$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa File: aa91c442-72a9-312f-ad60-6db30d5d9223.roa (raw, json) Hash identifier: tpoZq1KeJJU9bqE69NobDgAXDyRfa1m9RZtWIhEKYCQ= Subject key identifier: FF:2E:92:44:27:EA:BF:47:E7:3D:F0:15:30:7A:65:9F:0B:88:EC:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114509D11A618F61DF0D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:45:09:d1:1a:61:8f:61:df:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7a503eb4-c0fa-4c7f-898f-a655d4ac5a92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:f8:f1:41:6e:91:e2:a3:80:84:a2:94:8b: 09:ae:4c:e6:35:ae:06:87:0a:dc:84:3e:df:48:02: ff:29:4e:ab:b0:bd:1a:e6:8a:33:1e:11:6a:85:c5: dd:98:15:c4:ee:76:06:54:5e:55:9b:8e:44:3f:81: 7d:2d:48:c4:18:9a:44:28:42:ae:89:4d:7c:fd:87: 72:a9:0b:d3:53:4d:f0:9b:d3:19:54:32:e0:19:2d: 1b:01:49:00:31:8b:2c:c7:c9:4c:43:0d:02:c8:2c: 9e:20:d3:75:3a:71:c9:14:91:44:35:6e:3c:d2:31: 0b:81:08:e5:dd:fc:e1:d9:58:de:96:95:a7:84:53: 9f:a1:c3:97:cc:ee:53:d8:b4:f7:15:98:65:39:6b: 4c:59:7f:ca:cc:b0:c0:88:bf:23:d8:93:ca:d2:e6: 0c:2c:74:dd:cb:f7:9d:7b:90:01:8e:55:97:74:d1: a3:9f:44:f6:79:47:3f:05:1f:9d:8e:8e:88:13:50: 5b:7f:8d:c9:1c:c1:48:0f:4a:0f:bf:44:d1:d7:26: e0:7d:dc:d1:6a:62:9a:81:7a:41:97:3b:64:65:4c: 54:72:e3:97:fa:18:d9:ba:90:73:70:a4:61:71:96: 0b:7c:45:ee:c9:7a:72:17:d5:23:e2:1c:14:ce:f7: e0:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2E:92:44:27:EA:BF:47:E7:3D:F0:15:30:7A:65:9F:0B:88:EC:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa91c442-72a9-312f-ad60-6db30d5d9223.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:43:42:d0:b5:06:97:56:50:43:00:df:d9:ae:3a:e8:f1:75: 33:b8:77:50:ce:00:86:7f:e4:66:9d:ed:ff:6d:33:7a:80:1c: f9:55:6e:ea:2c:ff:5d:6e:a4:a0:b8:06:ce:2a:81:41:de:6d: e6:28:0b:48:01:42:7d:4c:2b:0c:bd:ab:b5:b5:9d:fd:3a:bd: 54:8a:f3:86:f7:39:11:01:01:45:bf:4f:22:a6:cf:b6:97:5b: f3:4f:8e:7d:9c:1c:3b:ba:71:22:be:eb:e5:64:f5:20:ca:5f: 5d:49:51:6e:db:23:ab:d3:cc:58:f0:2b:d8:08:ad:b7:57:86: a6:d1:89:40:96:e6:cc:a0:e0:1d:bb:d5:94:11:68:ad:17:8e: 99:9d:92:04:1a:cd:1b:3c:55:96:ea:c9:52:33:c2:dc:56:60: b9:cf:1f:e7:50:f7:fb:2e:e1:f3:12:65:d0:9e:ca:47:84:27: 4c:76:09:47:7b:7a:63:5b:f5:53:01:0e:fe:d4:68:72:2b:a5: af:c9:77:b2:45:93:8f:6b:58:62:58:8c:8e:7b:75:5c:9d:58: 19:1f:ce:e8:08:a7:37:41:1a:38:8f:89:4e:46:27:ad:e0:a7: e7:5b:aa:72:8b:03:3d:34:8f:8d:bc:96:f8:d2:cc:8b:8b:e3: d7:c3:c7:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUUJ0Rphj2HfDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk N2E1MDNlYjQtYzBmYS00YzdmLTg5OGYtYTY1NWQ0YWM1YTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9748UFukeKjgISilIsJrkzmNa4GhwrchD7f SAL/KU6rsL0a5oozHhFqhcXdmBXE7nYGVF5Vm45EP4F9LUjEGJpEKEKuiU18/Ydy qQvTU03wm9MZVDLgGS0bAUkAMYssx8lMQw0CyCyeINN1OnHJFJFENW480jELgQjl 3fzh2VjelpWnhFOfocOXzO5T2LT3FZhlOWtMWX/KzLDAiL8j2JPK0uYMLHTdy/ed e5ABjlWXdNGjn0T2eUc/BR+djo6IE1Bbf43JHMFID0oPv0TR1ybgfdzRamKagXpB lztkZUxUcuOX+hjZupBzcKRhcZYLfEXuyXpyF9Uj4hwUzvfgLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8ukkQn6r9H5z3wFTB6ZZ8LiOyZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWE5MWM0NDItNzJhOS0z MTJmLWFkNjAtNmRiMzBkNWQ5MjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFDQtC1BpdWUEMA39muOujxdTO4d1DOAIZ/5Gad7f9tM3qAHPlVbuos /11upKC4Bs4qgUHebeYoC0gBQn1MKwy9q7W1nf06vVSK84b3OREBAUW/TyKmz7aX W/NPjn2cHDu6cSK+6+Vk9SDKX11JUW7bI6vTzFjwK9gIrbdXhqbRiUCW5syg4B27 1ZQRaK0XjpmdkgQazRs8VZbqyVIzwtxWYLnPH+dQ9/su4fMSZdCeykeEJ0x2CUd7 emNb9VMBDv7UaHIrpa/Jd7JFk49rWGJYjI57dVydWBkfzugIpzdBGjiPiU5GJ63g p+dbqnKLAz00j428lvjSzIuL49fDx5E= -----END CERTIFICATE-----Generated at Sat Jul 26 00:06:50 2025 by rpki-client