$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf40656f-5300-3a00-98b2-a6a00b1c36d4.roa File: bf40656f-5300-3a00-98b2-a6a00b1c36d4.roa (raw, json) Hash identifier: RI9HLYFEXMA7BSxxA0nErQ9SqyoSsNljWNH0B0rDsrs= Subject key identifier: C8:1D:F7:B7:16:29:7B:11:45:53:88:71:E6:F5:28:17:F3:49:45:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF3A95FFA04C676E5340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf40656f-5300-3a00-98b2-a6a00b1c36d4.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.216.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:3a:95:ff:a0:4c:67:6e:53:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1f942e2a-fe91-4eb2-80ab-405056ae3ecc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:79:a1:8f:7c:d0:5d:2c:b1:67:46:2d:8e:ab: 7f:75:14:68:a1:50:5c:18:af:39:f3:d9:7c:ec:f4: 21:b0:cc:2c:95:12:1b:d6:b3:8b:8a:20:ff:52:ba: f4:c0:e1:ba:16:21:f7:91:33:2f:3f:d5:1d:bb:e9: 4b:6a:e6:4d:d5:32:bf:7d:5b:c7:81:84:0e:69:79: 29:56:1b:36:99:e2:08:b2:82:73:75:b9:5b:6d:24: b5:4b:1d:b0:2c:bc:8c:50:ce:1a:c6:59:b3:50:f8: 88:e7:08:5f:0f:64:67:3c:28:cf:0a:5b:8f:64:bf: a3:93:18:22:b8:c2:05:86:93:e9:f6:35:59:82:d1: cb:bc:70:3e:85:4b:b8:cf:f8:f7:cb:e2:2f:3a:3b: c9:7d:9a:62:9f:cd:60:d8:1e:9c:d1:3f:d4:0f:be: 71:f0:db:37:73:65:6b:1e:34:5d:6a:51:53:b9:80: e7:fb:a6:ff:df:60:b8:e5:0a:4b:4d:9b:b1:d8:ba: 57:c2:73:ca:dd:84:fc:92:92:27:29:45:4b:cd:dd: ed:38:0b:03:d6:b6:15:05:1e:db:0b:08:3a:f6:4d: 2c:25:4b:d8:9e:fa:a3:3b:a8:30:70:4a:94:92:f5: fa:27:33:02:30:c3:41:76:e2:ff:28:43:31:d5:c5: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:1D:F7:B7:16:29:7B:11:45:53:88:71:E6:F5:28:17:F3:49:45:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf40656f-5300-3a00-98b2-a6a00b1c36d4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.216.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:bd:f6:68:38:db:11:f5:3a:0d:4e:c0:6d:27:ac:6f:87:73: 10:bf:c2:c1:76:95:e2:17:56:f5:91:08:12:c2:ed:dd:50:64: 0a:74:dd:57:0a:6c:aa:ec:dd:a0:46:9b:98:0e:af:d6:ca:fd: 37:51:62:b1:f6:b7:57:33:cd:c8:bc:b7:42:81:71:0a:7d:8a: 73:ff:b7:bb:88:c3:92:a9:7c:e8:fa:d7:10:34:8d:e8:e5:34: 70:5b:27:a2:56:99:70:e0:91:0e:73:eb:05:42:1e:49:20:f5: 94:d1:13:ce:f5:e2:f6:c3:1e:3d:bb:df:47:8e:e1:52:fe:9d: 05:57:95:21:93:43:89:b2:9f:2b:83:66:15:35:d9:0c:17:bc: 77:43:8f:19:ef:bb:68:0d:2f:76:94:e3:bf:92:a8:71:24:d8: b7:41:07:eb:cc:43:1e:1a:2e:26:b4:8e:91:8c:29:ee:73:e4: fa:e8:92:72:20:34:76:44:bf:29:0e:27:39:04:60:55:ef:5f: 4b:9f:77:28:03:72:22:74:98:11:d3:4e:db:e8:7e:14:79:89: 6a:a0:c2:ad:45:61:b9:7d:57:b4:b3:fa:55:25:9f:03:a0:86: ce:ad:6a:6c:fa:c7:22:2d:9f:bd:e2:71:43:cc:27:49:86:4e: 8a:00:eb:fc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf86lf+gTGduU0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWY5NDJlMmEtZmU5MS00ZWIyLTgwYWItNDA1MDU2YWUzZWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3mhj3zQXSyxZ0Ytjqt/dRRooVBcGK8589l8 7PQhsMwslRIb1rOLiiD/Urr0wOG6FiH3kTMvP9Udu+lLauZN1TK/fVvHgYQOaXkp Vhs2meIIsoJzdblbbSS1Sx2wLLyMUM4axlmzUPiI5whfD2RnPCjPCluPZL+jkxgi uMIFhpPp9jVZgtHLvHA+hUu4z/j3y+IvOjvJfZpin81g2B6c0T/UD75x8Ns3c2Vr HjRdalFTuYDn+6b/32C45QpLTZux2LpXwnPK3YT8kpInKUVLzd3tOAsD1rYVBR7b Cwg69k0sJUvYnvqjO6gwcEqUkvX6JzMCMMNBduL/KEMx1cU0NQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMgd97cWKXsRRVOIceb1KBfzSUUdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmY0MDY1NmYtNTMwMC0z YTAwLTk4YjItYTZhMDBiMWMzNmQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAa99mg42xH1Og1OwG0nrG+HcxC/wsF2leIXVvWRCBLC7d1QZAp03VcK bKrs3aBGm5gOr9bK/TdRYrH2t1czzci8t0KBcQp9inP/t7uIw5KpfOj61xA0jejl NHBbJ6JWmXDgkQ5z6wVCHkkg9ZTRE8714vbDHj2730eO4VL+nQVXlSGTQ4mynyuD ZhU12QwXvHdDjxnvu2gNL3aU47+SqHEk2LdBB+vMQx4aLia0jpGMKe5z5ProknIg NHZEvykOJzkEYFXvX0ufdygDciJ0mBHTTtvofhR5iWqgwq1FYbl9V7Sz+lUlnwOg hs6tamz6xyItn73icUPMJ0mGTooA6/w= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:58 2025 by rpki-client