$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa File: b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa (raw, json) Hash identifier: wdCdd1j4+Ne4V5piZmR4g65KsPQjIm7Ch/C0uXnBcao= Subject key identifier: 1A:72:23:5F:BC:F1:D3:06:A1:CF:38:31:5E:5E:F2:E4:91:41:C6:1F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411447CD6A0589521BC9050 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:44:7c:d6:a0:58:95:21:bc:90:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5ad7522f-9675-486e-83aa-3d4d6555c0a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:31:7e:78:ce:34:0b:0e:b7:bd:29:80:6a:49: 67:b7:dd:fe:03:d0:88:61:72:26:78:7a:e9:36:8d: b3:3a:7a:9c:29:31:55:d4:b7:0b:38:a7:89:a4:6e: 64:50:9b:b9:7f:5c:8b:6d:e6:01:91:5d:44:be:c0: ac:90:fc:cd:0c:cf:b5:d4:7e:43:46:d9:27:59:00: 1e:f1:84:67:a5:5b:3d:b3:db:d6:17:b0:e6:09:52: bf:e1:99:e3:0d:41:7b:80:a6:d9:20:06:21:3f:2b: 71:ff:e1:45:b5:5c:9c:f1:65:e9:58:af:74:73:64: d5:07:44:22:22:9a:6a:05:fa:25:2b:b9:14:0a:a2: e7:a4:cd:37:51:50:0e:30:ab:d1:e9:e1:09:91:32: 99:4d:aa:6f:db:fe:70:13:b9:c0:bc:9d:5f:10:ac: 90:e3:0f:05:0a:1b:0b:66:7a:cb:da:ed:bc:f8:da: e6:e7:3d:b6:af:b3:c4:c9:36:1f:22:8f:19:93:ea: 72:52:40:38:5e:fc:97:2a:e7:2f:8d:98:98:7c:3f: 5a:c8:8a:ec:08:a9:f8:31:31:8f:03:62:44:54:c7: e6:7c:89:a4:d8:7a:13:7c:4b:0d:00:1e:39:98:ea: 95:49:6d:e8:7d:dc:9b:7e:4d:f4:b6:a2:a1:6a:f1: 51:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:72:23:5F:BC:F1:D3:06:A1:CF:38:31:5E:5E:F2:E4:91:41:C6:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:22:e6:c7:7f:22:04:e6:62:fe:fd:6e:ed:c1:5e:eb:58:c5: 19:04:d7:15:30:69:e5:22:dd:22:b2:b6:a6:03:70:20:ab:65: 28:3b:23:56:47:66:20:f2:ac:b2:a6:6d:09:df:34:52:95:19: 11:4c:27:45:fb:c6:fd:6e:95:7c:fd:69:04:45:d2:fd:f1:11: e9:fb:c6:cb:2e:03:41:4e:d9:a7:86:85:ac:eb:e9:c8:0f:9c: 50:39:33:19:40:30:d3:43:ed:59:05:83:e6:a6:22:f5:de:ce: 9f:8b:fd:33:82:7e:4a:a7:ce:32:03:26:81:d5:8b:83:9e:ca: 39:21:25:ef:f0:7b:b3:22:6e:45:e4:d1:76:92:be:5f:7d:ad: 55:08:12:8b:64:c8:12:82:20:09:ed:5b:2a:63:d3:62:0d:76: 05:de:5d:43:63:85:3c:f3:34:25:44:3b:4b:ec:42:dd:b4:8c: 0b:c5:ee:90:57:17:9f:ba:c8:19:08:4b:38:85:13:5a:17:f2: d4:24:10:06:47:f2:c7:a6:bd:8b:b4:f1:c7:44:eb:f0:6c:68: ff:02:d7:90:fe:83:bd:08:6e:ef:4b:33:e4:bf:68:34:54:29: 32:c0:ca:81:2e:2a:bc:09:72:07:14:97:e8:ca:d3:40:f4:ac: c1:b8:79:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUR81qBYlSG8kFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NWFkNzUyMmYtOTY3NS00ODZlLTgzYWEtM2Q0ZDY1NTVjMGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiDF+eM40Cw63vSmAaklnt93+A9CIYXImeHrp No2zOnqcKTFV1LcLOKeJpG5kUJu5f1yLbeYBkV1EvsCskPzNDM+11H5DRtknWQAe 8YRnpVs9s9vWF7DmCVK/4ZnjDUF7gKbZIAYhPytx/+FFtVyc8WXpWK90c2TVB0Qi IppqBfolK7kUCqLnpM03UVAOMKvR6eEJkTKZTapv2/5wE7nAvJ1fEKyQ4w8FChsL ZnrL2u28+Nrm5z22r7PEyTYfIo8Zk+pyUkA4XvyXKucvjZiYfD9ayIrsCKn4MTGP A2JEVMfmfImk2HoTfEsNAB45mOqVSW3ofdybfk30tqKhavFR6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpyI1+88dMGoc84MV5e8uSRQcYfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhiZmRkZWQtNmQxNC0z NjZlLTlhMTItYmY1ZDMwNmEzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADQi5sd/IgTmYv79bu3BXutYxRkE1xUwaeUi3SKytqYDcCCrZSg7I1ZH ZiDyrLKmbQnfNFKVGRFMJ0X7xv1ulXz9aQRF0v3xEen7xssuA0FO2aeGhazr6cgP nFA5MxlAMNND7VkFg+amIvXezp+L/TOCfkqnzjIDJoHVi4OeyjkhJe/we7MibkXk 0XaSvl99rVUIEotkyBKCIAntWypj02INdgXeXUNjhTzzNCVEO0vsQt20jAvF7pBX F5+6yBkISziFE1oX8tQkEAZH8semvYu08cdE6/BsaP8C15D+g70Ibu9LM+S/aDRU KTLAyoEuKrwJcgcUl+jK00D0rMG4eV8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:58 2025 by rpki-client