:60:09:5a:0d:f8:29:15:44:ad:92:eb:8e:30:b0:32: 4d:15:68:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgAA+vmiipODikAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGIyYjJhZmYtZjllNi00YjUwLTk2NTctNmIxNWY0NzllYmRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7VKxaVFEg1Ye1KlWXxJJkfnimEW/ShW0Hsr zni+5z276XI4z7+ZXuoqMwEVqltb8Js4VlAuj7zVSy8uvXKRUFUVxZspHTj3By3p mw0i4QQTYizH/HbkjVjmb+oHT8CSi/omQ0VScRz/hsrJl2O1PDnVgU3Aq6nQBt+6 +fkGeA9EIpHtF05pA0S/6MqEucy4ZZP+S1JYcwCrOyn08c5CPv1RsyNUR/XsQp/e vd6wpja94nWiWNI7RdRpvaaK2DNEnUxb5+C1aLh6Z5l+gdgMFrSeq0OCzunXZemm /e4I4Mg4QtbNNsgur2ZyLv2kxccfnY1Ihi7DGvXMOBLInu5NOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkWOwB0kQtgAGxOhrc71L0RSJfuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODg4NjE1NTQtZDAyOS0z ZGY0LWJiOTMtYjYyNDVjOTg5YWY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuDuNqURXjyDnJ7yJX8LSbLDKdQhmwzq6twDEDTxgZUJnTyDF7Arewj L34AUOJlT2g7kMTu0VVp3DaDZKBliNn7BZio3HW3MsWon6Mg3rZl51wNcGAUWjrH mdCzKEVBTeljKBQc334hYrVwuMa5tt/8Vp/W0YDY6gHVaCykQRoMaeci3avK2VBa XBHxAuauZ4eD2ecwx2oHdqhohVh3D+M4Xb51nOhoaHOdNK9rN4h1eavey1Qwf6ru B3b33oXQ8/MNA+4PzhZAts4FxIFSkVK2eIGVC8LvikdjaO9XjnBmPVxxQLJBIsu8 rigeSGAJWg34KRVErZLrjjCwMk0VaFI= -----END CERTIFICATE-----Generated at Sat Jul 26 12:01:28 2025 by rpki-client