$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa File: ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa (raw, json) Hash identifier: 3tAn3IhV6YBpprF2jk24b0UX2Oi2nD1bUgnMNzzk39M= Subject key identifier: 1B:B8:D8:55:04:2B:57:0F:2D:39:5C:C0:87:49:4C:DC:19:4A:2E:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114812147A3C440901F3A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:48:12:14:7a:3c:44:09:01:f3:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0c34683e-a725-4b83-97e4-45a1450b7416 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:32:bf:00:76:2a:94:53:17:ce:6b:d4:be:91: 64:93:c4:93:b7:78:ae:c0:80:aa:8e:7a:57:de:09: 67:b7:56:b5:85:66:54:ac:05:64:ec:8f:65:51:08: 51:e1:c5:9a:ea:6d:a4:ff:e7:b9:e7:8e:35:7e:75: 15:47:e5:99:19:38:94:9f:79:57:d3:50:99:0a:f5: c2:f8:7f:a5:84:84:d4:ca:53:48:e8:f9:92:ac:bc: 84:8d:2f:21:08:c5:7f:8d:57:cc:96:75:38:99:c3: 95:1b:a3:46:bd:ca:f0:a8:ab:d9:39:06:11:77:25: ae:8a:37:ac:ea:47:80:e8:54:28:98:e7:b9:41:24: 3b:e6:43:c3:42:61:d2:0a:b2:e1:a7:62:cd:53:07: 0b:06:4f:91:34:1e:4e:c1:2b:3a:72:c5:3d:12:10: 57:da:3a:b2:72:5e:7d:85:b1:90:b3:38:d0:cc:17: 0c:d4:aa:8f:cc:fd:b7:c6:0e:4e:d1:c2:ca:b5:74: 4e:43:8d:76:31:1e:ce:24:51:b1:95:fb:c3:ca:a2: db:4e:1a:28:a0:ef:e6:67:94:a2:af:a4:20:bc:dc: cb:4e:55:e6:70:5f:c1:ee:18:9d:1a:5c:fd:fa:19: a6:f9:1c:07:18:57:f4:61:a0:05:d1:3b:e4:6b:0c: 7f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B8:D8:55:04:2B:57:0F:2D:39:5C:C0:87:49:4C:DC:19:4A:2E:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac8ca38c-3a9b-3c9a-8a1e-cb9815196b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:ae:0a:13:13:86:62:6a:f7:f9:99:5b:4e:b9:c2:1f:6b:dd: f3:34:cf:e9:41:01:52:58:1c:97:00:04:95:75:e2:c2:55:3c: ca:d5:c5:50:fc:3c:62:b6:8c:3c:e7:25:5f:52:8a:2b:ce:a2: e6:7c:f9:91:19:55:20:63:1b:39:dc:9c:42:4f:1a:6b:75:91: 98:4c:c4:20:d9:86:ad:d4:87:bf:73:ac:45:c9:b3:54:6d:60: 12:22:f6:86:4b:a2:89:90:a7:b3:ca:47:e7:09:f4:1e:bb:e3: 53:d6:86:80:91:0f:76:ed:0d:43:1d:2c:97:7f:87:8e:a2:65: ba:dd:74:f3:dd:71:dc:89:df:ec:f1:9b:59:c2:b1:99:0f:b9: 0e:59:6e:33:b7:d9:6a:f8:35:13:2b:74:69:94:ac:2f:4e:18: 97:89:cb:da:99:25:6e:1e:c9:03:db:53:4e:fc:62:10:2d:e6: 36:e2:a5:a2:4c:c4:85:b0:11:76:f3:e4:46:f7:fb:2d:3f:35: ed:23:24:c4:4d:2e:3a:d0:c7:97:ad:f4:e5:8f:ed:27:d1:59: a0:8b:0f:33:38:5e:d8:d2:08:78:1f:c8:fb:0f:ee:b0:a4:33: 55:2a:50:50:9c:b7:82:29:5c:91:ce:d9:85:19:81:05:42:5f: bf:f6:b4:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUgSFHo8RAkB86AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGMzNDY4M2UtYTcyNS00YjgzLTk3ZTQtNDVhMTQ1MGI3NDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzK/AHYqlFMXzmvUvpFkk8STt3iuwICqjnpX 3glnt1a1hWZUrAVk7I9lUQhR4cWa6m2k/+e55441fnUVR+WZGTiUn3lX01CZCvXC +H+lhITUylNI6PmSrLyEjS8hCMV/jVfMlnU4mcOVG6NGvcrwqKvZOQYRdyWuijes 6keA6FQomOe5QSQ75kPDQmHSCrLhp2LNUwcLBk+RNB5OwSs6csU9EhBX2jqycl59 hbGQszjQzBcM1KqPzP23xg5O0cLKtXROQ412MR7OJFGxlfvDyqLbThoooO/mZ5Si r6QgvNzLTlXmcF/B7hidGlz9+hmm+RwHGFf0YaAF0Tvkawx/JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBu42FUEK1cPLTlcwIdJTNwZSi5eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWM4Y2EzOGMtM2E5Yi0z YzlhLThhMWUtY2I5ODE1MTk2YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKuChMThmJq9/mZW065wh9r3fM0z+lBAVJYHJcABJV14sJVPMrVxVD8 PGK2jDznJV9SiivOouZ8+ZEZVSBjGzncnEJPGmt1kZhMxCDZhq3Uh79zrEXJs1Rt YBIi9oZLoomQp7PKR+cJ9B6741PWhoCRD3btDUMdLJd/h46iZbrddPPdcdyJ3+zx m1nCsZkPuQ5ZbjO32Wr4NRMrdGmUrC9OGJeJy9qZJW4eyQPbU078YhAt5jbipaJM xIWwEXbz5Eb3+y0/Ne0jJMRNLjrQx5et9OWP7SfRWaCLDzM4XtjSCHgfyPsP7rCk M1UqUFCct4IpXJHO2YUZgQVCX7/2tI8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:11 2025 by rpki-client