$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa File: a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa (raw, json) Hash identifier: vKVaEk1XF4e7hQd4UVAwGZYOCmGGDQEj/BI/f7YSwfY= Subject key identifier: 5F:03:01:C1:43:76:21:A3:12:0D:87:BF:EE:6A:68:DF:2C:C5:CB:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114C41D66D46FC056C4700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4c:41:d6:6d:46:fc:05:6c:47:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=81a9cd5c-b3a9-4610-8a4d-18b0f6a63fe7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:c8:d0:fd:1c:22:75:0f:6d:db:19:a7:e1:84: 00:16:a3:20:ab:c5:74:53:d8:c1:6d:a4:be:2c:7d: 8f:40:d0:6b:82:03:b7:ad:78:18:b5:b5:47:f8:3b: 2e:3f:aa:29:2e:39:e8:9b:2e:f2:0a:dc:29:15:d5: 36:54:bd:03:ad:4b:51:0e:f8:8c:78:a7:45:f3:d6: a3:8f:01:2e:92:ae:a3:79:07:8a:18:3f:dc:b0:b3: 77:f8:b3:47:02:35:60:6a:45:6f:e1:a6:f0:fa:9a: 42:78:e7:f9:35:79:9f:21:b2:94:68:d8:b9:45:f7: 0d:06:08:32:a0:ca:27:b9:70:0e:7a:36:0b:f5:b1: 84:c9:8f:a9:57:3d:92:71:fd:86:49:c6:70:ab:9c: ae:da:82:19:bb:22:71:95:77:c3:83:85:5f:20:7c: f2:ac:e1:1d:58:1f:38:80:d3:7c:f0:ff:38:41:42: 0e:20:f8:12:58:a7:45:7e:81:ea:3c:6b:db:3c:a5: d1:f4:1a:d1:88:2e:fd:74:64:9b:99:7b:8f:7e:d9: 20:0d:cf:bf:82:61:8e:5b:d1:5b:06:78:2d:29:63: 42:97:aa:1c:82:4e:16:7d:63:f0:6b:39:28:f3:f6: 97:6a:64:e9:73:56:9f:b8:3e:86:9f:d7:77:0e:15: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:03:01:C1:43:76:21:A3:12:0D:87:BF:EE:6A:68:DF:2C:C5:CB:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2002b14-896a-3c37-9c2d-2dc5e00ae522.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:4a:a4:21:7f:1a:ec:db:df:8e:0d:d4:37:ba:8a:1b:ba:98: cf:d0:37:72:77:3b:0d:c2:ca:8b:6f:8e:bf:40:cc:14:bd:b0: 7a:6c:50:9c:2d:fc:2f:65:ee:04:2f:69:cb:ff:ea:c5:02:f1: c6:01:39:bf:bc:37:ca:35:96:f5:ee:61:b2:ac:1b:21:33:71: 0f:16:33:e2:fa:e5:ba:31:d0:c6:c5:f9:55:5e:ee:bb:12:fc: ab:d6:48:6f:69:4f:b4:0f:e2:70:bb:18:e3:85:39:08:5f:bd: c0:4c:9f:6b:12:19:25:b0:b6:6c:34:a7:b5:7f:e8:db:3e:cc: a8:b5:5e:b2:e2:10:18:99:d5:36:20:eb:cd:9a:18:8f:2c:5c: ab:18:fb:83:c1:08:77:69:ef:1f:0c:83:28:b1:54:32:1e:9e: 53:8c:10:a6:aa:b6:fe:8e:ae:30:8f:9d:de:32:1d:52:82:a2: c3:d8:02:c6:2d:b3:b4:56:c3:68:8b:f9:88:89:22:6a:8d:24: 07:be:48:51:3f:a2:eb:2c:cc:30:21:ee:de:ce:63:3a:56:44: e6:d6:87:f8:f0:4b:1a:09:ea:39:95:e6:fe:13:0f:94:a4:46: 22:2d:b1:26:33:79:d9:5d:a9:f6:50:fc:62:77:ae:31:35:5e: 88:fa:37:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUxB1m1G/AVsRwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODFhOWNkNWMtYjNhOS00NjEwLThhNGQtMThiMGY2YTYzZmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAksjQ/RwidQ9t2xmn4YQAFqMgq8V0U9jBbaS+ LH2PQNBrggO3rXgYtbVH+DsuP6opLjnomy7yCtwpFdU2VL0DrUtRDviMeKdF89aj jwEukq6jeQeKGD/csLN3+LNHAjVgakVv4abw+ppCeOf5NXmfIbKUaNi5RfcNBggy oMonuXAOejYL9bGEyY+pVz2Scf2GScZwq5yu2oIZuyJxlXfDg4VfIHzyrOEdWB84 gNN88P84QUIOIPgSWKdFfoHqPGvbPKXR9BrRiC79dGSbmXuPftkgDc+/gmGOW9Fb BngtKWNCl6ocgk4WfWPwazko8/aXamTpc1afuD6Gn9d3DhXI6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF8DAcFDdiGjEg2Hv+5qaN8sxcvuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTIwMDJiMTQtODk2YS0z YzM3LTljMmQtMmRjNWUwMGFlNTIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9KpCF/Guzb344N1De6ihu6mM/QN3J3Ow3Cyotvjr9AzBS9sHpsUJwt /C9l7gQvacv/6sUC8cYBOb+8N8o1lvXuYbKsGyEzcQ8WM+L65box0MbF+VVe7rsS /KvWSG9pT7QP4nC7GOOFOQhfvcBMn2sSGSWwtmw0p7V/6Ns+zKi1XrLiEBiZ1TYg 682aGI8sXKsY+4PBCHdp7x8MgyixVDIenlOMEKaqtv6OrjCPnd4yHVKCosPYAsYt s7RWw2iL+YiJImqNJAe+SFE/ousszDAh7t7OYzpWRObWh/jwSxoJ6jmV5v4TD5Sk RiItsSYzedldqfZQ/GJ3rjE1Xoj6Nzo= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:03 2025 by rpki-client