$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa File: b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa (raw, json) Hash identifier: QwvssJKc8eO4OVE7IJ4mYEUqvXUfQSZcPQFGah6hbEg= Subject key identifier: B6:1D:FB:27:E2:F0:F5:F8:57:92:E8:BB:65:CB:54:B0:42:73:3C:A0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841205076A0EAA08DF5FA580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.230.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:05:07:6a:0e:aa:08:df:5f:a5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f0802a3b-65d7-438e-a56e-a5a1d3f78478 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:14:66:7f:5f:13:b9:9f:f7:72:60:37:70:4b: 2f:7a:f5:b2:b3:62:d3:fb:2e:27:b2:9e:85:92:f3: e0:d0:3a:94:11:b9:af:d0:8a:f2:77:88:8d:6f:05: 31:ed:77:b0:56:fd:b9:02:55:09:83:2b:c4:c8:d6: 44:ec:8f:0f:c8:20:0e:a4:e1:9c:20:e6:03:50:4e: a4:b5:4a:3c:1e:22:36:1b:a9:f3:76:bd:fc:13:aa: 35:0e:b7:df:c4:af:1b:11:a1:82:52:b8:67:26:43: 0b:14:a0:5f:b0:4f:0f:75:1c:96:07:e0:6e:2b:f3: 9e:63:aa:3d:3d:8d:21:76:bd:44:af:cc:f7:dc:88: 37:2a:0d:17:b5:eb:63:2d:c1:57:d4:d5:ad:89:62: 65:81:65:3a:a6:19:3f:6f:61:e5:a9:14:8e:93:30: b5:3c:1b:63:21:4c:f0:5a:19:ee:d8:01:cc:1b:c5: bc:26:f4:cc:b2:f5:e9:c9:80:d1:cd:e1:bd:08:67: 22:d3:39:10:bd:e0:cd:7f:be:24:70:05:f0:4b:47: 8f:a8:4c:75:97:66:25:c4:ef:15:4c:79:fa:bf:a6: e7:94:21:b0:e9:98:50:4d:5c:6c:1d:cd:ba:87:97: 35:db:18:8b:95:a8:e2:5e:14:09:56:85:62:f2:8c: b7:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:1D:FB:27:E2:F0:F5:F8:57:92:E8:BB:65:CB:54:B0:42:73:3C:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a439b0-ed29-3a93-b403-8f5d0106f0b6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.230.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:48:87:79:1c:35:6c:83:60:c2:e2:30:cb:95:22:7a:20:6d: bd:60:33:f8:28:74:e5:12:78:fd:d7:35:a4:eb:c4:c9:05:c3: 3d:fb:07:d9:46:da:27:6f:24:76:e5:1e:1f:4f:5a:60:28:e7: 6a:58:43:8b:20:5a:47:31:dd:76:f3:f7:d0:65:86:d5:e4:f8: 42:b8:66:7c:b2:64:d0:77:99:60:fb:ca:fb:e5:0a:6b:30:75: 25:40:17:3b:3a:56:f8:84:0f:df:e7:fc:63:a9:98:8f:0f:69: a4:d8:e6:78:83:fb:ba:cf:83:a0:ab:67:bd:84:17:2c:6a:46: 79:7a:cf:94:95:48:55:76:50:54:ba:0b:e9:2b:91:06:6d:14: f4:0f:94:8d:76:b0:83:7c:4f:f3:36:0f:17:70:b2:95:32:86: 46:7f:5f:a0:17:eb:10:99:91:bd:6e:59:5c:b3:16:50:3d:f4: 71:ae:27:59:45:ce:31:64:9f:d5:17:04:9f:74:25:c4:2c:8e: 41:8c:8c:f1:49:2c:36:e4:66:bc:c2:69:5e:b0:56:64:09:76: 0d:ee:60:0d:8f:8e:b2:9c:94:48:6a:f3:15:3a:43:a3:c1:c5: 78:fc:39:a6:9c:f3:1e:38:b0:ce:12:90:d5:87:34:d0:b4:77: 29:34:ec:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgUHag6qCN9fpYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjA4MDJhM2ItNjVkNy00MzhlLWE1NmUtYTVhMWQzZjc4NDc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhRmf18TuZ/3cmA3cEsvevWys2LT+y4nsp6F kvPg0DqUEbmv0Iryd4iNbwUx7XewVv25AlUJgyvEyNZE7I8PyCAOpOGcIOYDUE6k tUo8HiI2G6nzdr38E6o1DrffxK8bEaGCUrhnJkMLFKBfsE8PdRyWB+BuK/OeY6o9 PY0hdr1Er8z33Ig3Kg0XtetjLcFX1NWtiWJlgWU6phk/b2HlqRSOkzC1PBtjIUzw Whnu2AHMG8W8JvTMsvXpyYDRzeG9CGci0zkQveDNf74kcAXwS0ePqEx1l2YlxO8V THn6v6bnlCGw6ZhQTVxsHc26h5c12xiLlajiXhQJVoVi8oy3JQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYd+yfi8PX4V5Lou2XLVLBCczygMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdhNDM5YjAtZWQyOS0z YTkzLWI0MDMtOGY1ZDAxMDZmMGI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxIh3kcNWyDYMLiMMuVInogbb1gM/godOUSeP3XNaTrxMkFwz37B9lG 2idvJHblHh9PWmAo52pYQ4sgWkcx3Xbz99BlhtXk+EK4ZnyyZNB3mWD7yvvlCmsw dSVAFzs6VviED9/n/GOpmI8PaaTY5niD+7rPg6CrZ72EFyxqRnl6z5SVSFV2UFS6 C+krkQZtFPQPlI12sIN8T/M2DxdwspUyhkZ/X6AX6xCZkb1uWVyzFlA99HGuJ1lF zjFkn9UXBJ90JcQsjkGMjPFJLDbkZrzCaV6wVmQJdg3uYA2PjrKclEhq8xU6Q6PB xXj8Oaac8x44sM4SkNWHNNC0dyk07GY= -----END CERTIFICATE-----Generated at Sat Jul 26 11:41:17 2025 by rpki-client