$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e41329-c79a-3bd5-ab5e-510248e812ee.roa File: 98e41329-c79a-3bd5-ab5e-510248e812ee.roa (raw, json) Hash identifier: cKSa7LXJdg8QZRGhl/a2i+g5jGP8XnnARsX+48vgDy8= Subject key identifier: C8:81:A8:69:8A:F3:03:D5:BB:DD:BC:D5:63:5E:F7:59:92:02:4D:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114C15663231935E5E8B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e41329-c79a-3bd5-ab5e-510248e812ee.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4c:15:66:32:31:93:5e:5e:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=34c6e274-688a-4aa3-ad5b-7f1e1a0e62ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:69:84:84:71:28:33:ca:9f:67:d4:33:c2:dd: 35:7d:52:00:2f:71:98:74:aa:4e:da:7f:24:40:ac: 68:37:93:60:b7:b4:dc:fb:b3:3c:71:77:74:12:ab: fc:47:41:99:83:9e:c2:db:dd:43:29:9f:a8:3d:d7: 26:b8:a6:9e:61:fb:1c:32:38:10:cc:da:be:85:53: f8:bf:da:31:87:fe:cc:12:e8:aa:2c:6c:02:8f:8d: 59:09:82:fd:0a:11:f9:51:21:99:38:29:e7:68:e7: de:15:be:47:dd:10:3d:bb:dd:e8:d9:e2:5d:5c:c7: 59:01:9e:c4:6d:db:83:36:5b:e7:83:5b:11:ee:2b: 45:47:8f:8e:27:f1:4a:70:c1:1d:67:de:29:a0:f2: fb:ee:33:b0:26:cb:e1:33:e6:e8:77:ce:0e:04:de: 49:60:1e:97:ad:43:bf:d4:19:14:ac:a1:8e:ed:9d: 4f:1d:63:2c:a8:c5:81:37:2d:5a:97:91:62:2e:46: 20:9a:08:f0:2c:6d:ef:72:35:33:34:94:70:b3:60: eb:b9:ba:35:4f:8d:76:94:5c:1c:a8:5f:84:96:ed: 49:95:6b:d3:81:98:eb:23:ce:a5:dc:15:dc:b4:8b: 38:06:c7:53:c8:ee:03:cd:c6:dc:46:2b:40:57:7d: 0d:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:81:A8:69:8A:F3:03:D5:BB:DD:BC:D5:63:5E:F7:59:92:02:4D:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/98e41329-c79a-3bd5-ab5e-510248e812ee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:df:f6:ba:5f:78:73:c3:fc:b3:fe:89:06:49:08:f7:bd:78: c1:66:45:c6:02:ad:f8:76:98:c5:b4:47:85:20:a6:6d:40:6a: 43:ab:97:4a:0a:15:4d:0e:0e:a0:85:6f:38:4c:90:45:09:75: c8:cd:48:70:77:cc:78:e7:1e:0a:a2:87:99:da:77:c0:2f:38: 29:a2:57:42:41:8d:24:d9:91:59:ad:9a:eb:0f:a6:fb:13:9d: 60:0c:c0:7a:dc:8e:4d:9d:41:92:31:b7:94:5c:fb:e6:4e:ad: 9d:99:de:2c:2d:c1:29:30:b4:c7:c9:b7:05:41:10:2f:84:79: 29:21:62:c3:aa:a1:97:23:6f:fe:33:b5:e8:a5:fd:9c:86:2c: 8c:e2:49:2a:15:42:60:c7:a5:54:63:18:e6:a8:c9:11:a7:85: f4:b4:33:24:ad:28:bf:20:48:13:c9:7a:ed:a9:0a:f2:ed:4f: 67:7b:cd:84:75:90:0b:87:13:4d:19:55:55:57:bd:70:d9:30: 3a:2d:0a:ca:96:f3:a8:7e:a3:1a:92:cd:d5:5c:34:76:6b:fb: f4:1b:5f:d1:74:54:75:86:07:e0:62:82:3a:52:f4:43:9b:79: 5f:d2:03:4f:89:87:36:fe:88:aa:d8:8f:e0:36:e2:21:4c:f6: 85:dc:15:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUwVZjIxk15eiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzRjNmUyNzQtNjg4YS00YWEzLWFkNWItN2YxZTFhMGU2MmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgWmEhHEoM8qfZ9Qzwt01fVIAL3GYdKpO2n8k QKxoN5Ngt7Tc+7M8cXd0Eqv8R0GZg57C291DKZ+oPdcmuKaeYfscMjgQzNq+hVP4 v9oxh/7MEuiqLGwCj41ZCYL9ChH5USGZOCnnaOfeFb5H3RA9u93o2eJdXMdZAZ7E bduDNlvng1sR7itFR4+OJ/FKcMEdZ94poPL77jOwJsvhM+bod84OBN5JYB6XrUO/ 1BkUrKGO7Z1PHWMsqMWBNy1al5FiLkYgmgjwLG3vcjUzNJRws2Drubo1T412lFwc qF+Elu1JlWvTgZjrI86l3BXctIs4BsdTyO4DzcbcRitAV30NTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMiBqGmK8wPVu9281WNe91mSAk3eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOThlNDEzMjktYzc5YS0z YmQ1LWFiNWUtNTEwMjQ4ZTgxMmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3f9rpfeHPD/LP+iQZJCPe9eMFmRcYCrfh2mMW0R4Ugpm1AakOrl0oK FU0ODqCFbzhMkEUJdcjNSHB3zHjnHgqih5nad8AvOCmiV0JBjSTZkVmtmusPpvsT nWAMwHrcjk2dQZIxt5Rc++ZOrZ2Z3iwtwSkwtMfJtwVBEC+EeSkhYsOqoZcjb/4z teil/ZyGLIziSSoVQmDHpVRjGOaoyRGnhfS0MyStKL8gSBPJeu2pCvLtT2d7zYR1 kAuHE00ZVVVXvXDZMDotCsqW86h+oxqSzdVcNHZr+/QbX9F0VHWGB+BigjpS9EOb eV/SA0+Jhzb+iKrYj+A24iFM9oXcFUQ= -----END CERTIFICATE-----Generated at Sat Jul 26 20:06:15 2025 by rpki-client