$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa File: bccc062f-8e57-31cd-9ca2-081d4382b174.roa (raw, json) Hash identifier: d4GfvhArd45uSBSLhnIgTzUP3D+Fj4AvyWishCmP6g8= Subject key identifier: F4:2D:96:64:BB:9A:D2:68:D2:D6:90:2C:92:0C:58:BF:E0:99:7A:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FDD782E9E91CD7CD6480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fd:d7:82:e9:e9:1c:d7:cd:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=28148c2e-86d4-4dfd-ad1a-3874a0d48856 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b2:a3:50:ad:dc:53:17:74:1b:3e:84:3e:14: 56:1b:ed:16:d2:dd:0c:38:86:8a:2f:1e:5e:51:e2: 01:87:01:c7:ee:f6:0d:8d:c3:f7:4f:da:ea:02:5c: f5:af:b1:7d:db:57:89:52:47:2e:01:a3:24:4e:df: 7d:a4:e3:9f:2f:c7:ed:b8:b2:9f:e0:10:71:33:de: c5:6e:86:61:d7:a1:06:e5:e2:be:f4:70:c1:57:d9: 41:13:d0:52:37:3f:fe:6b:9e:d4:03:6b:dd:9e:95: f1:8a:66:f5:52:97:ce:13:0e:0e:26:e9:7a:3b:cd: e8:17:8e:24:af:43:75:00:8d:d1:4d:aa:4a:f1:d7: 27:79:33:e0:a7:a1:0a:29:48:d0:81:79:78:92:96: 45:b7:db:4e:45:a3:2d:b5:9a:e2:d7:3c:8b:29:de: 7f:12:5f:d5:7e:66:83:75:d2:20:6a:9f:3a:e9:60: c0:3d:8b:bf:98:f2:12:1c:5f:72:5c:01:44:ea:06: 17:26:a4:e1:24:2e:6f:b4:b7:79:d3:b5:10:ca:96: 04:75:4f:9f:ca:04:86:af:af:e8:b7:35:e0:19:22: 51:77:b8:e7:11:a2:1f:0d:60:53:0a:96:bc:3e:3e: f9:b8:a0:06:aa:96:86:e4:f8:98:f6:34:b7:6c:a9: 2b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:2D:96:64:BB:9A:D2:68:D2:D6:90:2C:92:0C:58:BF:E0:99:7A:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bccc062f-8e57-31cd-9ca2-081d4382b174.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d6:44:74:da:c4:a1:6a:db:56:d5:2b:a9:91:82:c5:f0:2c: d5:4f:e2:5a:6e:99:5b:cd:03:3d:4f:47:d7:e8:64:54:d1:8a: f8:7b:85:19:19:ed:20:f6:f1:cd:ac:ed:26:fc:be:12:85:cd: c0:88:55:fc:8c:d5:20:f1:17:cb:17:78:a7:b0:15:74:55:2b: 38:e4:48:8e:d7:0a:c9:e0:75:f1:d6:ef:d0:bb:fc:57:d9:30: 9e:bb:95:3a:d2:ff:3d:8b:4c:c7:f9:f1:b2:18:65:c5:4e:a6: b1:25:6c:4a:ff:73:a1:5c:ae:58:0e:f5:03:73:3c:e4:63:36: 71:7d:c6:60:c4:cb:10:5e:41:ec:41:d7:23:5a:80:88:f3:dc: f8:4e:0b:ba:09:f8:6a:51:82:34:30:97:f9:ac:c9:85:19:a5: aa:b7:bb:5f:63:c4:e5:0b:0c:22:79:11:67:6f:71:52:f2:76: 0e:01:76:c6:39:e5:13:07:e7:6f:8e:42:1d:2e:b6:71:00:b4: 96:d4:97:69:86:80:b4:ab:82:ca:c8:dc:56:22:92:5f:fe:f1: a6:fd:e3:d9:4a:01:64:7e:a3:d8:dc:af:bb:6e:39:50:16:b6: 19:52:19:b0:e4:14:ff:eb:cd:81:0a:3e:36:23:40:84:b1:c7: 75:57:0d:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf3XgunpHNfNZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjgxNDhjMmUtODZkNC00ZGZkLWFkMWEtMzg3NGEwZDQ4ODU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4bKjUK3cUxd0Gz6EPhRWG+0W0t0MOIaKLx5e UeIBhwHH7vYNjcP3T9rqAlz1r7F921eJUkcuAaMkTt99pOOfL8ftuLKf4BBxM97F boZh16EG5eK+9HDBV9lBE9BSNz/+a57UA2vdnpXximb1UpfOEw4OJul6O83oF44k r0N1AI3RTapK8dcneTPgp6EKKUjQgXl4kpZFt9tORaMttZri1zyLKd5/El/VfmaD ddIgap866WDAPYu/mPISHF9yXAFE6gYXJqThJC5vtLd507UQypYEdU+fygSGr6/o tzXgGSJRd7jnEaIfDWBTCpa8Pj75uKAGqpaG5PiY9jS3bKkrbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQtlmS7mtJo0taQLJIMWL/gmXrLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmNjYzA2MmYtOGU1Ny0z MWNkLTljYTItMDgxZDQzODJiMTc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAErWRHTaxKFq21bVK6mRgsXwLNVP4lpumVvNAz1PR9foZFTRivh7hRkZ 7SD28c2s7Sb8vhKFzcCIVfyM1SDxF8sXeKewFXRVKzjkSI7XCsngdfHW79C7/FfZ MJ67lTrS/z2LTMf58bIYZcVOprElbEr/c6FcrlgO9QNzPORjNnF9xmDEyxBeQexB 1yNagIjz3PhOC7oJ+GpRgjQwl/msyYUZpaq3u19jxOULDCJ5EWdvcVLydg4BdsY5 5RMH52+OQh0utnEAtJbUl2mGgLSrgsrI3FYikl/+8ab949lKAWR+o9jcr7tuOVAW thlSGbDkFP/rzYEKPjYjQISxx3VXDSA= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:06 2025 by rpki-client