$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa File: bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa (raw, json) Hash identifier: xsfnxg4ix+XK9auLs1iRhkRBsWV6Tj8CHFGhuly9OU8= Subject key identifier: 29:97:5B:3B:2C:73:77:83:C3:C8:C8:79:16:A9:17:E9:59:8C:1A:D0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411F9FD6E93B608B6B57CC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:f9:fd:6e:93:b6:08:b6:b5:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1abf0d27-e64a-470c-9ecd-362078f31756 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1e:2c:e4:8c:f2:77:0e:ac:10:9e:ff:1d:68: e5:b8:70:4c:a6:8c:2e:1f:f6:c0:be:bd:9e:13:f3: db:bc:df:32:69:25:6a:11:7e:28:87:c3:2a:cb:21: 1b:b1:df:72:cd:da:21:31:60:80:e3:e8:e6:ab:b5: 9d:be:69:cb:d6:57:24:55:aa:d8:1e:7f:48:ec:a9: 9c:31:2d:97:3f:8a:56:74:91:d2:04:54:1a:5b:b2: 7a:1d:c2:25:13:b6:d7:dc:4c:7d:1c:d4:98:22:64: a8:42:59:d9:c8:8b:c4:9c:b4:95:39:78:79:1e:70: 39:cd:9b:97:33:7e:3c:87:8a:ca:72:e6:28:25:b0: 82:a2:ea:69:e4:df:ea:7e:75:8e:e9:56:92:5d:bc: 3d:6e:df:b5:e6:1a:c6:7f:29:f9:61:e8:5a:df:f5: 71:ce:fb:a2:dc:7b:90:72:75:60:c4:21:fb:a5:37: 8c:b3:39:df:07:ae:3b:b0:b9:0d:f7:a8:43:17:4b: 36:8c:71:46:0c:f2:77:11:09:a2:84:29:0f:db:48: c3:43:07:55:eb:b2:69:8d:96:cc:f3:1e:5d:49:bd: 8b:3c:6a:95:d5:73:95:05:ef:f6:3e:1a:c7:78:03: 51:43:52:5a:08:a2:1e:48:38:b1:50:8d:ed:20:11: cf:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:97:5B:3B:2C:73:77:83:C3:C8:C8:79:16:A9:17:E9:59:8C:1A:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bfaacc0d-5171-3bf3-9d23-9b276aa315a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:6d:0c:bd:79:ed:98:cc:6f:76:b8:c4:f5:5e:b1:9f:ed:2c: 56:cc:5c:c3:11:bc:55:c9:25:e8:38:0d:2b:8a:22:7f:2f:6f: f8:9f:8f:4f:f3:95:bc:f8:53:52:22:42:10:84:e9:23:8e:3b: ff:8e:69:64:a5:3c:a4:38:e0:91:e4:bc:d3:4b:07:7a:84:c7: 68:be:a8:61:11:0c:0b:8a:3f:c0:bb:54:23:2f:9a:45:46:a8: 54:85:c8:91:f6:c5:2a:8b:a9:06:32:97:01:95:75:6c:aa:ca: 81:48:e4:dd:a2:20:9f:22:ff:1c:af:15:11:fb:ef:09:01:c1: 3f:08:ca:81:bd:c9:2c:35:31:f9:76:1b:8f:a4:ce:b1:75:8f: a1:77:07:c7:62:37:35:5e:ec:b0:6f:81:e2:04:37:81:81:93: 18:ec:64:e7:9f:55:78:e9:8b:96:20:9d:9e:4f:12:3f:cb:1b: 1b:f5:1d:6d:68:d4:a6:4c:65:18:ba:de:27:93:a1:e6:83:00: 93:59:59:a8:ce:cd:d2:64:75:57:60:ba:89:e9:5c:df:a5:26: ae:b4:00:bb:e6:26:79:fd:af:55:82:1f:78:fa:78:de:4d:88: c6:95:e5:fb:02:91:6b:58:24:6c:c7:d4:44:a6:d2:49:97:28: 07:a3:ad:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfn9bpO2CLa1fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWFiZjBkMjctZTY0YS00NzBjLTllY2QtMzYyMDc4ZjMxNzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAih4s5Izydw6sEJ7/HWjluHBMpowuH/bAvr2e E/PbvN8yaSVqEX4oh8MqyyEbsd9yzdohMWCA4+jmq7WdvmnL1lckVarYHn9I7Kmc MS2XP4pWdJHSBFQaW7J6HcIlE7bX3Ex9HNSYImSoQlnZyIvEnLSVOXh5HnA5zZuX M348h4rKcuYoJbCCoupp5N/qfnWO6VaSXbw9bt+15hrGfyn5Yeha3/Vxzvui3HuQ cnVgxCH7pTeMsznfB647sLkN96hDF0s2jHFGDPJ3EQmihCkP20jDQwdV67JpjZbM 8x5dSb2LPGqV1XOVBe/2PhrHeANRQ1JaCKIeSDixUI3tIBHPfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmXWzssc3eDw8jIeRapF+lZjBrQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmZhYWNjMGQtNTE3MS0z YmYzLTlkMjMtOWIyNzZhYTMxNWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHptDL157ZjMb3a4xPVesZ/tLFbMXMMRvFXJJeg4DSuKIn8vb/ifj0/z lbz4U1IiQhCE6SOOO/+OaWSlPKQ44JHkvNNLB3qEx2i+qGERDAuKP8C7VCMvmkVG qFSFyJH2xSqLqQYylwGVdWyqyoFI5N2iIJ8i/xyvFRH77wkBwT8IyoG9ySw1Mfl2 G4+kzrF1j6F3B8diNzVe7LBvgeIEN4GBkxjsZOefVXjpi5YgnZ5PEj/LGxv1HW1o 1KZMZRi63ieToeaDAJNZWajOzdJkdVdguonpXN+lJq60ALvmJnn9r1WCH3j6eN5N iMaV5fsCkWtYJGzH1ESm0kmXKAejre8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:15:17 2025 by rpki-client