$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa File: aa39a6ce-2914-30d6-8ada-a97f77613312.roa (raw, json) Hash identifier: FpzwuwS/+PywDNf/z+WOnHabzjctMHUlzfk4m7spos4= Subject key identifier: D6:85:C6:CA:FC:D5:E0:A2:03:F4:5E:5C:EE:A3:47:62:42:1B:02:34 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841141D0298A0D3A136F1048 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:41:d0:29:8a:0d:3a:13:6f:10:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=47a36469-98e3-4ce1-bd14-c12163b027bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:6d:59:38:be:06:d8:89:b5:cc:b1:e2:a8:c1: 34:6c:f2:d8:eb:25:08:c3:0d:49:88:d2:48:58:23: e2:85:77:9f:94:78:c0:0b:8c:c4:3c:86:07:f3:08: f5:af:78:db:e1:c0:3b:17:f2:e6:a2:dc:f7:35:97: e4:eb:58:54:6e:89:54:3c:a6:55:e4:14:e9:08:cc: bd:5d:4e:73:36:1f:1c:db:f0:a3:b3:54:4c:97:71: 40:9d:a5:29:64:b8:b5:1b:fe:79:d4:7f:63:34:84: be:d1:4f:04:b9:a0:18:b5:45:03:18:19:b5:bd:59: 5a:d7:ef:d9:5f:58:57:bb:85:12:c2:82:56:75:11: 17:67:91:b0:be:1c:db:cd:59:93:ec:74:f5:de:f7: db:d1:7c:48:df:85:ef:5e:1a:d2:61:0f:d9:f1:e1: 2b:38:0f:3e:b1:0f:a2:de:37:b0:d0:5c:37:db:ac: 2e:c2:9c:10:8b:51:da:6a:f3:87:92:3f:24:b2:07: 96:d2:ae:81:a2:6d:38:19:be:7b:02:0b:ed:14:1a: ba:31:3c:23:ad:5f:22:f6:ec:4b:df:8c:b3:de:e3: eb:8e:83:3c:a8:8c:8c:ad:83:49:e2:a3:1e:38:a8: 1e:a2:a5:4d:29:b0:d9:bf:37:8c:42:2d:3a:2c:2f: 71:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:85:C6:CA:FC:D5:E0:A2:03:F4:5E:5C:EE:A3:47:62:42:1B:02:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:37:c2:b0:f0:a9:83:26:50:44:b5:9e:dc:87:09:b2:25:e9: 50:00:e1:57:7c:f9:00:ff:ed:01:9d:20:40:8d:cf:61:a6:ed: 6d:e7:40:84:56:6b:01:e5:62:03:1c:b3:bd:c3:d2:14:19:03: 68:49:3a:19:7f:ae:b1:59:61:f3:26:33:e0:89:50:a0:5d:a7: 5c:d3:a9:51:aa:82:70:f1:79:e5:48:41:7d:57:1f:1a:19:76: a0:0f:62:6e:e6:e5:2f:9e:2b:2a:9a:1d:60:ef:74:42:af:d5: 18:52:6e:9e:e8:e4:51:cf:93:3f:61:05:a1:fb:a3:73:83:18: ae:d0:4e:fe:71:7b:46:c3:6a:3c:ae:25:b1:c7:4b:33:0a:af: 8f:ce:61:57:95:08:69:da:79:cd:8c:b1:83:3e:4c:a2:cc:62: 12:65:f8:ac:97:b3:36:3e:fe:ae:60:5c:ab:2c:f9:4e:0b:62: 2b:f9:d0:b8:06:c1:dd:fc:99:36:8c:32:9f:e1:31:3f:3b:df: 4a:01:90:2b:02:c4:91:72:c1:01:63:2d:31:a9:f2:38:81:44: 26:aa:e7:fa:3c:18:bf:6d:f7:0f:42:2b:da:3d:f6:16:55:b5: 3a:f0:78:bc:0e:62:44:08:b4:a8:4c:27:69:3e:81:5c:1e:f2: b7:6d:9b:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUHQKYoNOhNvEEgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NDdhMzY0NjktOThlMy00Y2UxLWJkMTQtYzEyMTYzYjAyN2JjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz21ZOL4G2Im1zLHiqME0bPLY6yUIww1JiNJI WCPihXeflHjAC4zEPIYH8wj1r3jb4cA7F/Lmotz3NZfk61hUbolUPKZV5BTpCMy9 XU5zNh8c2/Cjs1RMl3FAnaUpZLi1G/551H9jNIS+0U8EuaAYtUUDGBm1vVla1+/Z X1hXu4USwoJWdREXZ5GwvhzbzVmT7HT13vfb0XxI34XvXhrSYQ/Z8eErOA8+sQ+i 3jew0Fw326wuwpwQi1HaavOHkj8ksgeW0q6Bom04Gb57AgvtFBq6MTwjrV8i9uxL 34yz3uPrjoM8qIyMrYNJ4qMeOKgeoqVNKbDZvzeMQi06LC9x+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNaFxsr81eCiA/ReXO6jR2JCGwI0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWEzOWE2Y2UtMjkxNC0z MGQ2LThhZGEtYTk3Zjc3NjEzMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKM3wrDwqYMmUES1ntyHCbIl6VAA4Vd8+QD/7QGdIECNz2Gm7W3nQIRW awHlYgMcs73D0hQZA2hJOhl/rrFZYfMmM+CJUKBdp1zTqVGqgnDxeeVIQX1XHxoZ dqAPYm7m5S+eKyqaHWDvdEKv1RhSbp7o5FHPkz9hBaH7o3ODGK7QTv5xe0bDajyu JbHHSzMKr4/OYVeVCGnaec2MsYM+TKLMYhJl+KyXszY+/q5gXKss+U4LYiv50LgG wd38mTaMMp/hMT8730oBkCsCxJFywQFjLTGp8jiBRCaq5/o8GL9t9w9CK9o99hZV tTrweLwOYkQItKhMJ2k+gVwe8rdtm0E= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:46 2025 by rpki-client