$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9305a306-0099-3216-ac39-e6442019484e.roa File: 9305a306-0099-3216-ac39-e6442019484e.roa (raw, json) Hash identifier: 7AEYMltLfvRudxhd2ajlQPz6vdvrfz0cXMqo1ZYvse8= Subject key identifier: C3:BC:34:CE:18:0F:4F:53:34:75:4C:AA:67:2B:81:42:93:5A:B1:AB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114B79CB64C93F84FC8880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9305a306-0099-3216-ac39-e6442019484e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4b:79:cb:64:c9:3f:84:fc:88:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=dd3a5e98-8b65-4926-8989-4eb4e27be5e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0b:3a:64:7b:00:58:e6:26:1a:33:84:ec:91: fc:06:8b:ae:7b:50:38:da:3e:3a:ee:b6:d5:55:09: cd:08:ad:60:f5:31:6e:bc:a7:ea:82:7a:b1:78:a9: d8:94:f5:62:cf:6c:c1:67:3d:64:75:36:96:91:c5: 8f:f9:c8:83:20:96:d3:ee:3a:7b:a6:1b:6f:ea:5c: 98:8f:79:93:88:c1:c7:0f:9e:0c:5b:e6:e5:7d:68: e9:aa:e2:14:12:f6:0d:40:69:22:8a:8f:92:2b:d8: 7b:6e:0c:33:5e:0c:95:1a:28:9b:03:81:0c:aa:83: 78:fd:a5:63:f8:c5:65:0a:1b:10:14:02:4d:1a:de: cb:e2:b1:95:00:4c:f7:e1:a1:c1:1f:48:09:15:9d: a1:bb:11:21:dc:9a:6b:21:5e:e5:a9:72:51:92:76: 41:e0:99:68:08:72:23:d2:94:ad:31:95:40:4e:c6: a3:4c:35:be:3c:41:6b:e6:d0:62:a6:bd:1a:ed:aa: 94:18:f7:8f:a2:38:93:30:34:32:0b:19:10:3f:7e: cc:22:a8:9f:7c:44:fa:27:8d:57:a9:5b:f6:65:16: 13:95:1b:44:36:9d:2c:0b:13:08:5d:45:64:5e:a9: 36:fb:8b:05:e9:a2:d5:94:e2:a7:63:93:57:e2:26: c4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:BC:34:CE:18:0F:4F:53:34:75:4C:AA:67:2B:81:42:93:5A:B1:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9305a306-0099-3216-ac39-e6442019484e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:32:15:ff:20:d5:98:7d:26:fc:0b:d3:f7:71:54:68:5c:61: e8:94:8f:0f:7b:a0:e6:37:d1:af:aa:1f:cb:c7:22:7c:f4:a2: 4f:b5:5d:7f:96:ce:31:4e:37:47:50:67:e0:a3:fa:15:22:41: ee:ec:74:8d:66:33:53:35:e9:2b:f9:20:cc:7b:08:95:14:d1: ac:ce:f9:c3:02:a7:53:a7:ba:19:ac:01:b9:2d:0d:05:ce:99: 7f:01:91:48:c8:1b:e6:0f:43:a3:40:ec:9a:dd:9b:c1:c4:b2: 8a:0f:75:c4:12:4f:16:c7:f6:95:5e:1a:ae:34:c5:4c:be:bc: 4b:6a:9c:0b:18:a3:8d:8b:6e:a6:23:68:52:33:4c:27:e5:f5: 6f:88:1a:3c:6e:23:8f:1b:20:ba:81:3d:f2:4e:2b:a4:13:ba: 52:f8:57:a6:05:45:87:ce:e1:eb:7c:05:f1:36:86:45:f2:87: d4:9b:3b:f8:f3:8a:1e:bb:20:93:b7:79:7f:77:ad:12:b3:de: 73:c9:ff:d3:28:8d:1a:c6:35:b0:b2:01:25:8b:45:e2:41:5e: 63:fc:dd:3d:58:a6:80:7a:d5:0d:5c:6f:dd:fe:56:4b:6b:b9: fa:68:76:e1:52:5b:35:b3:77:0b:3c:d9:53:19:b0:05:6c:3f: 73:1d:06:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUt5y2TJP4T8iIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZGQzYTVlOTgtOGI2NS00OTI2LTg5ODktNGViNGUyN2JlNWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQs6ZHsAWOYmGjOE7JH8Bouue1A42j467rbV VQnNCK1g9TFuvKfqgnqxeKnYlPViz2zBZz1kdTaWkcWP+ciDIJbT7jp7phtv6lyY j3mTiMHHD54MW+blfWjpquIUEvYNQGkiio+SK9h7bgwzXgyVGiibA4EMqoN4/aVj +MVlChsQFAJNGt7L4rGVAEz34aHBH0gJFZ2huxEh3JprIV7lqXJRknZB4JloCHIj 0pStMZVATsajTDW+PEFr5tBipr0a7aqUGPePojiTMDQyCxkQP37MIqiffET6J41X qVv2ZRYTlRtENp0sCxMIXUVkXqk2+4sF6aLVlOKnY5NX4ibEdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMO8NM4YD09TNHVMqmcrgUKTWrGrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTMwNWEzMDYtMDA5OS0z MjE2LWFjMzktZTY0NDIwMTk0ODRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4yFf8g1Zh9JvwL0/dxVGhcYeiUjw97oOY30a+qH8vHInz0ok+1XX+W zjFON0dQZ+Cj+hUiQe7sdI1mM1M16Sv5IMx7CJUU0azO+cMCp1OnuhmsAbktDQXO mX8BkUjIG+YPQ6NA7Jrdm8HEsooPdcQSTxbH9pVeGq40xUy+vEtqnAsYo42LbqYj aFIzTCfl9W+IGjxuI48bILqBPfJOK6QTulL4V6YFRYfO4et8BfE2hkXyh9SbO/jz ih67IJO3eX93rRKz3nPJ/9MojRrGNbCyASWLReJBXmP83T1YpoB61Q1cb93+Vktr ufpoduFSWzWzdws82VMZsAVsP3MdBlk= -----END CERTIFICATE-----Generated at Sat Jul 26 00:16:02 2025 by rpki-client