$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa File: a89153c0-f3fb-31ad-8258-df6163370df5.roa (raw, json) Hash identifier: SKA1t57TCMOKcNaHW8fbyYWFYuEg7egVXQH1VrAoiqY= Subject key identifier: 22:12:D0:83:B6:FC:B3:6D:79:5D:08:A4:A5:DD:D5:10:17:30:F9:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411438E546C3D5C02F2AE40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:43:8e:54:6c:3d:5c:02:f2:ae:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6c34cc41-a2a4-4552-97e4-25b0168eee76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:5f:61:14:48:8b:c2:74:22:7a:4f:94:e6: e1:e2:da:ef:32:dc:27:e6:a6:19:0c:48:72:7b:34: 26:37:5c:da:42:ed:2e:c8:9a:1b:c1:27:20:51:18: 1e:a2:a6:41:f6:c2:01:88:a3:a1:8f:b3:81:7a:58: 45:e3:42:a0:7d:27:9e:05:bc:a8:11:e3:00:43:1a: 61:d2:94:a3:40:44:db:ac:42:45:d6:24:7b:97:02: 9a:4c:67:d1:c7:63:82:31:b4:cb:a0:26:e7:b2:4f: d0:57:6e:76:67:4b:79:01:30:d1:fa:fb:1f:62:c1: f7:8d:ad:80:0a:bd:3c:6e:e4:1d:ff:4a:70:7a:62: c3:93:06:29:45:cf:13:3a:f0:48:67:9a:c6:11:01: ea:bf:16:64:ea:1e:3e:22:2c:e3:63:52:0e:0c:03: 32:e5:16:96:46:24:f3:35:fc:4a:bd:94:a0:40:f8: 19:13:af:27:d5:70:2c:25:24:d3:ab:2d:ff:9e:21: 25:36:e7:b3:17:be:f6:4d:93:6b:79:7d:18:24:6f: ab:30:52:1d:96:1c:cf:2a:53:2f:f4:c5:2d:e5:67: 19:8d:73:99:a0:bd:12:61:f7:85:eb:bd:1a:a9:22: 2c:ff:10:9c:d7:10:58:86:12:7c:49:0e:13:21:14: 88:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:12:D0:83:B6:FC:B3:6D:79:5D:08:A4:A5:DD:D5:10:17:30:F9:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a89153c0-f3fb-31ad-8258-df6163370df5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:f6:69:05:26:df:55:4a:b9:c8:b6:84:8b:86:3d:19:df:0e: ec:00:fb:75:f8:a8:33:90:65:6a:e3:f4:f6:d7:a5:a1:c3:64: 94:22:7a:8a:de:16:e1:d2:a0:5d:7b:78:f7:2f:71:df:7c:d4: 30:e8:93:71:98:10:2f:33:e8:4f:1d:c2:93:71:c2:45:a8:e4: fa:b7:f4:3e:11:6d:39:b1:4d:67:ec:a1:8a:c3:03:60:ed:bc: 7d:49:69:af:3e:6e:d8:b8:ae:41:37:49:c4:57:33:40:e3:31: c7:d8:58:1b:23:44:db:70:ce:06:4d:14:81:6f:c2:47:21:ff: 58:01:a6:b3:f5:99:66:79:93:cf:a0:18:50:b7:85:eb:33:0b: 86:7a:22:1b:8a:56:6b:fa:90:e3:80:6b:70:48:74:8c:3d:29: 31:3e:67:72:4e:58:ba:18:39:ef:64:26:03:14:51:fe:94:e5: a8:0d:3e:33:75:e9:2a:96:9c:50:94:dc:53:ed:a0:00:d4:50: 5a:51:80:57:b3:70:87:80:95:6f:32:af:65:fc:87:88:3e:eb: b9:ee:69:c3:79:a1:0d:15:e7:9a:48:2f:1b:5c:13:80:82:4f: 72:bf:d4:68:bc:53:e5:fc:93:b3:63:42:67:00:3f:cb:b6:a7: 75:63:63:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUOOVGw9XALyrkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmMzNGNjNDEtYTJhNC00NTUyLTk3ZTQtMjViMDE2OGVlZTc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9NfYRRIi8J0InpPlObh4trvMtwn5qYZDEhy ezQmN1zaQu0uyJobwScgURgeoqZB9sIBiKOhj7OBelhF40KgfSeeBbyoEeMAQxph 0pSjQETbrEJF1iR7lwKaTGfRx2OCMbTLoCbnsk/QV252Z0t5ATDR+vsfYsH3ja2A Cr08buQd/0pwemLDkwYpRc8TOvBIZ5rGEQHqvxZk6h4+IizjY1IODAMy5RaWRiTz NfxKvZSgQPgZE68n1XAsJSTTqy3/niElNuezF772TZNreX0YJG+rMFIdlhzPKlMv 9MUt5WcZjXOZoL0SYfeF670aqSIs/xCc1xBYhhJ8SQ4TIRSIlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIS0IO2/LNteV0IpKXd1RAXMPnIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTg5MTUzYzAtZjNmYi0z MWFkLTgyNTgtZGY2MTYzMzcwZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC/2aQUm31VKuci2hIuGPRnfDuwA+3X4qDOQZWrj9PbXpaHDZJQieore FuHSoF17ePcvcd981DDok3GYEC8z6E8dwpNxwkWo5Pq39D4RbTmxTWfsoYrDA2Dt vH1Jaa8+bti4rkE3ScRXM0DjMcfYWBsjRNtwzgZNFIFvwkch/1gBprP1mWZ5k8+g GFC3heszC4Z6IhuKVmv6kOOAa3BIdIw9KTE+Z3JOWLoYOe9kJgMUUf6U5agNPjN1 6SqWnFCU3FPtoADUUFpRgFezcIeAlW8yr2X8h4g+67nuacN5oQ0V55pILxtcE4CC T3K/1Gi8U+X8k7NjQmcAP8u2p3VjY3g= -----END CERTIFICATE-----Generated at Sat Jul 26 00:04:00 2025 by rpki-client