$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa File: c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa (raw, json) Hash identifier: TyYSG7wD3HmGuvr54uURGxcPw4FhsjC84FAZZTe3LQ0= Subject key identifier: 5E:C7:4B:F4:C1:D3:8E:C3:54:6F:24:4B:5B:87:09:9B:D0:67:D0:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411472282DA9DB0368D8780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:47:22:82:da:9d:b0:36:8d:87:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=b24b83f6-1af5-4806-9c4d-b2d743ca9666 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b5:5b:ba:45:f6:d4:2f:4e:9d:e1:b6:21:03: 6c:73:d8:19:3f:dd:e3:87:93:26:48:4b:73:7c:7c: 8e:0f:77:dd:03:a5:70:57:09:2d:b8:4e:3b:fc:46: c4:ab:7d:69:be:61:27:d5:59:bf:05:a4:a0:a1:f6: 97:48:f9:5b:d2:eb:e0:2a:6e:cb:1a:54:4f:5f:ab: 04:f8:d9:43:54:60:66:17:4f:06:f7:9d:c7:40:5a: a1:64:11:14:d3:52:6f:45:47:4b:81:57:a5:df:59: 9c:96:fc:fa:d7:57:53:3f:82:4f:09:95:1c:42:be: f4:be:46:12:d6:24:97:1d:e9:50:ac:e1:ec:1f:96: cb:f0:44:d7:e8:02:6e:9c:06:79:72:79:23:75:4c: a6:51:d4:85:f3:03:36:03:a5:71:90:43:0e:e2:9b: e3:9f:51:72:62:aa:dd:fd:f6:33:42:7b:7d:b7:e1: 96:e6:ca:88:3e:1d:9a:e9:0b:46:54:a2:63:2c:13: e2:15:61:6f:9d:98:ff:dc:45:74:0a:14:f3:3e:f0: 81:d6:4c:03:c2:2c:dc:c9:62:83:94:e3:d6:e9:3e: ed:11:20:15:3d:5f:31:23:e3:a7:1d:2f:bb:2d:95: 15:62:8d:a9:aa:26:99:31:ca:2b:da:13:c2:59:69: 62:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:C7:4B:F4:C1:D3:8E:C3:54:6F:24:4B:5B:87:09:9B:D0:67:D0:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:8f:a1:00:d4:58:9a:97:90:4b:de:02:8b:42:33:2b:c8:ed: 58:90:22:c9:39:3e:3e:7e:77:87:7d:71:bb:22:5f:4f:63:2f: 8b:d2:3c:1c:29:50:2e:ae:fd:c5:4f:33:aa:79:a7:60:fb:f3: c0:c9:01:5b:f3:e9:6a:da:cd:0f:09:6e:19:69:eb:04:e6:a4: df:5a:7b:2f:39:68:05:05:e0:62:4f:e8:08:79:4f:c8:0b:00: 30:bd:11:2a:67:0a:0b:51:50:fc:30:26:98:e9:42:2e:33:17: 34:4b:f3:fd:b9:d4:48:c6:4a:c0:fe:72:f2:34:10:07:7a:c6: c9:c4:70:c9:fc:ca:dd:14:64:fd:87:9d:5d:36:ac:47:04:47: e3:5c:74:4e:ab:7b:51:f2:ea:4b:5a:74:45:7f:d9:ff:55:70: 01:e9:3b:33:e7:8b:5e:97:75:16:c8:54:a6:98:ff:6e:ff:d1: 88:4d:23:ff:53:a7:dc:56:73:87:00:a5:b0:95:14:ff:df:f8: 35:c3:37:a9:cb:f5:99:fe:f2:62:14:8e:73:1a:b3:1a:10:e1: 54:0f:6c:bc:80:6a:2c:6a:ed:3d:d3:45:e1:ea:6a:5c:29:4a: d9:97:40:b8:b3:b3:7f:2c:a6:d7:7b:29:6f:16:65:e3:2c:44: 06:94:eb:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUcigtqdsDaNh4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YjI0YjgzZjYtMWFmNS00ODA2LTljNGQtYjJkNzQzY2E5NjY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLVbukX21C9OneG2IQNsc9gZP93jh5MmSEtz fHyOD3fdA6VwVwktuE47/EbEq31pvmEn1Vm/BaSgofaXSPlb0uvgKm7LGlRPX6sE +NlDVGBmF08G953HQFqhZBEU01JvRUdLgVel31mclvz611dTP4JPCZUcQr70vkYS 1iSXHelQrOHsH5bL8ETX6AJunAZ5cnkjdUymUdSF8wM2A6VxkEMO4pvjn1FyYqrd /fYzQnt9t+GW5sqIPh2a6QtGVKJjLBPiFWFvnZj/3EV0ChTzPvCB1kwDwizcyWKD lOPW6T7tESAVPV8xI+OnHS+7LZUVYo2pqiaZMcor2hPCWWlinwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7HS/TB047DVG8kS1uHCZvQZ9DKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM4NDVjNmYtNTJkNC0z NGU1LWE2YTYtN2RkODg4YTRkMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCPoQDUWJqXkEveAotCMyvI7ViQIsk5Pj5+d4d9cbsiX09jL4vSPBwp UC6u/cVPM6p5p2D788DJAVvz6WrazQ8Jbhlp6wTmpN9aey85aAUF4GJP6Ah5T8gL ADC9ESpnCgtRUPwwJpjpQi4zFzRL8/251EjGSsD+cvI0EAd6xsnEcMn8yt0UZP2H nV02rEcER+NcdE6re1Hy6ktadEV/2f9VcAHpOzPni16XdRbIVKaY/27/0YhNI/9T p9xWc4cApbCVFP/f+DXDN6nL9Zn+8mIUjnMasxoQ4VQPbLyAaixq7T3TReHqalwp StmXQLizs38sptd7KW8WZeMsRAaU62w= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:39 2025 by rpki-client