$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa File: a6cb1347-1871-37e3-b974-20f869f40c52.roa (raw, json) Hash identifier: UmXWepUMOPwOGaJG3kJHE6WjBXJeBisAo3xUjGJSURU= Subject key identifier: 8D:3F:76:C4:71:F9:94:22:CE:9B:84:60:F4:73:B9:AB:38:00:EC:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF856069206D3297B6E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:85:60:69:20:6d:32:97:b6:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bee75d21-3c73-4c63-95ea-aaa0cd438d82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:17:7f:2b:a2:41:e4:81:26:4b:3f:f1:e2:f4: 63:89:ab:9a:92:04:04:96:15:0e:00:34:02:10:69: 21:ea:e9:a3:24:aa:e8:d8:a3:30:7d:b0:ad:ac:4a: ad:9f:66:a6:71:bc:7f:ab:58:e4:e9:80:47:cf:28: cd:a4:53:58:74:ae:21:bb:e6:41:10:cd:96:d1:4e: 06:1e:71:2b:30:3d:ba:53:45:ad:04:84:c9:d2:e9: 6e:14:5b:6f:9c:58:2b:a7:84:a8:c3:aa:d8:7f:ca: 44:64:94:94:67:94:72:bf:1a:2c:0f:38:3b:98:ff: 12:f2:f3:91:f0:c7:0c:75:01:1e:d6:7b:02:8f:70: 7d:0d:0a:74:66:39:b0:e1:8d:f0:a8:44:ba:01:36: 8e:92:f7:17:39:5f:63:cb:3d:bd:e3:46:32:21:5f: 6d:84:11:db:8a:6c:b3:f9:ce:bd:52:26:d3:2d:15: ea:83:21:12:38:a3:6b:46:5a:12:41:ca:f3:29:ab: d5:62:66:8b:df:4b:f8:11:d8:b6:a5:80:bd:db:b9: 62:18:a4:30:13:25:5a:f7:6f:b9:e5:c6:24:70:e7: 59:cd:85:6a:a4:56:a7:cf:41:5c:4d:4c:da:6f:cb: 7b:91:aa:19:a0:42:46:e6:e0:58:e9:80:17:09:f1: c6:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:3F:76:C4:71:F9:94:22:CE:9B:84:60:F4:73:B9:AB:38:00:EC:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cb1347-1871-37e3-b974-20f869f40c52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:6f:5c:19:ca:c2:d5:3e:8a:10:1b:51:2e:04:03:b7:6d:ee: 8e:57:f1:61:d0:ad:00:cd:bf:4f:63:a5:cb:47:22:98:b2:30: 40:db:d7:9e:6f:ac:68:a4:73:e3:0c:ed:85:a3:7b:11:27:23: ac:06:41:86:f0:8b:18:d4:b2:20:05:8b:46:3e:3e:89:7e:8d: cf:cc:b7:4d:38:bb:76:ef:76:e1:0b:38:7e:be:36:f3:fb:6b: ea:63:0a:ae:ae:89:8d:42:27:9b:11:56:6b:e5:33:47:8c:ec: 31:fb:c5:b5:37:17:f8:b4:a9:c5:e6:27:b7:d7:4e:cf:19:90: f0:6f:58:18:29:8c:f8:ad:f3:30:fb:cc:1a:c9:78:d0:c1:66: 10:31:04:82:bb:16:2a:4f:5a:ee:e1:e8:c1:0d:46:e9:09:33: 74:94:bd:f9:cb:52:f1:11:74:ea:f5:9c:e5:16:68:40:24:d4: 42:23:c0:13:cd:c5:70:0d:31:b7:2d:4f:72:e2:5b:ef:9c:61: 58:2e:e4:ff:9a:9c:09:a0:30:45:df:70:5b:d6:01:66:23:7f: 3f:4b:f8:4d:6b:57:2b:81:6a:27:61:5d:80:76:8a:9d:cb:ab: 13:7e:c0:31:53:55:51:97:e9:f8:d3:3e:02:21:89:96:4e:2f: d7:d7:25:2f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf+FYGkgbTKXtuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmVlNzVkMjEtM2M3My00YzYzLTk1ZWEtYWFhMGNkNDM4ZDgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rd/K6JB5IEmSz/x4vRjiauakgQElhUOADQC EGkh6umjJKro2KMwfbCtrEqtn2amcbx/q1jk6YBHzyjNpFNYdK4hu+ZBEM2W0U4G HnErMD26U0WtBITJ0uluFFtvnFgrp4Sow6rYf8pEZJSUZ5RyvxosDzg7mP8S8vOR 8McMdQEe1nsCj3B9DQp0Zjmw4Y3wqES6ATaOkvcXOV9jyz2940YyIV9thBHbimyz +c69UibTLRXqgyESOKNrRloSQcrzKavVYmaL30v4Edi2pYC927liGKQwEyVa92+5 5cYkcOdZzYVqpFanz0FcTUzab8t7kaoZoEJG5uBY6YAXCfHGmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI0/dsRx+ZQizpuEYPRzuas4AOwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZjYjEzNDctMTg3MS0z N2UzLWI5NzQtMjBmODY5ZjQwYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJvXBnKwtU+ihAbUS4EA7dt7o5X8WHQrQDNv09jpctHIpiyMEDb155v rGikc+MM7YWjexEnI6wGQYbwixjUsiAFi0Y+Pol+jc/Mt004u3bvduELOH6+NvP7 a+pjCq6uiY1CJ5sRVmvlM0eM7DH7xbU3F/i0qcXmJ7fXTs8ZkPBvWBgpjPit8zD7 zBrJeNDBZhAxBIK7FipPWu7h6MENRukJM3SUvfnLUvERdOr1nOUWaEAk1EIjwBPN xXANMbctT3LiW++cYVgu5P+anAmgMEXfcFvWAWYjfz9L+E1rVyuBaidhXYB2ip3L qxN+wDFTVVGX6fjTPgIhiZZOL9fXJS8= -----END CERTIFICATE-----Generated at Sat Jul 26 11:41:08 2025 by rpki-client