$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b64c4cce-0873-3d84-9626-d6081975cd31.roa File: b64c4cce-0873-3d84-9626-d6081975cd31.roa (raw, json) Hash identifier: vwneT9N828AT/bECzqr2mVSR/38HG86MRv7tfVaoDfM= Subject key identifier: 41:07:40:9D:A3:AF:4C:3A:9E:A5:D8:28:61:94:C5:69:FC:D2:2B:52 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841201EB956D0DEB79F25E00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b64c4cce-0873-3d84-9626-d6081975cd31.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:01:eb:95:6d:0d:eb:79:f2:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5425a85d-b34e-41e0-a548-f280e0c28359 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c0:1a:d6:d5:31:1b:5d:36:90:9d:73:8d:ce: aa:5c:44:b5:16:72:b7:32:a2:db:b8:2f:10:c0:23: f2:a3:70:28:a7:c2:d3:1b:2e:ad:97:37:b7:ab:cd: c2:e1:af:c4:2b:25:a0:9d:1a:78:cc:c6:c8:dc:99: 6a:5c:8c:8e:1e:49:c2:61:51:fc:19:0f:85:2e:7f: c7:f5:fb:1d:30:e3:77:32:a9:36:87:aa:12:4a:24: b1:84:7f:9d:ac:85:13:df:78:59:c7:8c:57:16:01: eb:2c:e9:ca:10:5c:76:0e:33:8e:04:2b:d6:56:5f: 69:52:ae:cf:29:bb:a6:10:70:0a:7a:89:2f:53:29: 64:11:64:24:02:e1:78:1b:f1:b4:87:80:00:d3:78: 7c:5f:a6:3d:52:e8:05:e0:5d:bb:4d:bf:f7:d9:47: 17:f4:e8:0a:b7:0f:01:25:11:88:89:2d:7d:60:1c: e0:98:8a:df:7a:44:e5:27:96:42:54:15:ae:5f:a1: a3:33:d2:cc:a8:d3:d4:cc:c0:aa:eb:27:bd:d7:9b: 98:c6:0b:eb:ac:9a:b2:2b:7d:9f:e0:92:08:5e:8d: 55:60:ce:c2:a4:07:23:87:08:2e:c0:31:1b:fb:6a: 7f:2d:d6:cd:ba:c7:2f:46:c5:f2:3e:fe:1c:95:c6: ab:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:07:40:9D:A3:AF:4C:3A:9E:A5:D8:28:61:94:C5:69:FC:D2:2B:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b64c4cce-0873-3d84-9626-d6081975cd31.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2f:7d:89:c0:0a:e6:42:7c:40:53:2f:64:47:b7:d5:7b:c8:4c: 27:1b:9d:d3:f2:a5:05:ef:49:7c:df:80:af:6b:a4:e5:8a:31: 1a:18:a5:6c:fc:e4:86:8a:1c:0e:fe:96:ff:1f:f2:e5:bf:78: 7a:4e:db:50:78:ff:cd:8c:d9:fc:62:9d:19:bc:40:53:49:f8: 03:ff:e3:28:85:09:9e:ed:6b:16:2c:c0:99:d4:0e:57:bf:ea: 16:9e:c4:46:bb:85:0c:ea:7e:35:61:8d:cb:4c:e7:93:6b:6f: 61:9b:95:d3:76:d9:3f:39:e9:2b:08:57:d3:c4:84:50:ea:e4: 19:ff:52:4e:46:be:df:ab:d5:02:10:b1:86:62:79:10:1c:04: 70:e5:e8:ff:6d:41:5c:50:3d:00:96:6d:f4:6e:15:e6:b6:63: c3:d9:ff:86:08:85:b8:02:b7:44:dc:81:18:77:58:6e:0d:5d: 65:1c:93:b8:2d:55:a5:b5:30:b8:c8:47:74:e8:f9:68:bb:2d: 89:25:c0:31:3b:30:c4:ca:1d:3c:8b:88:21:c2:1e:58:c8:f3: a2:9f:32:a5:a5:9e:1f:90:46:31:a0:13:74:14:1d:38:86:ae: 61:f5:65:4e:81:0b:68:79:8b:36:97:79:85:a3:54:21:ab:5a: 01:52:4a:80 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgHrlW0N63nyXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTQyNWE4NWQtYjM0ZS00MWUwLWE1NDgtZjI4MGUwYzI4MzU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsAa1tUxG102kJ1zjc6qXES1FnK3MqLbuC8Q wCPyo3Aop8LTGy6tlze3q83C4a/EKyWgnRp4zMbI3JlqXIyOHknCYVH8GQ+FLn/H 9fsdMON3Mqk2h6oSSiSxhH+drIUT33hZx4xXFgHrLOnKEFx2DjOOBCvWVl9pUq7P KbumEHAKeokvUylkEWQkAuF4G/G0h4AA03h8X6Y9UugF4F27Tb/32UcX9OgKtw8B JRGIiS19YBzgmIrfekTlJ5ZCVBWuX6GjM9LMqNPUzMCq6ye915uYxgvrrJqyK32f 4JIIXo1VYM7CpAcjhwguwDEb+2p/LdbNuscvRsXyPv4clcar7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEHQJ2jr0w6nqXYKGGUxWn80itSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjY0YzRjY2UtMDg3My0z ZDg0LTk2MjYtZDYwODE5NzVjZDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC99icAK5kJ8QFMvZEe31XvITCcbndPypQXvSXzfgK9rpOWKMRoYpWz8 5IaKHA7+lv8f8uW/eHpO21B4/82M2fxinRm8QFNJ+AP/4yiFCZ7taxYswJnUDle/ 6haexEa7hQzqfjVhjctM55Nrb2GbldN22T856SsIV9PEhFDq5Bn/Uk5Gvt+r1QIQ sYZieRAcBHDl6P9tQVxQPQCWbfRuFea2Y8PZ/4YIhbgCt0TcgRh3WG4NXWUck7gt VaW1MLjIR3To+Wi7LYklwDE7MMTKHTyLiCHCHljI86KfMqWlnh+QRjGgE3QUHTiG rmH1ZU6BC2h5izaXeYWjVCGrWgFSSoA= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:23 2025 by rpki-client