$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa File: a50b09dc-5ebd-3b52-be77-89151fb75984.roa (raw, json) Hash identifier: ZI7Ihv+QdhN3OV1enkpuCsnYUW2JwIlnziQFf1TrL28= Subject key identifier: FA:77:BB:91:60:92:D6:32:F3:3C:5D:E6:7B:88:97:60:59:66:30:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FE28CDE4073F70F04520 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fe:28:cd:e4:07:3f:70:f0:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f44fcf59-9cac-493c-865e-e70d20fef5b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bf:95:0f:d5:f7:55:8b:ea:9e:e4:a6:eb:cd: 5e:bd:89:8b:f1:f5:b2:d9:cb:aa:76:4d:4f:73:a6: e8:03:2a:87:42:a1:8b:87:19:8a:a6:34:89:f5:a5: f4:69:9b:0f:b2:e2:03:22:4e:89:cb:03:29:b2:63: a7:c9:06:7b:4b:81:26:98:dd:1c:05:f0:ac:83:6e: f0:fa:34:52:66:2a:88:32:ef:22:88:60:87:73:69: 65:a6:81:3f:b3:89:fd:76:ab:4b:cc:6b:76:b8:de: 27:cd:08:c6:db:b8:7b:07:17:a5:62:d6:7f:00:0d: 3f:5d:99:eb:34:8a:bd:16:5b:64:4b:1f:eb:81:86: 08:09:8c:47:ae:aa:7f:9b:61:08:4c:60:85:b6:44: 5b:ac:1c:fb:f9:0d:02:a7:20:63:60:0f:e0:0f:91: b8:eb:0f:80:17:45:af:38:bc:fa:30:dd:d9:79:7b: 5b:79:f1:9b:8d:d2:59:2d:ba:e1:01:c4:2a:d1:e5: 50:db:94:fa:ed:e8:08:29:c8:cd:f3:9e:93:35:a7: 10:42:69:0e:8b:3a:19:0a:25:46:3e:6c:93:ac:78: d5:4a:53:b8:22:cd:3d:06:24:95:b5:b2:17:dc:df: f7:ff:c0:35:d5:b6:fd:5b:80:ae:73:13:65:37:8a: 07:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:77:BB:91:60:92:D6:32:F3:3C:5D:E6:7B:88:97:60:59:66:30:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a50b09dc-5ebd-3b52-be77-89151fb75984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:0f:57:04:3c:e9:19:62:c1:67:57:5a:e5:a8:03:91:76:52: 49:a9:7a:53:3c:58:73:48:f3:28:93:4c:fd:ce:ca:81:fe:91: dd:83:a9:a5:b8:79:17:68:02:20:6a:59:57:20:f5:18:c9:0d: 13:12:33:38:c1:ba:52:ed:af:d7:71:e6:ab:0f:1a:e7:14:c3: 97:5f:a0:34:5a:e7:35:62:28:38:a5:0a:28:1b:f4:08:5b:0d: f7:b0:83:49:d9:d8:c9:38:30:01:1a:7d:4d:74:45:67:39:0e: 35:6e:b0:ed:02:1d:6e:03:9f:24:31:a8:30:2c:93:8e:cf:a5: 64:fe:79:97:ab:54:fb:cc:3a:b4:21:8d:e4:fb:a5:51:cb:57: f2:e4:2a:16:87:7e:e9:42:98:e3:6a:c6:23:5b:9a:7b:81:29: 8b:aa:83:62:04:3b:98:93:c7:8f:16:75:cc:ba:6c:7a:38:de: 13:eb:65:0d:69:e4:ea:f1:5b:67:df:8f:13:50:94:7c:3c:36: 75:32:29:9d:9c:d6:dc:c4:13:72:6d:b1:cc:8c:e7:61:80:ee: e2:33:31:70:20:c4:ca:33:db:07:3c:8d:90:54:c6:5f:6c:59: 53:04:5f:61:d6:b9:5e:21:45:ef:4c:43:b8:e8:78:c6:5a:b5: a1:16:50:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf4ozeQHP3DwRSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjQ0ZmNmNTktOWNhYy00OTNjLTg2NWUtZTcwZDIwZmVmNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7+VD9X3VYvqnuSm681evYmL8fWy2cuqdk1P c6boAyqHQqGLhxmKpjSJ9aX0aZsPsuIDIk6JywMpsmOnyQZ7S4EmmN0cBfCsg27w +jRSZiqIMu8iiGCHc2llpoE/s4n9dqtLzGt2uN4nzQjG27h7BxelYtZ/AA0/XZnr NIq9FltkSx/rgYYICYxHrqp/m2EITGCFtkRbrBz7+Q0CpyBjYA/gD5G46w+AF0Wv OLz6MN3ZeXtbefGbjdJZLbrhAcQq0eVQ25T67egIKcjN856TNacQQmkOizoZCiVG PmyTrHjVSlO4Is09BiSVtbIX3N/3/8A11bb9W4CucxNlN4oHHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPp3u5FgktYy8zxd5nuIl2BZZjB6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTUwYjA5ZGMtNWViZC0z YjUyLWJlNzctODkxNTFmYjc1OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFYPVwQ86RliwWdXWuWoA5F2UkmpelM8WHNI8yiTTP3OyoH+kd2DqaW4 eRdoAiBqWVcg9RjJDRMSMzjBulLtr9dx5qsPGucUw5dfoDRa5zViKDilCigb9Ahb Dfewg0nZ2Mk4MAEafU10RWc5DjVusO0CHW4DnyQxqDAsk47PpWT+eZerVPvMOrQh jeT7pVHLV/LkKhaHfulCmONqxiNbmnuBKYuqg2IEO5iTx48Wdcy6bHo43hPrZQ1p 5OrxW2ffjxNQlHw8NnUyKZ2c1tzEE3JtscyM52GA7uIzMXAgxMoz2wc8jZBUxl9s WVMEX2HWuV4hRe9MQ7joeMZataEWUD0= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:20 2025 by rpki-client