$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bdb6d19f-cb3c-3c4b-a1e4-cfb1cb9fe1ad.roa File: bdb6d19f-cb3c-3c4b-a1e4-cfb1cb9fe1ad.roa (raw, json) Hash identifier: aqpvQA2p+SjWcMWuI8GNpf1FgDCV/QyQLhlkAesLWro= Subject key identifier: E9:99:92:E9:8F:2A:D9:E1:40:68:22:38:42:16:37:3D:4F:5A:C8:A3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412006D698A54BB740F5800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bdb6d19f-cb3c-3c4b-a1e4-cfb1cb9fe1ad.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:00:6d:69:8a:54:bb:74:0f:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=033010cd-c4a0-4115-9bb9-20c7fa0cacb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:8f:4c:19:d9:c7:e3:3e:b0:2a:2b:d7:a6:bc: db:31:71:fe:f9:3e:77:58:78:a3:28:b1:5b:6e:27: 21:f0:f6:2e:13:44:6c:08:6f:f8:77:01:37:dc:70: 57:58:f9:8d:ec:62:8a:e4:86:0c:04:3d:38:67:d7: 58:c9:20:7f:a3:4c:3c:55:34:2f:06:61:40:21:9d: 03:b8:5b:61:20:d4:f9:24:7c:38:56:2e:68:d8:f6: e8:58:ce:61:0c:25:fd:a4:08:57:e3:c0:fb:2b:46: 3a:d5:4b:2f:1f:b2:c1:87:06:b9:af:13:df:62:35: 1f:b3:d3:5a:9b:6b:24:30:84:6b:a2:b2:82:16:35: 0b:c1:04:ee:87:97:07:e8:f7:60:5b:07:ac:3c:89: 8a:2f:91:d2:ef:ba:19:b0:e7:09:c3:f4:59:0d:bd: 25:0c:32:d6:4c:f4:62:0f:5d:4e:01:3d:49:a3:38: 77:42:b8:8a:66:1b:56:ee:22:22:6a:de:b3:79:04: dc:aa:c4:2e:6d:7d:82:9b:37:26:04:27:a7:df:fd: 48:9a:fb:d8:0b:78:4b:79:89:c3:58:03:69:ee:87: 16:94:73:d2:28:c7:82:d8:c9:e2:b6:d8:c6:21:dc: 96:cc:9f:35:85:45:0a:32:30:f9:e3:13:33:a2:08: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:99:92:E9:8F:2A:D9:E1:40:68:22:38:42:16:37:3D:4F:5A:C8:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bdb6d19f-cb3c-3c4b-a1e4-cfb1cb9fe1ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c8:85:be:3c:fb:aa:5e:e0:0a:6a:8e:17:53:44:c3:8a:74:a1: 13:3c:a8:22:c6:27:e2:cc:41:2f:1c:f8:a9:2f:c5:ee:29:78: d0:32:89:76:d8:a8:6c:73:bc:d9:8a:1b:15:36:2c:d4:d2:2f: 3a:ae:68:3f:58:3f:e6:3f:f5:41:2d:e6:d9:2f:e5:9b:f9:be: 23:f5:66:94:3f:fa:d2:0f:6a:40:a7:71:c0:12:ca:d3:4b:98: 87:0e:3f:18:af:9d:b4:a7:14:dc:7d:12:99:9d:b7:c5:fb:83: 02:16:b2:87:81:77:85:ff:08:4a:8e:63:08:fa:eb:bc:bb:b5: ac:ea:a7:a0:cb:77:e9:21:ef:71:82:13:f7:8b:27:a1:a5:1a: 78:d1:28:3e:0a:75:8b:7f:6a:24:6e:f2:2f:92:34:01:d2:25: e2:99:2f:c9:f9:3e:bf:7c:fa:cf:10:6b:20:61:9c:e1:7f:cb: d9:5c:ea:53:e6:46:11:14:6c:b1:19:7e:8e:ae:78:5e:2b:16: f0:9c:d7:35:62:ad:66:a3:23:d6:08:dc:cb:57:8e:5d:f8:1c: 14:49:5b:9c:64:76:cb:37:54:1b:80:57:f4:9d:20:6b:f4:cd: f8:5a:11:e7:3e:2c:18:37:dd:70:80:cd:4d:b0:57:a8:eb:96: a5:19:79:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgBtaYpUu3QPWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDMzMDEwY2QtYzRhMC00MTE1LTliYjktMjBjN2ZhMGNhY2I0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAso9MGdnH4z6wKivXprzbMXH++T53WHijKLFb bich8PYuE0RsCG/4dwE33HBXWPmN7GKK5IYMBD04Z9dYySB/o0w8VTQvBmFAIZ0D uFthINT5JHw4Vi5o2PboWM5hDCX9pAhX48D7K0Y61UsvH7LBhwa5rxPfYjUfs9Na m2skMIRrorKCFjULwQTuh5cH6PdgWwesPImKL5HS77oZsOcJw/RZDb0lDDLWTPRi D11OAT1Jozh3QriKZhtW7iIiat6zeQTcqsQubX2CmzcmBCen3/1ImvvYC3hLeYnD WANp7ocWlHPSKMeC2MnittjGIdyWzJ81hUUKMjD54xMzogiBQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmZkumPKtnhQGgiOEIWNz1PWsijMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmRiNmQxOWYtY2IzYy0z YzRiLWExZTQtY2ZiMWNiOWZlMWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMiFvjz7ql7gCmqOF1NEw4p0oRM8qCLGJ+LMQS8c+Kkvxe4peNAyiXbY qGxzvNmKGxU2LNTSLzquaD9YP+Y/9UEt5tkv5Zv5viP1ZpQ/+tIPakCnccASytNL mIcOPxivnbSnFNx9Epmdt8X7gwIWsoeBd4X/CEqOYwj667y7tazqp6DLd+kh73GC E/eLJ6GlGnjRKD4KdYt/aiRu8i+SNAHSJeKZL8n5Pr98+s8QayBhnOF/y9lc6lPm RhEUbLEZfo6ueF4rFvCc1zVirWajI9YI3MtXjl34HBRJW5xkdss3VBuAV/SdIGv0 zfhaEec+LBg33XCAzU2wV6jrlqUZeeo= -----END CERTIFICATE-----Generated at Fri Jul 25 23:59:24 2025 by rpki-client