$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa File: a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa (raw, json) Hash identifier: /IeIuQ4iz4HJ1ks2bIMkg1JYIWsqhXHqpo2eBcPhsxA= Subject key identifier: CC:10:6A:4A:38:13:2C:B4:0B:B5:EC:16:E8:1A:06:D0:FC:5A:02:1E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412021AC17A2C0F62D4CAC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:02:1a:c1:7a:2c:0f:62:d4:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c70f9e89-04f5-473c-b415-62f85691a42d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:d6:10:71:b3:46:98:44:d6:20:37:e8:57: 91:e8:60:70:e4:41:a6:1a:8f:66:8c:4c:90:d1:09: 7a:73:02:ab:9d:6d:45:6d:90:7e:88:3e:c2:68:95: c9:17:1b:a9:6b:d9:a0:20:57:17:1d:fd:c3:35:d0: a7:67:ac:a6:ab:f0:d7:c0:8d:f2:1d:12:9e:65:b6: 47:86:ac:ff:9d:31:63:94:d2:5b:08:92:1e:53:b9: ea:e9:1a:1f:88:4d:a7:3e:f3:d9:06:ea:9c:1b:99: 4d:a7:84:b1:a9:3b:4d:9a:58:aa:ab:95:76:88:0f: 22:d2:c1:6f:0b:7f:e3:79:c8:4f:cd:66:80:68:58: af:85:73:12:14:7c:38:67:7b:6e:59:3f:8d:8a:8c: 47:b5:97:9e:f8:09:3a:78:d7:73:d3:86:5d:eb:7d: 87:d9:31:33:e1:6b:e5:f0:8d:0b:5d:b5:22:43:0f: ea:3c:53:9c:ae:5f:93:e5:f2:af:d8:96:9a:e9:a1: b4:46:e5:86:56:1b:7a:91:69:6c:8d:61:1d:43:a0: bf:83:af:14:5b:f6:79:03:36:ea:74:32:c1:14:72: 13:82:37:96:4b:42:4a:62:a6:37:d9:3e:ab:c5:3e: cd:78:27:90:b2:9d:49:b3:0f:48:b4:92:83:b2:71: f9:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:10:6A:4A:38:13:2C:B4:0B:B5:EC:16:E8:1A:06:D0:FC:5A:02:1E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6f2abfc-596d-3dac-bd9e-885e14e1c43c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:1c:21:6e:55:53:80:3a:36:ea:d3:d5:2c:af:6a:a3:05:77: 0d:8d:cd:91:eb:5c:f6:48:99:bb:00:01:8c:d9:38:1d:8f:ef: a2:76:fa:8b:ad:f1:8e:22:58:03:6a:8c:31:61:10:48:0e:80: 50:59:04:23:61:e9:9b:85:4f:5a:b2:9f:d6:f8:9f:75:18:8b: c2:27:4f:52:14:be:ef:a6:b9:16:74:33:6e:79:5a:95:d7:b1: ee:6f:81:1c:1e:96:19:b0:95:6c:c7:6c:aa:1d:e2:de:58:6e: 40:a5:d4:52:61:4b:18:2f:a8:ae:79:15:72:26:66:92:8d:b4: cb:bb:0b:52:1b:97:a1:37:0a:12:ec:75:34:f6:65:36:b5:de: 06:6e:8d:a8:00:d9:96:6f:84:cf:e0:9b:af:bf:d4:5e:8e:65: b0:9f:8f:fa:a4:65:54:11:0a:0b:47:19:cd:1f:88:01:c4:db: 12:2d:06:95:e2:7b:98:5f:5b:77:96:4f:2e:1c:96:e7:5f:ed: af:f5:5d:6c:c6:c9:63:e2:67:fb:ad:d9:a6:af:eb:cb:11:d2: 45:d8:ab:4d:03:5e:b5:29:79:d9:65:7f:11:b4:64:bd:8f:32: e5:b5:18:7b:9d:cd:04:50:3f:31:e5:36:14:b8:6a:3f:60:78: f9:15:a4:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgIawXosD2LUysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzcwZjllODktMDRmNS00NzNjLWI0MTUtNjJmODU2OTFhNDJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3UzWEHGzRphE1iA36FeR6GBw5EGmGo9mjEyQ 0Ql6cwKrnW1FbZB+iD7CaJXJFxupa9mgIFcXHf3DNdCnZ6ymq/DXwI3yHRKeZbZH hqz/nTFjlNJbCJIeU7nq6RofiE2nPvPZBuqcG5lNp4SxqTtNmliqq5V2iA8i0sFv C3/jechPzWaAaFivhXMSFHw4Z3tuWT+NioxHtZee+Ak6eNdz04Zd632H2TEz4Wvl 8I0LXbUiQw/qPFOcrl+T5fKv2Jaa6aG0RuWGVht6kWlsjWEdQ6C/g68UW/Z5Azbq dDLBFHITgjeWS0JKYqY32T6rxT7NeCeQsp1Jsw9ItJKDsnH5BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMwQako4Eyy0C7XsFugaBtD8WgIeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZmMmFiZmMtNTk2ZC0z ZGFjLWJkOWUtODg1ZTE0ZTFjNDNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkcIW5VU4A6NurT1SyvaqMFdw2NzZHrXPZImbsAAYzZOB2P76J2+out 8Y4iWANqjDFhEEgOgFBZBCNh6ZuFT1qyn9b4n3UYi8InT1IUvu+muRZ0M255WpXX se5vgRwelhmwlWzHbKod4t5YbkCl1FJhSxgvqK55FXImZpKNtMu7C1Ibl6E3ChLs dTT2ZTa13gZujagA2ZZvhM/gm6+/1F6OZbCfj/qkZVQRCgtHGc0fiAHE2xItBpXi e5hfW3eWTy4cludf7a/1XWzGyWPiZ/ut2aav68sR0kXYq00DXrUpedllfxG0ZL2P MuW1GHudzQRQPzHlNhS4aj9gePkVpLk= -----END CERTIFICATE-----Generated at Fri Jul 25 23:59:58 2025 by rpki-client