$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa File: 8df81b61-4595-327a-837b-ad4983cb8977.roa (raw, json) Hash identifier: klrHaq0h0YZJNZa/dKkLTkkP0ja/uhyd/1N5AKC+VXw= Subject key identifier: 89:72:72:29:B1:33:1B:9C:6C:EC:80:E9:A0:55:3C:2A:66:00:3B:8E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411445919D8FC32CE15C000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:44:59:19:d8:fc:32:ce:15:c0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1ca1cead-9dc8-4544-9cbe-ff06eeb68aed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:95:d8:4f:d5:3e:87:98:db:c1:94:07:74:7d: d3:62:5f:f4:b2:ef:88:40:8d:3f:8a:5c:5f:d1:8c: a0:5e:f2:bf:02:98:79:1e:44:ef:f9:3e:4d:97:20: 90:4a:f7:24:0a:76:24:c6:d4:ae:62:29:d2:23:f6: 76:90:c1:cc:79:93:6c:44:8e:79:9b:ac:63:29:58: 8e:78:e3:47:e7:02:01:db:b9:39:9b:1e:17:78:a2: 1d:fa:b6:70:fd:36:2e:05:8d:66:b0:3d:cf:b9:0c: 55:58:ea:04:c8:56:bb:3d:ec:8b:43:fc:b2:51:c9: f9:03:84:0b:c0:52:90:ad:51:af:ed:39:d7:96:36: ae:23:84:b1:e7:84:de:90:e0:0d:e1:d8:85:dd:20: b3:72:2b:b1:cb:2c:bc:07:d6:c4:53:c0:91:6b:72: d9:4f:f5:27:83:61:91:99:69:08:fa:a6:76:ec:0d: 03:45:bb:c2:2f:12:f9:c3:4b:d3:6f:93:15:63:b8: 5d:34:f3:4f:db:b1:3a:d2:2c:0c:3e:69:de:12:0f: 06:8d:24:d3:ca:b8:b6:ce:22:8b:97:3c:fe:f5:05: 3b:90:57:51:90:0e:3d:9c:76:1e:64:c4:ff:3f:01: 90:fb:29:ea:07:c7:f9:c8:40:57:fb:7d:33:f0:e4: a4:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:72:72:29:B1:33:1B:9C:6C:EC:80:E9:A0:55:3C:2A:66:00:3B:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:a0:d8:6a:10:2c:93:0e:1b:64:81:bf:23:83:cc:11:4e:ae: 76:27:73:a9:e9:30:14:6a:22:8f:e2:f3:61:1c:fe:03:03:ea: ba:a4:0b:f9:09:ea:fe:a7:ec:38:73:01:bb:19:44:5b:fc:04: 0f:8f:e8:67:8a:f1:b1:24:03:1a:97:1c:b6:93:e4:f5:74:2b: 20:d7:14:3d:54:51:77:74:98:30:39:b6:e4:38:3d:ed:1f:e6: 5b:29:5e:ff:ec:f0:ad:5c:08:8a:b0:6f:e3:82:4d:18:27:fc: a2:2a:e8:90:e9:f2:b5:19:bd:c0:03:14:89:c2:27:c6:fd:7c: 92:4b:b9:91:d9:d4:a2:4a:02:40:c4:8e:18:b8:cf:b1:d6:e6: 8d:c6:ce:c9:fa:ce:42:93:c2:83:58:b3:9a:dd:23:96:ad:0c: 20:6c:44:eb:f6:8a:b2:fd:1a:51:26:86:69:0b:fc:39:93:cb: 38:59:5e:d0:a6:b0:84:97:67:dd:db:fb:97:9b:1b:6a:69:73: 28:74:8e:74:00:d1:6b:2e:12:89:5a:90:8d:51:ef:f4:69:6d: 9f:24:49:3c:a6:5a:4e:86:4f:65:16:14:78:3f:de:6f:ed:46: 50:02:e3:38:21:6a:41:36:b7:3c:19:a1:50:0f:78:1b:cb:3b: 8e:a5:2e:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEURZGdj8Ms4VwAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWNhMWNlYWQtOWRjOC00NTQ0LTljYmUtZmYwNmVlYjY4YWVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZXYT9U+h5jbwZQHdH3TYl/0su+IQI0/ilxf 0YygXvK/Aph5HkTv+T5NlyCQSvckCnYkxtSuYinSI/Z2kMHMeZNsRI55m6xjKViO eONH5wIB27k5mx4XeKId+rZw/TYuBY1msD3PuQxVWOoEyFa7PeyLQ/yyUcn5A4QL wFKQrVGv7TnXljauI4Sx54TekOAN4diF3SCzciuxyyy8B9bEU8CRa3LZT/Ung2GR mWkI+qZ27A0DRbvCLxL5w0vTb5MVY7hdNPNP27E60iwMPmneEg8GjSTTyri2ziKL lzz+9QU7kFdRkA49nHYeZMT/PwGQ+ynqB8f5yEBX+30z8OSkAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIlycimxMxucbOyA6aBVPCpmADuOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGRmODFiNjEtNDU5NS0z MjdhLTgzN2ItYWQ0OTgzY2I4OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGg2GoQLJMOG2SBvyODzBFOrnYnc6npMBRqIo/i82Ec/gMD6rqkC/kJ 6v6n7DhzAbsZRFv8BA+P6GeK8bEkAxqXHLaT5PV0KyDXFD1UUXd0mDA5tuQ4Pe0f 5lspXv/s8K1cCIqwb+OCTRgn/KIq6JDp8rUZvcADFInCJ8b9fJJLuZHZ1KJKAkDE jhi4z7HW5o3Gzsn6zkKTwoNYs5rdI5atDCBsROv2irL9GlEmhmkL/DmTyzhZXtCm sISXZ93b+5ebG2ppcyh0jnQA0WsuEolakI1R7/RpbZ8kSTymWk6GT2UWFHg/3m/t RlAC4zghakE2tzwZoVAPeBvLO46lLmM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:35 2025 by rpki-client