$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa File: 8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa (raw, json) Hash identifier: EKdZht67wnfv+a1z57hdY+g//qAwzAcUAmanCizoRpg= Subject key identifier: 21:76:53:17:84:61:0C:F4:CE:E8:1A:2C:2A:1F:8E:39:75:97:3E:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84120419680F4C6F86B2EFE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:04:19:68:0f:4c:6f:86:b2:ef:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=24d5b217-7eee-4496-a7ae-b38f0d6bd3c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:22:d3:3a:25:22:8d:dd:bc:73:61:a3:0d:74: 93:eb:cc:be:56:f3:2c:a3:7b:93:60:d9:c4:42:83: 80:a0:77:8a:c0:3c:44:4c:13:b1:0a:19:23:c0:f2: b5:96:e0:19:a5:22:cb:eb:df:16:76:e2:f8:8a:92: 27:b0:15:14:fe:9f:a4:ee:ff:1b:17:7b:84:11:ee: 23:d9:e1:55:53:8c:4b:15:ae:75:c6:60:f0:26:9a: d0:97:be:3f:9a:d1:05:47:96:fc:2c:6b:5c:93:36: f0:ab:c9:45:ae:28:eb:77:9a:03:24:eb:a2:7e:d9: 06:03:f1:fa:5c:19:92:7b:3e:c1:34:d0:c0:24:e2: b3:b4:91:39:41:26:ec:27:ca:49:3c:3a:42:a5:20: 3b:28:37:fb:49:02:99:4f:5d:5f:a4:31:c0:58:8b: 82:16:be:80:8e:a6:6c:0a:c2:b7:fd:be:37:a6:8d: be:52:0e:74:fd:53:61:bc:ef:89:a5:15:c1:ec:5a: b8:02:5b:e1:7d:a7:71:3e:3e:2e:fe:1f:38:27:cf: 09:d8:92:41:70:ca:46:33:13:e1:7f:7b:1a:aa:69: eb:24:bd:fd:bd:e9:ed:97:aa:df:ac:f7:7f:6d:71: 07:32:d0:5f:32:c3:be:a1:22:5e:0c:36:54:84:c9: 8d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:76:53:17:84:61:0C:F4:CE:E8:1A:2C:2A:1F:8E:39:75:97:3E:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8a07dd20-2bbb-332f-9dd9-941594ae0ed4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:9e:64:c8:e1:c0:8e:a7:71:6e:ac:89:35:7d:93:bb:b2:5b: 42:8a:d0:b4:4f:ec:82:4a:13:a5:8e:ac:d7:f5:1a:12:07:f5: 36:2c:16:cd:e6:23:47:e5:54:40:0e:56:f4:37:ff:92:e5:f8: fd:23:1a:77:ed:76:49:f5:a4:29:44:6e:17:2b:fd:f7:a0:82: 38:a9:25:f3:69:eb:74:8f:46:c6:67:f2:b8:4a:21:85:9e:07: 93:ed:f5:cc:0a:12:cb:5d:6b:10:58:80:14:5f:63:a2:10:77: 91:88:e8:37:d9:6f:c1:80:4c:65:0a:9c:e5:97:d8:14:d6:0e: a4:14:15:08:33:c3:9f:80:24:ae:6d:e4:d8:28:5a:5c:9b:6d: 7a:b1:06:02:fc:67:e7:3d:f5:fa:15:39:11:e2:40:58:24:09: 67:74:5e:e9:54:6f:6d:8f:1a:40:89:5e:87:16:f6:9d:87:ec: 98:e4:bf:57:76:3c:b0:b2:b6:b9:d6:53:bd:1f:44:49:09:fb: 6a:18:c1:1e:0f:85:c4:07:0b:6e:a3:1b:48:61:8c:f1:ce:8e: 57:b1:5d:ef:8b:ac:9a:7a:fe:90:e1:c0:c2:4c:cf:e2:2f:f9: 5a:db:c2:39:a4:08:ae:a6:e1:28:99:06:60:f2:dd:da:77:36: ca:94:7e:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgQZaA9Mb4ay7+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjRkNWIyMTctN2VlZS00NDk2LWE3YWUtYjM4ZjBkNmJkM2M1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCLTOiUijd28c2GjDXST68y+VvMso3uTYNnE QoOAoHeKwDxETBOxChkjwPK1luAZpSLL698WduL4ipInsBUU/p+k7v8bF3uEEe4j 2eFVU4xLFa51xmDwJprQl74/mtEFR5b8LGtckzbwq8lFrijrd5oDJOuiftkGA/H6 XBmSez7BNNDAJOKztJE5QSbsJ8pJPDpCpSA7KDf7SQKZT11fpDHAWIuCFr6AjqZs CsK3/b43po2+Ug50/VNhvO+JpRXB7Fq4AlvhfadxPj4u/h84J88J2JJBcMpGMxPh f3saqmnrJL39ventl6rfrPd/bXEHMtBfMsO+oSJeDDZUhMmNhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF2UxeEYQz0zugaLCofjjl1lz4/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGEwN2RkMjAtMmJiYi0z MzJmLTlkZDktOTQxNTk0YWUwZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGeZMjhwI6ncW6siTV9k7uyW0KK0LRP7IJKE6WOrNf1GhIH9TYsFs3m I0flVEAOVvQ3/5Ll+P0jGnftdkn1pClEbhcr/feggjipJfNp63SPRsZn8rhKIYWe B5Pt9cwKEstdaxBYgBRfY6IQd5GI6DfZb8GATGUKnOWX2BTWDqQUFQgzw5+AJK5t 5NgoWlybbXqxBgL8Z+c99foVORHiQFgkCWd0XulUb22PGkCJXocW9p2H7Jjkv1d2 PLCytrnWU70fREkJ+2oYwR4PhcQHC26jG0hhjPHOjlexXe+LrJp6/pDhwMJMz+Iv +VrbwjmkCK6m4SiZBmDy3dp3NsqUftA= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:12 2025 by rpki-client