$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa File: c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa (raw, json) Hash identifier: KARH2BY8fbfXq97w60ZyqUARnGpEIS3S24/+qH2dg84= Subject key identifier: D2:CA:17:DC:D1:7A:48:25:C8:AB:F9:7A:A8:CE:5F:19:9E:59:EC:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8412031B2AC8BD3520D9A080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:03:1b:2a:c8:bd:35:20:d9:a0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e56ffc29-6c42-429e-ba6f-e33a2249fe9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:75:b1:07:fc:13:20:79:43:0c:a7:f8:38:fb: 29:52:98:45:ea:69:e8:1c:33:aa:8d:53:ea:87:8f: 36:7e:d1:6a:9f:86:64:cc:2d:1b:be:4d:9e:d8:8c: 43:ca:8c:fc:a0:55:02:1e:6a:57:ff:79:49:1e:e7: 17:15:3e:52:37:0c:98:58:29:00:ad:b3:1f:bf:ae: 2e:ec:1d:7e:f7:77:12:a7:87:d6:47:7d:c1:e5:c8: 53:0c:91:f4:48:2a:67:e2:f9:62:fe:5c:4f:90:21: 8d:2f:8d:02:91:51:74:1e:10:12:8c:23:a6:7d:d7: c5:ff:d1:c5:6d:da:f9:36:17:0b:8f:6b:76:1c:68: e8:30:51:6a:c8:cb:ea:ec:c3:b2:d0:16:eb:f3:4e: cd:89:5e:bb:3c:0e:8e:ec:df:98:f5:eb:59:bf:3d: d6:11:28:72:3f:37:37:1d:ac:b4:5b:56:3b:96:d5: f1:9f:9d:ad:c3:9c:0b:ab:ca:c8:e1:bb:dd:c5:6d: d0:44:6a:cc:ea:de:b7:7b:91:1c:a7:e3:a0:0d:72: 7a:45:12:47:df:32:7e:c9:77:07:31:db:aa:48:20: 8b:b9:eb:4a:b0:32:4b:df:85:da:4a:58:5b:be:23: d2:7b:7d:18:ed:84:25:c0:27:af:c4:db:40:ed:ae: a9:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:CA:17:DC:D1:7A:48:25:C8:AB:F9:7A:A8:CE:5F:19:9E:59:EC:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6c98a0c-0d0b-337e-a4cd-d68cddcf83d9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:cd:02:2e:bf:b0:b4:0e:74:1a:a8:e2:7e:62:23:60:ed:83: 6e:d3:dc:82:3e:6e:55:6b:bf:99:97:74:a6:e2:60:39:e3:db: b6:64:95:40:66:8d:3b:73:01:ab:b6:d0:19:99:8d:5d:36:3d: 0f:13:d8:5b:af:58:e4:62:2f:f2:d1:8e:57:0a:1c:db:af:63: d9:e8:b8:49:4a:e2:ca:d1:10:6f:9b:46:c0:b9:6c:a6:80:57: 4c:c9:52:41:42:92:e3:33:8b:9e:b9:69:39:eb:8c:66:28:b4: 5d:21:3a:e7:64:0c:0a:55:34:8d:d7:dc:06:bb:da:f2:4f:27: c9:86:7f:93:fb:15:82:e6:da:48:2c:d8:c1:0a:e2:6f:5c:da: 29:8c:03:63:21:5f:3a:a8:c0:5e:b9:23:c7:da:55:39:05:a8: c4:fc:64:13:74:1f:bb:1c:4b:cd:0a:80:41:64:51:74:3a:51: b7:20:9a:c5:40:b4:7a:44:6a:58:4b:4e:ef:5b:5e:e2:ef:0b: 2c:24:94:87:36:88:5a:ce:8c:26:af:77:cc:c3:26:ce:96:59: a4:f2:44:27:00:15:75:47:f4:71:0e:5e:5e:86:00:28:4a:49: 20:0c:43:b8:d6:81:61:76:5d:1c:f4:a7:5c:b4:3a:19:7d:55: cb:71:10:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgMbKsi9NSDZoIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTU2ZmZjMjktNmM0Mi00MjllLWJhNmYtZTMzYTIyNDlmZTlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmnWxB/wTIHlDDKf4OPspUphF6mnoHDOqjVPq h482ftFqn4ZkzC0bvk2e2IxDyoz8oFUCHmpX/3lJHucXFT5SNwyYWCkArbMfv64u 7B1+93cSp4fWR33B5chTDJH0SCpn4vli/lxPkCGNL40CkVF0HhASjCOmfdfF/9HF bdr5NhcLj2t2HGjoMFFqyMvq7MOy0Bbr807NiV67PA6O7N+Y9etZvz3WEShyPzc3 Hay0W1Y7ltXxn52tw5wLq8rI4bvdxW3QRGrM6t63e5Ecp+OgDXJ6RRJH3zJ+yXcH MduqSCCLuetKsDJL34XaSlhbviPSe30Y7YQlwCevxNtA7a6pyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNLKF9zRekglyKv5eqjOXxmeWexzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZjOThhMGMtMGQwYi0z MzdlLWE0Y2QtZDY4Y2RkY2Y4M2Q5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHNAi6/sLQOdBqo4n5iI2Dtg27T3II+blVrv5mXdKbiYDnj27ZklUBm jTtzAau20BmZjV02PQ8T2FuvWORiL/LRjlcKHNuvY9nouElK4srREG+bRsC5bKaA V0zJUkFCkuMzi565aTnrjGYotF0hOudkDApVNI3X3Aa72vJPJ8mGf5P7FYLm2kgs 2MEK4m9c2imMA2MhXzqowF65I8faVTkFqMT8ZBN0H7scS80KgEFkUXQ6UbcgmsVA tHpEalhLTu9bXuLvCywklIc2iFrOjCavd8zDJs6WWaTyRCcAFXVH9HEOXl6GAChK SSAMQ7jWgWF2XRz0p1y0Ohl9VctxEEs= -----END CERTIFICATE-----Generated at Fri Jul 25 23:59:07 2025 by rpki-client