$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa File: a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa (raw, json) Hash identifier: /KqKiIaYbYjPFwwPPELxaKPhmyWk+mDaCn6prMT6flo= Subject key identifier: 49:C4:EF:A3:C9:29:A6:17:81:4B:37:79:6D:F6:D0:F9:4A:A0:97:59 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411460B4DA43FAB99B58040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:46:0b:4d:a4:3f:ab:99:b5:80:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=9157b680-9e05-44e3-a14e-9938611f639b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:95:a0:eb:fb:e1:ee:c9:df:2a:04:47:1a:73: ea:9b:93:5c:95:67:02:60:d8:33:6a:1e:ce:8e:14: 0b:d7:9f:e4:13:30:3f:f8:b3:ea:b1:fc:ae:0b:3d: 21:ee:f0:f2:51:43:bc:c5:2f:29:40:97:d4:65:ea: 01:b9:76:ad:8c:e7:d5:35:b8:b0:43:f7:e3:dc:79: 54:5c:2f:86:18:3e:04:0b:00:d2:3a:7f:c7:4c:33: c9:5a:a7:89:9f:52:39:da:94:db:a1:17:63:d9:97: 2b:43:2c:fc:2e:89:c1:a4:20:bc:e3:f5:d1:66:2e: 30:f2:3e:6d:ef:fc:a0:fb:fa:8f:b8:c2:78:f6:51: bb:d2:32:d6:12:dd:71:d9:08:17:9a:8c:66:68:f0: 19:f7:16:a6:da:2d:a3:c2:3c:46:41:55:13:af:2c: 5f:89:08:c7:6d:f3:8b:84:df:ac:b0:62:dc:8d:71: 5c:e7:40:5f:b9:e2:be:d2:ed:b9:38:4d:9f:e4:5d: 4c:12:f4:a0:10:c0:55:87:5e:48:4e:1a:76:a1:0c: 28:d0:33:a1:87:f8:44:a5:36:25:46:44:aa:88:41: bc:65:59:ba:fc:ed:6f:a8:2c:db:eb:88:f0:a8:af: 80:9f:c4:74:aa:7f:a5:0e:8d:43:72:17:96:a1:ee: bb:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:C4:EF:A3:C9:29:A6:17:81:4B:37:79:6D:F6:D0:F9:4A:A0:97:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:55:72:19:7e:36:38:d2:c2:ba:d1:6b:c2:17:c1:b0:0e:a7: ca:11:c3:02:5a:31:6e:a3:e8:4a:59:31:ea:8b:67:00:b2:87: 4a:9a:aa:aa:78:b8:d4:d7:ad:76:a1:69:4a:56:fe:f0:ae:52: b8:9d:26:0f:a0:d3:23:8c:cf:71:c9:27:df:2f:ba:1a:ca:5b: 82:28:e0:67:1b:04:ce:49:39:3c:27:27:a5:88:ce:2c:2c:01: ba:c8:1e:8d:1c:40:5a:e1:03:39:93:84:6e:74:cd:47:9d:55: e1:4a:ae:64:97:39:44:8e:4f:a6:cc:cf:2d:c3:f3:f2:e3:ff: 06:75:a5:66:ba:0d:bf:a1:20:d4:cd:bc:52:a0:c1:b1:1d:c3: c7:b8:c3:ab:6b:c8:db:8e:19:37:0d:3b:31:fa:75:73:2a:02: 67:97:1b:e0:56:3c:28:58:29:fa:22:fa:80:85:46:0b:25:1f: 2a:74:45:c3:12:9c:fe:3a:72:2f:83:a3:c8:22:2b:60:b3:27: 01:db:e3:a5:fa:a1:66:62:7f:80:5e:9c:76:66:5e:b1:58:f7: 35:a8:fe:a2:0d:1e:dc:6e:d1:43:8a:66:4b:9b:35:fc:2d:93: 0c:33:15:72:68:28:7f:4e:af:73:83:b1:ae:1f:db:33:ae:cf: 3a:be:11:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUYLTaQ/q5m1gEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTE1N2I2ODAtOWUwNS00NGUzLWExNGUtOTkzODYxMWY2MzliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5Wg6/vh7snfKgRHGnPqm5NclWcCYNgzah7O jhQL15/kEzA/+LPqsfyuCz0h7vDyUUO8xS8pQJfUZeoBuXatjOfVNbiwQ/fj3HlU XC+GGD4ECwDSOn/HTDPJWqeJn1I52pTboRdj2ZcrQyz8LonBpCC84/XRZi4w8j5t 7/yg+/qPuMJ49lG70jLWEt1x2QgXmoxmaPAZ9xam2i2jwjxGQVUTryxfiQjHbfOL hN+ssGLcjXFc50BfueK+0u25OE2f5F1MEvSgEMBVh15IThp2oQwo0DOhh/hEpTYl RkSqiEG8ZVm6/O1vqCzb64jwqK+An8R0qn+lDo1DcheWoe67XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEnE76PJKaYXgUs3eW320PlKoJdZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQwNmE4YWItOGFlZC0z ZDZiLThlMGUtOWJiMDI5MTY5NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFVchl+NjjSwrrRa8IXwbAOp8oRwwJaMW6j6EpZMeqLZwCyh0qaqqp4 uNTXrXahaUpW/vCuUridJg+g0yOMz3HJJ98vuhrKW4Io4GcbBM5JOTwnJ6WIziws AbrIHo0cQFrhAzmThG50zUedVeFKrmSXOUSOT6bMzy3D8/Lj/wZ1pWa6Db+hINTN vFKgwbEdw8e4w6tryNuOGTcNOzH6dXMqAmeXG+BWPChYKfoi+oCFRgslHyp0RcMS nP46ci+Do8giK2CzJwHb46X6oWZif4BenHZmXrFY9zWo/qINHtxu0UOKZkubNfwt kwwzFXJoKH9Or3ODsa4f2zOuzzq+EZE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:12:44 2025 by rpki-client