$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c36a175e-40a3-32a5-ace0-e5a4af201bf1.roa File: c36a175e-40a3-32a5-ace0-e5a4af201bf1.roa (raw, json) Hash identifier: OqdJZtvGy9IcGrR5/aP+tS9c1MivuWkSNwvKRCjGpdQ= Subject key identifier: 72:84:F1:FD:A4:FC:83:30:B4:82:F9:A4:FC:D3:F5:C6:83:C7:DA:1D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841146173CE8E721AD795180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c36a175e-40a3-32a5-ace0-e5a4af201bf1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.189.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:46:17:3c:e8:e7:21:ad:79:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8735d624-950c-43a1-8fc5-6c2617cd35ee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:50:ae:cb:d9:18:f9:59:1d:38:eb:39:5d:58: 7b:44:f7:44:06:52:87:f3:9b:78:be:ec:bf:09:ba: 22:39:06:17:fd:50:13:ba:86:60:6a:d6:b4:af:02: 79:84:89:f7:ec:d3:01:e5:06:0a:c5:02:34:fe:04: 14:51:4b:48:7c:6d:25:c1:25:c6:17:8d:06:53:58: 11:42:89:b1:7b:c3:00:46:9e:ac:73:09:c3:45:8d: e5:1f:97:5c:16:73:c9:35:eb:0b:4d:e9:fb:19:12: 35:14:59:48:2e:7a:76:09:2f:c3:1f:d9:58:88:4a: 21:e1:99:57:e4:b0:52:e5:e7:dd:89:14:1d:50:07: a0:5b:c1:05:03:7e:7a:d0:36:18:a0:fb:23:a0:c4: 7a:31:14:63:05:fd:e9:87:ff:47:6b:cb:dd:40:7e: 90:83:de:49:f4:f7:25:5c:d3:b9:a6:fd:3e:e3:44: 58:4c:ea:47:ce:90:32:6b:7f:8d:e7:ad:f6:1f:fc: 3a:54:ed:57:09:85:4b:59:88:85:fe:2f:2d:2a:67: dd:7e:f5:2b:fb:43:da:c9:be:74:cb:39:78:08:fd: 30:84:82:d0:fc:f3:09:e8:ff:27:83:41:03:5d:7f: c1:4a:df:84:64:77:0b:39:ed:82:70:d8:67:37:e1: 44:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:84:F1:FD:A4:FC:83:30:B4:82:F9:A4:FC:D3:F5:C6:83:C7:DA:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c36a175e-40a3-32a5-ace0-e5a4af201bf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.189.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c4:b9:87:37:65:d5:25:12:6e:5d:40:e8:c3:e2:48:0b:76:0e: 0c:4f:0b:31:ac:85:df:d6:5e:9e:48:54:5f:2d:3a:b6:10:ac: cf:24:a6:a0:90:e4:58:80:5a:f2:52:40:ea:fa:9e:80:11:58: 44:e7:7e:d0:ea:cb:14:de:82:f5:7d:60:0e:12:52:bb:12:b0: db:86:32:4f:2f:b5:5b:89:d5:48:b5:9d:1a:0b:6a:0f:03:1e: bf:ee:7d:5f:98:3a:bc:30:35:1a:05:d5:97:64:9b:0d:0a:4f: 20:d5:47:93:b4:40:4d:d1:2b:a9:0d:cf:70:8e:dc:3a:a4:cf: 50:26:b2:6a:c2:47:9a:50:a2:c4:02:70:cc:64:a5:05:f1:2e: f1:a1:5b:5d:f6:a3:a8:d4:3b:45:1c:8f:32:c4:e2:b7:d4:25: 2b:21:24:73:47:2a:13:bd:d6:ef:60:43:72:79:0a:fb:55:2f: 58:1e:6d:ac:98:75:86:94:da:4e:77:e2:6a:e7:d7:95:54:52: 00:7b:4c:3a:f7:f5:b1:e0:79:ae:21:94:21:8e:5e:cd:e8:b8: e5:a9:ce:14:40:10:4a:ed:22:4a:73:cb:ae:8b:3d:d6:fa:42: 60:8f:1e:48:0a:a2:4b:8b:f6:d4:77:9c:b2:63:06:bf:5d:e6: 5c:7e:00:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUYXPOjnIa15UYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ODczNWQ2MjQtOTUwYy00M2ExLThmYzUtNmMyNjE3Y2QzNWVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu1Cuy9kY+VkdOOs5XVh7RPdEBlKH85t4vuy/ CboiOQYX/VATuoZgata0rwJ5hIn37NMB5QYKxQI0/gQUUUtIfG0lwSXGF40GU1gR Qomxe8MARp6scwnDRY3lH5dcFnPJNesLTen7GRI1FFlILnp2CS/DH9lYiEoh4ZlX 5LBS5efdiRQdUAegW8EFA3560DYYoPsjoMR6MRRjBf3ph/9Ha8vdQH6Qg95J9Pcl XNO5pv0+40RYTOpHzpAya3+N5632H/w6VO1XCYVLWYiF/i8tKmfdfvUr+0Payb50 yzl4CP0whILQ/PMJ6P8ng0EDXX/BSt+EZHcLOe2CcNhnN+FEFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHKE8f2k/IMwtIL5pPzT9caDx9odMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM2YTE3NWUtNDBhMy0z MmE1LWFjZTAtZTVhNGFmMjAxYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMS5hzdl1SUSbl1A6MPiSAt2DgxPCzGshd/WXp5IVF8tOrYQrM8kpqCQ 5FiAWvJSQOr6noARWETnftDqyxTegvV9YA4SUrsSsNuGMk8vtVuJ1Ui1nRoLag8D Hr/ufV+YOrwwNRoF1Zdkmw0KTyDVR5O0QE3RK6kNz3CO3Dqkz1AmsmrCR5pQosQC cMxkpQXxLvGhW132o6jUO0UcjzLE4rfUJSshJHNHKhO91u9gQ3J5CvtVL1gebayY dYaU2k534mrn15VUUgB7TDr39bHgea4hlCGOXs3ouOWpzhRAEErtIkpzy66LPdb6 QmCPHkgKokuL9tR3nLJjBr9d5lx+ACg= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:00 2025 by rpki-client