$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add31e97-e69f-36aa-9d98-1b40932b98dc.roa File: add31e97-e69f-36aa-9d98-1b40932b98dc.roa (raw, json) Hash identifier: HpWPxuiB/qq2i0Y1oUaSr/aXTda7Jzbamef1RPQK+TY= Subject key identifier: EA:31:4C:86:B0:26:33:98:A1:D9:00:93:EC:70:DE:DB:B6:2F:1B:50 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841148650601A0BE5C715D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add31e97-e69f-36aa-9d98-1b40932b98dc.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:48:65:06:01:a0:be:5c:71:5d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f9ee5dc9-cbcf-4cbe-ad29-679481e4a344 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0f:de:b9:cf:c1:b4:06:e6:8f:56:c3:8f:5a: 53:f2:cc:bd:2a:1f:e6:14:3b:3d:15:40:15:93:c2: a7:e5:02:b9:20:62:f6:88:ee:09:5b:7b:3e:c3:45: a0:54:10:9f:66:ef:cc:80:99:4d:a4:cf:5a:c7:f7: 2d:96:72:16:41:40:be:48:c2:78:da:be:d0:94:7b: 41:dd:b4:8e:a1:2b:40:6b:c3:bf:ab:16:5f:29:5e: f8:95:d0:95:5e:bd:53:52:52:a1:ce:e8:dd:31:32: 55:ad:1b:85:62:60:ba:e1:25:ae:0e:68:d3:7d:4e: 9f:60:e1:93:80:51:34:6f:20:53:ae:e0:96:9f:8c: d2:b0:b9:95:50:7f:13:46:ab:69:b2:a2:44:a9:49: ea:ef:f5:ce:c0:66:d6:4f:f5:df:14:7a:73:c9:e6: 38:ab:d5:94:c7:85:41:7c:63:cd:e0:47:6c:4a:3b: 80:c2:0a:ab:38:72:97:b4:ca:6d:7a:c6:f6:47:80: e6:07:69:74:1e:4a:9a:56:94:0c:ea:21:8a:58:95: be:be:52:71:fa:4e:8e:1c:24:67:4e:ae:b5:e0:ad: 94:f1:7e:de:69:39:77:95:2d:6f:43:a5:c9:b2:dd: de:12:e5:49:ca:9a:a8:72:73:1a:29:73:89:e3:21: d2:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:31:4C:86:B0:26:33:98:A1:D9:00:93:EC:70:DE:DB:B6:2F:1B:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/add31e97-e69f-36aa-9d98-1b40932b98dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:de:93:68:eb:b6:df:ba:23:27:4c:07:ea:52:52:c4:26:a9: db:ad:05:be:ad:37:97:f6:de:3d:f2:62:f9:80:75:21:a8:02: 55:56:73:b6:68:59:95:ae:0f:b4:70:66:67:54:4b:fc:94:f4: 2a:d9:63:9d:23:b7:63:e6:c9:f7:1c:e5:e9:30:41:ef:df:8f: a0:30:b4:e3:c7:30:8e:99:28:5b:1b:d8:39:f0:c2:09:ef:03: 02:b5:0c:7b:42:78:23:f6:2e:f3:54:ec:ce:0f:3a:c7:83:bd: 6e:78:7e:6f:53:3e:84:b9:a5:08:c6:2b:bb:f6:8c:6f:ce:a1: 50:9f:83:72:7b:78:0a:ed:e4:a9:fe:61:6b:62:18:50:ed:87: 94:8c:56:a7:4d:83:a3:47:b1:b2:fe:e9:99:46:35:8e:1e:58: 98:b0:1d:32:63:02:39:dc:86:90:cf:3f:0c:40:d9:37:5a:69: b4:45:3d:34:11:ec:4b:20:ef:22:a3:12:85:e4:5d:e9:f3:bf: 94:9d:4c:00:7d:4f:8d:e7:0b:ec:da:38:84:53:5d:67:8f:03: eb:7b:0a:0c:87:ce:7d:5f:fb:66:c0:02:4c:f9:2e:fa:4c:df: 56:81:92:61:0d:d4:63:47:8d:cc:ee:5a:00:1c:04:a8:f3:31: 12:39:d8:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUhlBgGgvlxxXYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjllZTVkYzktY2JjZi00Y2JlLWFkMjktNjc5NDgxZTRhMzQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1g/euc/BtAbmj1bDj1pT8sy9Kh/mFDs9FUAV k8Kn5QK5IGL2iO4JW3s+w0WgVBCfZu/MgJlNpM9ax/ctlnIWQUC+SMJ42r7QlHtB 3bSOoStAa8O/qxZfKV74ldCVXr1TUlKhzujdMTJVrRuFYmC64SWuDmjTfU6fYOGT gFE0byBTruCWn4zSsLmVUH8TRqtpsqJEqUnq7/XOwGbWT/XfFHpzyeY4q9WUx4VB fGPN4EdsSjuAwgqrOHKXtMptesb2R4DmB2l0HkqaVpQM6iGKWJW+vlJx+k6OHCRn Tq614K2U8X7eaTl3lS1vQ6XJst3eEuVJypqocnMaKXOJ4yHSEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOoxTIawJjOYodkAk+xw3tu2LxtQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWRkMzFlOTctZTY5Zi0z NmFhLTlkOTgtMWI0MDkzMmI5OGRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHek2jrtt+6IydMB+pSUsQmqdutBb6tN5f23j3yYvmAdSGoAlVWc7Zo WZWuD7RwZmdUS/yU9CrZY50jt2Pmyfcc5ekwQe/fj6AwtOPHMI6ZKFsb2Dnwwgnv AwK1DHtCeCP2LvNU7M4POseDvW54fm9TPoS5pQjGK7v2jG/OoVCfg3J7eArt5Kn+ YWtiGFDth5SMVqdNg6NHsbL+6ZlGNY4eWJiwHTJjAjnchpDPPwxA2TdaabRFPTQR 7Esg7yKjEoXkXenzv5SdTAB9T43nC+zaOIRTXWePA+t7CgyHzn1f+2bAAkz5LvpM 31aBkmEN1GNHjczuWgAcBKjzMRI52PE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:35 2025 by rpki-client