$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a10842be-1015-3a16-aecf-3b81479b7c7d.roa File: a10842be-1015-3a16-aecf-3b81479b7c7d.roa (raw, json) Hash identifier: /RbMQ1Jjms4GR7+JJM39HlKibpRTKC+gA04Din8pc4k= Subject key identifier: 72:48:08:16:D8:E4:9E:87:77:45:C9:92:D8:FA:E1:B2:39:D4:87:A2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF68A7824F78B9900480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a10842be-1015-3a16-aecf-3b81479b7c7d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:68:a7:82:4f:78:b9:90:04:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2f8797dc-97bc-4844-92f3-397304957f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7f:c8:48:ac:2c:d9:b1:16:84:d3:89:9d:88: cd:05:67:81:95:8c:95:f0:b3:8d:5f:a0:58:d1:66: 31:6d:8b:0b:07:e8:1c:49:de:ad:a7:c7:b1:7a:cc: 13:0d:e4:b1:27:09:a6:5a:c0:19:2d:42:d1:1c:6a: af:d3:80:a1:26:6c:00:40:28:b5:86:50:54:0a:15: 49:16:62:b7:71:97:2e:ee:bb:fb:96:2e:85:6a:69: fb:7a:2f:1a:b2:1f:ba:95:48:ee:ab:4d:10:17:33: a5:8e:ca:b2:ab:83:8c:aa:ac:37:7d:c2:80:23:85: bb:fb:63:f7:d5:ae:95:1b:70:d1:9b:78:3a:49:e3: a1:d4:99:ca:09:bd:b6:fa:5e:8c:31:e0:02:8c:be: 76:8a:66:4c:06:f1:cb:c9:e8:e0:25:a8:4a:b2:62: 2a:d7:78:5c:2f:22:fb:b8:f6:21:c9:76:5e:59:f8: 97:7a:24:e2:30:97:73:b1:40:1d:32:f6:48:6c:62: 25:2f:c1:03:bc:f3:64:3d:2a:d2:3b:34:34:8e:7c: 7d:af:b5:9c:10:34:f5:90:58:67:ec:8c:d1:c3:38: db:72:75:c4:71:77:31:f0:45:cf:85:9f:38:e1:5d: ef:a8:df:2d:7e:4a:4f:b8:3b:f1:76:85:be:1a:53: e4:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:48:08:16:D8:E4:9E:87:77:45:C9:92:D8:FA:E1:B2:39:D4:87:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a10842be-1015-3a16-aecf-3b81479b7c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e9:d6:18:4d:55:e6:6c:cb:23:a2:04:eb:30:10:76:ed:b0: 04:89:d7:8d:5d:0c:ea:10:11:78:aa:ca:c4:3f:e8:55:96:7f: 7d:63:a1:07:80:51:ad:3f:25:52:75:8d:49:af:ca:4a:c1:37: 33:d9:bb:38:c8:08:eb:87:1e:ba:4f:be:90:e3:06:b2:0b:fb: df:72:35:df:29:e0:e4:95:c4:53:ca:9c:51:28:1c:c1:32:bb: 3c:4f:a0:79:03:9b:13:5d:15:69:95:8c:a1:f0:00:ca:3f:f9: 79:33:fb:e6:70:fc:f1:73:9b:4d:64:0d:05:dc:22:14:47:e9: 72:59:b4:7d:6f:8d:9e:bc:e7:bc:5a:ba:31:b0:a8:18:a2:d7: 3f:8f:4b:5e:7c:b2:8b:bc:46:98:aa:69:a6:a9:a0:d4:d3:ff: 55:56:5c:7b:ee:48:54:1c:ac:84:e3:27:d0:99:46:0e:1c:68: de:82:c6:3e:1d:71:79:f6:50:25:de:64:25:25:25:69:0c:ec: ea:65:d4:03:58:fc:38:4d:f8:d5:64:84:5a:43:c7:7c:40:11: e8:12:4a:d0:e9:fa:61:bc:df:d4:5a:01:df:54:61:f3:27:72: 33:7d:c5:cd:15:35:ec:11:d7:06:05:d1:de:f8:c6:fc:96:57: 6c:1e:0b:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf9op4JPeLmQBIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmY4Nzk3ZGMtOTdiYy00ODQ0LTkyZjMtMzk3MzA0OTU3ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApn/ISKws2bEWhNOJnYjNBWeBlYyV8LONX6BY 0WYxbYsLB+gcSd6tp8exeswTDeSxJwmmWsAZLULRHGqv04ChJmwAQCi1hlBUChVJ FmK3cZcu7rv7li6Famn7ei8ash+6lUjuq00QFzOljsqyq4OMqqw3fcKAI4W7+2P3 1a6VG3DRm3g6SeOh1JnKCb22+l6MMeACjL52imZMBvHLyejgJahKsmIq13hcLyL7 uPYhyXZeWfiXeiTiMJdzsUAdMvZIbGIlL8EDvPNkPSrSOzQ0jnx9r7WcEDT1kFhn 7IzRwzjbcnXEcXcx8EXPhZ844V3vqN8tfkpPuDvxdoW+GlPkswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHJICBbY5J6Hd0XJktj64bI51IeiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTEwODQyYmUtMTAxNS0z YTE2LWFlY2YtM2I4MTQ3OWI3YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDp1hhNVeZsyyOiBOswEHbtsASJ141dDOoQEXiqysQ/6FWWf31joQeA Ua0/JVJ1jUmvykrBNzPZuzjICOuHHrpPvpDjBrIL+99yNd8p4OSVxFPKnFEoHMEy uzxPoHkDmxNdFWmVjKHwAMo/+Xkz++Zw/PFzm01kDQXcIhRH6XJZtH1vjZ6857xa ujGwqBii1z+PS158sou8RpiqaaapoNTT/1VWXHvuSFQcrITjJ9CZRg4caN6Cxj4d cXn2UCXeZCUlJWkM7Opl1ANY/DhN+NVkhFpDx3xAEegSStDp+mG839RaAd9UYfMn cjN9xc0VNewR1wYF0d74xvyWV2weCwo= -----END CERTIFICATE-----Generated at Sat Jul 26 00:06:50 2025 by rpki-client