$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5640d06-d4ec-33b7-b775-706c2d848417.roa File: a5640d06-d4ec-33b7-b775-706c2d848417.roa (raw, json) Hash identifier: pK+9I4nzxTfpJnaJWjl2Rxr3VDqguwyiLpg1DwT66gY= Subject key identifier: 33:35:F9:F9:D0:6E:09:6B:CC:29:80:EF:DC:56:14:C4:20:7A:48:C1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412036B68155F8242261480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5640d06-d4ec-33b7-b775-706c2d848417.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:03:6b:68:15:5f:82:42:26:14:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d864e24b-6787-49a8-a049-97c16f310ab4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:85:fc:96:18:29:00:82:14:43:03:fc:7a:a8: f9:de:e1:87:d0:81:61:97:ef:3e:d7:bc:90:32:6d: 04:48:7d:41:52:71:d2:20:fc:10:de:d6:64:4b:af: b6:30:37:5f:e7:ba:e4:8d:b3:f0:b4:0d:87:e0:64: cb:a7:5a:c7:f0:e5:6e:26:c4:2f:ef:42:9e:c5:92: 4c:35:24:ab:1b:97:67:31:73:8c:21:cd:fb:69:9b: 55:b7:f8:1a:fb:e1:ca:6a:15:e8:64:61:17:51:b9: e8:59:08:51:90:50:d6:e8:f3:a0:bd:ab:06:38:a0: 75:a4:b6:ce:9d:21:2e:46:83:0b:bd:0b:5c:82:e2: a8:97:b7:a9:22:b1:45:db:d0:9b:b1:ae:d2:05:6f: f0:1d:9e:7a:e1:6e:4c:19:98:2c:a0:92:3f:bb:93: 4d:2a:dc:a2:40:0e:bc:3a:ba:6d:53:ea:fb:14:e6: 45:63:4e:76:1b:f3:1a:1c:83:bb:6c:81:74:86:3c: e7:46:80:47:97:cf:f6:db:e3:82:6a:ac:cf:38:9f: cb:c3:76:92:ef:94:46:59:2f:17:75:9d:33:26:64: aa:5e:d9:3a:63:85:65:d1:3c:f1:50:f6:e0:7d:99: d3:81:0a:df:1e:69:51:ef:f7:27:8e:55:b9:5f:c5: 0d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:F9:F9:D0:6E:09:6B:CC:29:80:EF:DC:56:14:C4:20:7A:48:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a5640d06-d4ec-33b7-b775-706c2d848417.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b3:9f:7c:82:6d:56:1d:e8:b8:42:37:b5:f7:38:4a:f9:90:d3: c7:98:aa:56:da:52:3e:1a:5e:14:ce:f9:fd:36:4d:2c:0d:3b: 49:61:fc:38:e3:85:4e:2c:69:e6:d4:6b:8a:dd:2a:02:8b:79: cd:d4:1f:c7:14:3b:fb:db:3a:6a:16:1c:d4:8e:66:f0:ad:4d: f3:ec:a7:63:0d:d2:89:81:ae:1a:51:a1:da:a4:68:63:ea:f3: b5:82:3c:bb:41:ed:5f:47:ba:c9:97:b4:d2:11:4b:7a:5a:b4: ab:1b:a3:f7:28:e1:e3:55:bd:c8:5c:5c:f7:00:3b:31:a6:b5: a6:e9:6b:9c:26:58:15:15:cb:ef:8d:7e:97:e9:ec:42:09:d0: 5e:c9:45:a7:22:c5:85:0c:db:40:f8:d5:0c:00:76:63:3f:6a: 9b:0e:52:b9:8c:03:22:e6:ec:df:7b:c0:5c:1a:75:06:64:db: b9:c8:6b:0f:66:74:30:13:e7:d9:c8:83:5b:81:a6:70:18:a6: 42:88:11:af:6b:c8:59:d0:c2:66:72:ca:f4:6f:6f:7b:cc:e7: 34:58:d2:9c:a8:80:0e:15:d8:10:84:c7:f6:4d:04:09:7a:13: df:c6:83:d7:01:0c:a7:eb:0c:a9:1d:a0:3a:e5:45:fe:05:7b: 36:44:69:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgNraBVfgkImFIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDg2NGUyNGItNjc4Ny00OWE4LWEwNDktOTdjMTZmMzEwYWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnIX8lhgpAIIUQwP8eqj53uGH0IFhl+8+17yQ Mm0ESH1BUnHSIPwQ3tZkS6+2MDdf57rkjbPwtA2H4GTLp1rH8OVuJsQv70KexZJM NSSrG5dnMXOMIc37aZtVt/ga++HKahXoZGEXUbnoWQhRkFDW6POgvasGOKB1pLbO nSEuRoMLvQtcguKol7epIrFF29Cbsa7SBW/wHZ564W5MGZgsoJI/u5NNKtyiQA68 OrptU+r7FOZFY052G/MaHIO7bIF0hjznRoBHl8/22+OCaqzPOJ/Lw3aS75RGWS8X dZ0zJmSqXtk6Y4Vl0TzxUPbgfZnTgQrfHmlR7/cnjlW5X8UNlwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM1+fnQbglrzCmA79xWFMQgekjBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTU2NDBkMDYtZDRlYy0z M2I3LWI3NzUtNzA2YzJkODQ4NDE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALOffIJtVh3ouEI3tfc4SvmQ08eYqlbaUj4aXhTO+f02TSwNO0lh/Djj hU4saebUa4rdKgKLec3UH8cUO/vbOmoWHNSOZvCtTfPsp2MN0omBrhpRodqkaGPq 87WCPLtB7V9HusmXtNIRS3patKsbo/co4eNVvchcXPcAOzGmtabpa5wmWBUVy++N fpfp7EIJ0F7JRacixYUM20D41QwAdmM/apsOUrmMAyLm7N97wFwadQZk27nIaw9m dDAT59nIg1uBpnAYpkKIEa9ryFnQwmZyyvRvb3vM5zRY0pyogA4V2BCEx/ZNBAl6 E9/Gg9cBDKfrDKkdoDrlRf4FezZEaWc= -----END CERTIFICATE-----Generated at Sat Jul 26 11:36:16 2025 by rpki-client