$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0a3009d-510e-318f-8ebf-ed59a8e93865.roa File: a0a3009d-510e-318f-8ebf-ed59a8e93865.roa (raw, json) Hash identifier: Di0dHhkiUSku4B02e5HnfqSoYt4f2Znog4hx78fTI+o= Subject key identifier: FD:2F:C9:7A:D4:B5:7F:66:12:B2:98:EA:AD:89:F9:C8:75:2E:9C:AC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84120425E3D931BB42A771C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0a3009d-510e-318f-8ebf-ed59a8e93865.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:04:25:e3:d9:31:bb:42:a7:71:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=17e3856f-03f9-4504-9241-bd3b228e383c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:66:58:22:17:1c:ea:6f:56:38:d8:ad:73:ed: 8b:e4:76:63:77:f5:65:d5:81:df:9b:95:fa:84:6c: 23:b0:bd:d8:67:d5:25:dc:e0:63:d6:26:21:30:b8: ca:25:42:66:ac:bf:d0:a6:5a:f0:f8:74:b0:cd:1b: fb:49:5e:68:9a:6f:d7:8c:dc:05:4a:9e:86:4d:03: 0f:d1:50:73:30:65:bb:4b:b2:fa:09:e7:3f:9b:4a: 5b:11:80:1c:de:6b:96:52:ad:3c:8f:03:6d:13:2d: d3:3c:12:f6:76:6e:e5:93:85:3b:1b:43:40:b8:f0: a7:ac:df:95:01:6f:9b:dd:2f:d0:9a:65:53:07:3c: e3:6d:d9:8e:a2:58:11:93:cc:32:21:c9:9f:95:c4: 89:51:07:c6:c8:a1:f8:86:81:64:03:79:90:6b:01: f3:e5:18:b3:49:1b:5d:31:5e:80:4f:37:ac:6e:be: 9b:42:a9:03:e1:36:82:ef:71:7d:ae:60:99:25:8e: 31:6d:4f:65:fe:20:e0:72:c4:79:c9:95:6a:54:9d: d7:25:70:f9:11:b7:6c:e3:d2:26:91:4c:2f:00:01: 87:54:09:ad:2f:8c:02:f7:11:e0:93:71:c1:46:e9: a5:0b:08:11:c2:c1:bc:f0:fc:04:30:d0:5b:22:90: 0d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:2F:C9:7A:D4:B5:7F:66:12:B2:98:EA:AD:89:F9:C8:75:2E:9C:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0a3009d-510e-318f-8ebf-ed59a8e93865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:ee:b0:56:75:11:af:a8:8c:98:a0:99:79:c2:14:1d:94:80: 95:ef:de:34:92:29:99:cd:08:0a:37:4d:86:df:1a:d5:db:1b: e6:39:df:c3:62:e0:45:f4:09:e2:25:ce:93:87:0d:50:91:a9: 1f:19:23:8c:e8:f5:a6:10:bd:b7:01:a1:08:fb:c7:af:9f:23: 25:f0:0b:41:1a:f9:9e:35:78:24:db:4a:c5:0d:6c:1f:99:32: 2a:62:68:14:85:d3:af:27:7c:b5:f9:a0:61:5f:6c:9d:f2:8a: b0:6f:f6:c4:db:60:31:7e:37:de:82:40:89:39:ab:12:b6:08: e6:cf:7e:a1:c4:24:84:4c:cd:db:9e:2e:fa:91:a1:fd:2a:6b: f3:aa:05:2a:4c:f6:a1:ee:2a:0c:11:f4:55:54:76:45:5c:31: 83:ca:51:b3:59:c4:8e:7e:e7:e5:8f:1b:dc:39:1d:fd:50:24: f3:52:49:bc:c4:d1:d0:e6:ea:09:97:17:5a:61:76:d1:86:49: 8d:26:53:1d:8f:92:e3:87:e9:90:e3:f8:4c:e1:fb:71:6b:b5: a0:70:c7:11:ad:a0:a9:db:e2:76:08:b0:31:07:bb:b2:5f:e8: b5:16:76:80:21:07:df:0e:0f:fd:a5:ae:35:2c:a0:b7:06:64: 65:9a:e4:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgQl49kxu0KnccAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTdlMzg1NmYtMDNmOS00NTA0LTkyNDEtYmQzYjIyOGUzODNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApWZYIhcc6m9WONitc+2L5HZjd/Vl1YHfm5X6 hGwjsL3YZ9Ul3OBj1iYhMLjKJUJmrL/Qplrw+HSwzRv7SV5omm/XjNwFSp6GTQMP 0VBzMGW7S7L6Cec/m0pbEYAc3muWUq08jwNtEy3TPBL2dm7lk4U7G0NAuPCnrN+V AW+b3S/QmmVTBzzjbdmOolgRk8wyIcmflcSJUQfGyKH4hoFkA3mQawHz5RizSRtd MV6ATzesbr6bQqkD4TaC73F9rmCZJY4xbU9l/iDgcsR5yZVqVJ3XJXD5Ebds49Im kUwvAAGHVAmtL4wC9xHgk3HBRumlCwgRwsG88PwEMNBbIpANmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP0vyXrUtX9mErKY6q2J+ch1LpysMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTBhMzAwOWQtNTEwZS0z MThmLThlYmYtZWQ1OWE4ZTkzODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfusFZ1Ea+ojJigmXnCFB2UgJXv3jSSKZnNCAo3TYbfGtXbG+Y538Ni 4EX0CeIlzpOHDVCRqR8ZI4zo9aYQvbcBoQj7x6+fIyXwC0Ea+Z41eCTbSsUNbB+Z MipiaBSF068nfLX5oGFfbJ3yirBv9sTbYDF+N96CQIk5qxK2CObPfqHEJIRMzdue LvqRof0qa/OqBSpM9qHuKgwR9FVUdkVcMYPKUbNZxI5+5+WPG9w5Hf1QJPNSSbzE 0dDm6gmXF1phdtGGSY0mUx2PkuOH6ZDj+Ezh+3FrtaBwxxGtoKnb4nYIsDEHu7Jf 6LUWdoAhB98OD/2lrjUsoLcGZGWa5GY= -----END CERTIFICATE-----Generated at Sat Jul 26 11:40:16 2025 by rpki-client