$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c48d6c3e-2194-3a97-bcbf-aca018485e33.roa File: c48d6c3e-2194-3a97-bcbf-aca018485e33.roa (raw, json) Hash identifier: mtoMJzFNMFMxeU8qT9UBVkRgHBaJ82co7rIlDNmMHi4= Subject key identifier: D3:35:C0:05:C2:0C:AA:CE:BF:3C:2B:7B:EE:78:3A:0D:62:E4:0E:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841203A708B2FA0D690DF080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c48d6c3e-2194-3a97-bcbf-aca018485e33.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:03:a7:08:b2:fa:0d:69:0d:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=bcb6934c-9aff-499d-a24a-0c68ae9cfbfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:65:17:e0:a3:b4:b8:22:f5:61:55:90:ba:74: f3:4a:68:c3:2d:9f:d8:2d:74:fe:de:93:53:4a:9d: 80:3c:77:41:56:d5:a4:bd:fa:c4:b5:dc:bd:7d:d2: 35:4c:37:97:7b:a2:35:71:f9:c3:06:5b:3c:7b:a8: 06:3e:c1:4d:24:91:e7:11:66:27:27:9b:69:63:60: bd:bd:2f:ee:fb:f1:13:31:cf:86:b4:b4:34:da:0f: f1:e7:57:56:d6:ca:32:2b:ff:4f:e6:97:e1:d7:58: 3c:80:24:bb:e2:17:8b:59:c3:93:fd:78:5e:52:d3: bf:3a:e8:9b:6f:6b:fd:63:96:4c:8f:49:13:d5:56: 38:ed:47:cb:d8:68:b9:0d:37:2b:58:ec:cf:51:e8: f5:94:39:4c:2a:25:70:c1:9f:31:83:bf:0e:0e:55: 96:3b:45:7e:f1:92:54:08:79:4c:bd:7e:eb:97:a4: 0c:70:1d:25:0c:da:67:19:de:b7:fb:e5:f0:ed:8b: de:4b:6d:ae:a2:a3:83:c2:91:1e:17:04:5d:69:46: 76:a1:13:41:49:18:98:6f:3f:d7:45:12:be:f5:13: de:78:0f:d6:25:07:17:fa:37:45:d5:d7:34:20:d2: c8:ef:bd:bc:6c:27:7b:5b:45:db:40:c3:47:7e:57: 66:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:35:C0:05:C2:0C:AA:CE:BF:3C:2B:7B:EE:78:3A:0D:62:E4:0E:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c48d6c3e-2194-3a97-bcbf-aca018485e33.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:97:ef:2c:07:b7:8f:25:df:50:33:f5:7f:a7:d2:a9:34:a1: 21:75:a9:7b:61:aa:1a:5d:0d:6e:17:f2:75:41:ab:b4:fc:bb: 47:59:bb:93:c7:ce:7c:c6:b6:34:9f:6c:c9:f7:b4:bc:79:67: 36:f1:fa:86:01:e5:80:63:a8:96:4f:f0:29:4d:59:4e:40:5b: 57:3d:9a:25:67:4e:4a:35:2d:56:de:68:37:ab:36:5c:47:73: d9:c8:c7:98:ec:24:2a:09:da:74:c8:8a:52:8b:0a:e7:ef:91: bb:f9:9e:66:ac:00:24:c4:db:1a:76:20:3f:45:99:de:f2:2d: 1e:9d:e9:d4:d3:55:5d:63:0a:74:49:34:dd:38:f0:af:b2:3a: ad:1d:9f:c4:68:66:b1:ca:af:7e:df:0a:e4:d7:b9:c2:61:1c: fc:54:cb:be:b0:4d:52:5c:4a:a3:18:25:14:14:88:39:ba:d6: 9b:39:6f:82:04:b9:67:45:b2:2c:db:ac:54:f2:82:d5:2d:4b: 6e:dd:c6:e3:e7:ae:ae:ef:03:77:43:7d:42:e8:18:8c:87:81: 35:05:74:cc:d9:42:d1:fc:41:81:55:03:ef:04:49:dd:39:b1: c5:4f:2a:cc:6e:95:ed:32:dc:c5:c2:b1:0a:4e:97:4e:cc:e3: 06:b5:47:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgOnCLL6DWkN8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YmNiNjkzNGMtOWFmZi00OTlkLWEyNGEtMGM2OGFlOWNmYmZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomUX4KO0uCL1YVWQunTzSmjDLZ/YLXT+3pNT Sp2APHdBVtWkvfrEtdy9fdI1TDeXe6I1cfnDBls8e6gGPsFNJJHnEWYnJ5tpY2C9 vS/u+/ETMc+GtLQ02g/x51dW1soyK/9P5pfh11g8gCS74heLWcOT/XheUtO/Ouib b2v9Y5ZMj0kT1VY47UfL2Gi5DTcrWOzPUej1lDlMKiVwwZ8xg78ODlWWO0V+8ZJU CHlMvX7rl6QMcB0lDNpnGd63++Xw7YveS22uoqODwpEeFwRdaUZ2oRNBSRiYbz/X RRK+9RPeeA/WJQcX+jdF1dc0INLI7728bCd7W0XbQMNHfldm3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNM1wAXCDKrOvzwre+54Og1i5A56MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzQ4ZDZjM2UtMjE5NC0z YTk3LWJjYmYtYWNhMDE4NDg1ZTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHWX7ywHt48l31Az9X+n0qk0oSF1qXthqhpdDW4X8nVBq7T8u0dZu5PH znzGtjSfbMn3tLx5Zzbx+oYB5YBjqJZP8ClNWU5AW1c9miVnTko1LVbeaDerNlxH c9nIx5jsJCoJ2nTIilKLCufvkbv5nmasACTE2xp2ID9Fmd7yLR6d6dTTVV1jCnRJ NN048K+yOq0dn8RoZrHKr37fCuTXucJhHPxUy76wTVJcSqMYJRQUiDm61ps5b4IE uWdFsizbrFTygtUtS27dxuPnrq7vA3dDfULoGIyHgTUFdMzZQtH8QYFVA+8ESd05 scVPKsxule0y3MXCsQpOl07M4wa1R+E= -----END CERTIFICATE-----Generated at Sat Jul 26 00:14:30 2025 by rpki-client