$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa File: b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa (raw, json) Hash identifier: wK1okubyh6dihVXSqQnF+QJqUVHjKfneaOlw3PF5lD8= Subject key identifier: 7B:B8:6A:BA:18:3C:3C:E4:E2:EE:10:90:83:97:8B:3D:C8:92:82:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412037498F97A51ABF54A68 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:03:74:98:f9:7a:51:ab:f5:4a:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d59e5efd-2818-4db8-876d-325c33ac97ed Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:7f:fe:9d:38:85:84:7f:10:73:18:5a:f2:dc: 0a:a5:51:24:1d:9e:3a:3c:bc:46:26:d3:fa:3b:a7: ee:43:75:2c:ae:ea:c1:29:4b:5c:47:1e:92:25:36: 21:c8:f0:2d:d7:de:45:60:f9:8f:49:89:98:6b:08: 05:e6:f4:43:83:7d:1d:70:ea:ef:03:c1:d8:b6:d9: 02:f8:33:63:56:35:8d:ed:4d:c5:41:3e:62:37:bd: 47:39:f7:10:34:71:73:52:fd:13:df:8f:75:06:e9: 83:2f:72:06:9d:fb:33:76:33:32:45:cf:96:d2:5a: bb:d9:36:1c:d3:06:1b:0a:6b:e2:36:21:f8:f0:ed: 6b:d2:3b:a5:f0:6e:be:36:8a:07:f4:72:8d:60:53: 6e:49:32:cf:bf:aa:84:15:3d:04:f2:1c:70:48:74: 59:53:a9:85:e7:29:0d:66:d9:52:6e:0b:8f:95:ce: 2f:c5:4d:95:db:da:32:ab:48:be:6a:b8:bc:f7:da: 6c:c5:12:2c:54:4f:31:42:ff:9b:e0:86:a3:4a:a6: 7b:8f:51:fa:8e:c3:ad:1d:e0:48:7e:b4:f2:d2:e9: 37:5a:70:23:a4:83:6e:f3:89:09:21:3d:74:06:1a: b3:d9:54:58:7b:de:cb:39:1c:f4:77:c0:ac:4b:e0: e3:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B8:6A:BA:18:3C:3C:E4:E2:EE:10:90:83:97:8B:3D:C8:92:82:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:9a:de:3d:71:25:4d:2c:ae:32:05:2c:31:ce:cc:a1:25:15: 1d:2c:93:48:87:fb:c0:0b:ed:7e:9c:0a:52:af:7f:56:92:63: 72:f9:a9:45:73:e6:57:3d:ed:f2:a6:5c:75:b9:73:ed:ff:e5: 75:8b:17:1d:e6:61:8b:4f:27:24:bb:32:63:50:9f:2a:93:9f: 48:59:8e:5e:b6:28:28:c1:87:63:af:ae:bd:97:0a:c4:90:dc: 0f:c1:0e:ed:de:4d:fc:9a:6a:ef:c6:89:4d:79:9f:37:cb:89: 97:39:01:5a:4e:69:a9:f3:ca:6a:21:21:85:6c:5b:2c:74:a4: 6a:5f:77:65:05:fa:7e:d6:6d:bc:ff:67:8c:c9:51:c6:e6:a4: 38:0d:bb:61:b5:18:3c:86:70:54:20:7c:2c:3e:c7:ff:2f:5e: 71:47:e4:0b:f6:d3:a8:df:15:e3:08:dc:d2:37:ad:2c:a5:19: 8f:74:cb:43:d7:e7:4c:8a:1d:21:b3:5d:dc:70:41:c9:1a:43: 24:2f:85:e7:3f:2a:a7:1d:80:b8:88:ba:e2:5f:67:ed:14:f0: ee:35:2b:20:f5:9d:8c:79:2e:43:d7:63:a8:58:38:a7:31:79: 40:b7:29:0f:e1:0f:24:96:38:35:54:41:20:f6:8d:16:a8:27: 45:42:d1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgN0mPl6Uav1SmgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDU5ZTVlZmQtMjgxOC00ZGI4LTg3NmQtMzI1YzMzYWM5N2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4X/+nTiFhH8Qcxha8twKpVEkHZ46PLxGJtP6 O6fuQ3UsrurBKUtcRx6SJTYhyPAt195FYPmPSYmYawgF5vRDg30dcOrvA8HYttkC +DNjVjWN7U3FQT5iN71HOfcQNHFzUv0T3491BumDL3IGnfszdjMyRc+W0lq72TYc 0wYbCmviNiH48O1r0jul8G6+NooH9HKNYFNuSTLPv6qEFT0E8hxwSHRZU6mF5ykN ZtlSbguPlc4vxU2V29oyq0i+ari899psxRIsVE8xQv+b4IajSqZ7j1H6jsOtHeBI frTy0uk3WnAjpINu84kJIT10Bhqz2VRYe97LORz0d8CsS+DjuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHu4aroYPDzk4u4QkIOXiz3IkoIdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjM2ODVlMGQtNmE4NS0z NmQ0LWFhOWYtMTJiYjMwYWViYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADCa3j1xJU0srjIFLDHOzKElFR0sk0iH+8AL7X6cClKvf1aSY3L5qUVz 5lc97fKmXHW5c+3/5XWLFx3mYYtPJyS7MmNQnyqTn0hZjl62KCjBh2Ovrr2XCsSQ 3A/BDu3eTfyaau/GiU15nzfLiZc5AVpOaanzymohIYVsWyx0pGpfd2UF+n7Wbbz/ Z4zJUcbmpDgNu2G1GDyGcFQgfCw+x/8vXnFH5Av206jfFeMI3NI3rSylGY90y0PX 50yKHSGzXdxwQckaQyQvhec/KqcdgLiIuuJfZ+0U8O41KyD1nYx5LkPXY6hYOKcx eUC3KQ/hDySWODVUQSD2jRaoJ0VC0eI= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:54 2025 by rpki-client