$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa File: a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa (raw, json) Hash identifier: OEakJXPuPiApl/HG2FxaQlfCrQzDZ5pNRxrCKDhZ8M0= Subject key identifier: B3:9B:3F:3F:45:5D:D6:90:10:41:B2:9B:40:45:8E:15:83:A3:C7:54 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FAA607EA2DC6AAE49F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fa:a6:07:ea:2d:c6:aa:e4:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f7df6faa-b9c5-4236-ae23-931d9394c827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:8c:33:14:17:bd:8c:a8:70:6a:f5:6d:11:f4: 58:27:1a:e0:af:c3:ed:54:85:a5:29:1c:69:50:66: 18:7d:ec:56:60:7e:83:ac:63:f7:b1:6e:c6:c8:87: aa:9b:5d:33:a4:93:d6:28:a3:2a:b6:92:a2:bd:8e: e3:cb:55:fa:df:39:b9:06:0c:22:ef:3b:e4:32:67: 33:a8:80:07:85:89:d7:df:56:94:f1:3e:2d:b1:75: f5:49:7a:ef:2b:53:3c:ee:c9:cd:42:ed:54:c3:d4: 72:ca:0b:f4:b6:81:9e:dc:7c:f0:66:22:4f:6d:fb: df:91:98:85:74:f5:aa:59:e7:ae:6f:65:0c:73:2b: ab:cd:6a:14:14:84:8c:21:8e:10:ee:b0:36:4c:a3: 51:18:cd:29:23:20:ab:96:2a:74:72:ef:81:ac:8e: d7:de:69:47:d0:34:53:2c:f4:93:da:0a:ba:cf:2b: b8:4b:96:2f:00:9e:84:71:e3:b6:85:69:67:4f:e5: 4b:88:b5:0c:b6:d7:b6:10:87:3e:08:1e:d5:99:0b: 5a:01:98:94:29:6f:6b:c6:c4:94:04:ef:94:5c:6c: 8e:e5:f3:e5:a3:1e:7a:77:59:02:ce:ed:c0:51:a6: ac:d1:3c:33:54:10:30:49:17:1a:3d:f0:75:11:5b: e1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:9B:3F:3F:45:5D:D6:90:10:41:B2:9B:40:45:8E:15:83:A3:C7:54 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:e6:55:14:d4:ad:1a:2c:20:72:1b:37:6d:d7:84:15:be:9f: 32:cb:32:da:df:7d:62:b1:53:ef:69:86:e2:dd:37:13:cc:5c: 19:d4:7c:92:86:d2:55:36:ba:b6:3d:f2:63:95:3c:06:11:74: 76:54:6b:cf:41:de:24:b6:ea:2c:5e:f5:b2:ed:67:3e:48:a0: b8:4b:e6:63:05:5a:05:a6:47:fb:36:3a:96:92:dc:b6:af:0f: 71:58:95:56:c2:37:59:58:24:1d:03:15:8a:4a:f3:ab:6a:bc: 01:3d:67:e7:00:f8:7b:44:2f:e0:fa:85:50:4f:db:06:de:e6: 24:d1:25:e8:26:a1:bd:1f:f5:de:24:7f:b3:0d:57:00:8d:e2: 26:f9:54:c4:85:05:44:5d:60:1e:40:2a:ca:8b:3f:c1:2d:2d: 87:ce:d0:94:47:2a:f5:b3:c1:3f:7f:b2:14:78:f9:e9:c1:c5: d8:4c:66:60:f0:43:0f:01:5e:5a:af:38:2f:ef:1d:ab:9c:f5: 5f:33:64:93:82:d9:70:14:25:65:ac:10:aa:32:36:83:d7:c8: f0:9d:58:08:c6:40:cd:4d:5f:b1:f8:43:05:be:85:ed:9a:07: 15:48:93:06:cf:35:7d:e3:8c:4c:2a:07:1b:79:cd:27:42:cc: 54:a9:8d:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfqmB+otxqrkn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjdkZjZmYWEtYjljNS00MjM2LWFlMjMtOTMxZDkzOTRjODI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIwzFBe9jKhwavVtEfRYJxrgr8PtVIWlKRxp UGYYfexWYH6DrGP3sW7GyIeqm10zpJPWKKMqtpKivY7jy1X63zm5Bgwi7zvkMmcz qIAHhYnX31aU8T4tsXX1SXrvK1M87snNQu1Uw9Ryygv0toGe3HzwZiJPbfvfkZiF dPWqWeeub2UMcyurzWoUFISMIY4Q7rA2TKNRGM0pIyCrlip0cu+BrI7X3mlH0DRT LPST2gq6zyu4S5YvAJ6EceO2hWlnT+VLiLUMtte2EIc+CB7VmQtaAZiUKW9rxsSU BO+UXGyO5fPlox56d1kCzu3AUaas0TwzVBAwSRcaPfB1EVvhyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLObPz9FXdaQEEGym0BFjhWDo8dUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI4ZTFjOTctMDVhOS0z NmUyLWFiYmYtMDA5Y2Q0ZDgwOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEDmVRTUrRosIHIbN23XhBW+nzLLMtrffWKxU+9phuLdNxPMXBnUfJKG 0lU2urY98mOVPAYRdHZUa89B3iS26ixe9bLtZz5IoLhL5mMFWgWmR/s2OpaS3Lav D3FYlVbCN1lYJB0DFYpK86tqvAE9Z+cA+HtEL+D6hVBP2wbe5iTRJegmob0f9d4k f7MNVwCN4ib5VMSFBURdYB5AKsqLP8EtLYfO0JRHKvWzwT9/shR4+enBxdhMZmDw Qw8BXlqvOC/vHauc9V8zZJOC2XAUJWWsEKoyNoPXyPCdWAjGQM1NX7H4QwW+he2a BxVIkwbPNX3jjEwqBxt5zSdCzFSpjZg= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:06 2025 by rpki-client