$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa File: ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa (raw, json) Hash identifier: pcWeaHWerqmzjQ8J1hN9sBu7i37kn0UycIq6T9zXPhE= Subject key identifier: 76:5E:4D:10:5F:45:F4:FC:BF:5E:85:A6:9C:84:56:D6:31:DE:EC:72 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114B545E61EF4EF807B6F0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4b:54:5e:61:ef:4e:f8:07:b6:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=84634f05-e8b0-453b-a415-b3f11486ae3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:38:98:99:6e:cf:1f:17:f8:2a:05:97:66:92: 43:2a:4b:dc:08:97:8c:36:96:4c:6b:0d:95:49:3f: df:d3:11:7f:3e:76:ae:65:05:0e:46:fb:89:b3:66: af:c3:48:e8:2f:85:99:c3:69:c0:86:a3:5b:ea:7a: e0:26:6b:c5:24:06:1e:c8:7f:38:dc:a4:fe:66:85: 56:75:80:e0:f4:6a:d4:ac:40:82:ea:26:cc:87:13: 5f:59:c3:29:35:42:70:10:7b:b1:c1:5a:29:e5:99: 6e:38:51:ad:d1:e3:ec:5a:e4:42:5b:02:35:ce:69: 69:df:72:85:28:05:7b:e5:5e:48:d7:bd:74:4a:e3: fd:ef:cf:46:67:9e:8c:07:eb:31:f0:f9:4f:1e:22: de:bf:09:47:b0:4d:e2:f5:b3:a4:62:7f:88:b1:98: 9a:59:a9:0f:89:e7:93:52:b8:f7:7a:4a:01:bf:4c: 7b:e0:f2:f5:8f:9f:7f:fd:30:e6:06:30:31:65:bd: 9b:e0:bc:36:9d:65:92:0e:d2:a5:e4:4d:e6:e6:20: 75:b2:cc:9b:0f:77:6e:7c:c0:4d:9c:3e:99:2b:3f: 9f:dc:20:76:4f:e6:48:eb:e1:66:7f:cf:20:8c:00: b7:5d:0d:73:a7:18:6b:2e:b9:32:7b:21:b5:29:44: a0:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:5E:4D:10:5F:45:F4:FC:BF:5E:85:A6:9C:84:56:D6:31:DE:EC:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae1fcc51-c945-3a91-827e-f1f471d8ffd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ae:1e:59:41:93:c5:14:e4:30:0a:dc:08:7d:d3:94:b1:4d: 4e:30:52:1b:71:d4:fa:6c:a1:33:eb:fb:66:c3:7e:0d:24:d9: e4:bf:3a:ef:e0:2d:b6:e5:a7:90:45:a6:9d:a3:f0:08:1e:c1: 36:fa:f4:c8:64:1a:df:1d:e5:81:ad:f5:ff:62:3f:eb:db:de: 29:00:06:87:fe:cd:8e:ff:a4:4e:59:1d:46:16:6e:b7:4a:9b: 66:37:25:79:f2:5e:d2:56:90:cd:8a:65:a8:91:83:fb:f7:d1: 37:f7:84:53:5d:46:f0:15:b3:22:00:46:9e:84:59:a1:3a:04: d4:6e:ca:07:e3:04:3e:e9:52:47:33:96:d9:79:ef:f3:2e:12: 3b:49:6e:0c:6a:1f:6c:eb:03:ec:1a:2b:07:71:8c:d9:f8:fa: 87:ce:54:22:8b:bb:97:8a:65:9d:72:5a:5a:e4:7c:03:57:d3: ed:0a:e8:c8:44:a4:2c:3c:25:71:14:11:4c:d3:83:96:b6:76: 81:e9:7d:eb:b5:e0:a6:de:c8:99:02:12:7a:e7:d6:a5:49:48: 32:f9:e8:28:75:9c:e0:7a:3d:8d:d8:f5:6a:80:40:11:56:96: c3:fe:4a:5e:45:4b:15:96:5c:27:05:14:75:53:f4:49:9c:54: 57:62:b7:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUtUXmHvTvgHtvAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODQ2MzRmMDUtZThiMC00NTNiLWE0MTUtYjNmMTE0ODZhZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiTiYmW7PHxf4KgWXZpJDKkvcCJeMNpZMaw2V ST/f0xF/PnauZQUORvuJs2avw0joL4WZw2nAhqNb6nrgJmvFJAYeyH843KT+ZoVW dYDg9GrUrECC6ibMhxNfWcMpNUJwEHuxwVop5ZluOFGt0ePsWuRCWwI1zmlp33KF KAV75V5I1710SuP9789GZ56MB+sx8PlPHiLevwlHsE3i9bOkYn+IsZiaWakPieeT Urj3ekoBv0x74PL1j59//TDmBjAxZb2b4Lw2nWWSDtKl5E3m5iB1ssybD3dufMBN nD6ZKz+f3CB2T+ZI6+Fmf88gjAC3XQ1zpxhrLrkyeyG1KUSgOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHZeTRBfRfT8v16FppyEVtYx3uxyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWUxZmNjNTEtYzk0NS0z YTkxLTgyN2UtZjFmNDcxZDhmZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyuHllBk8UU5DAK3Ah905SxTU4wUhtx1PpsoTPr+2bDfg0k2eS/Ou/g Lbblp5BFpp2j8AgewTb69MhkGt8d5YGt9f9iP+vb3ikABof+zY7/pE5ZHUYWbrdK m2Y3JXnyXtJWkM2KZaiRg/v30Tf3hFNdRvAVsyIARp6EWaE6BNRuygfjBD7pUkcz ltl57/MuEjtJbgxqH2zrA+waKwdxjNn4+ofOVCKLu5eKZZ1yWlrkfANX0+0K6MhE pCw8JXEUEUzTg5a2doHpfeu14KbeyJkCEnrn1qVJSDL56Ch1nOB6PY3Y9WqAQBFW lsP+Sl5FSxWWXCcFFHVT9EmcVFditzs= -----END CERTIFICATE-----Generated at Sat Jul 26 11:32:17 2025 by rpki-client