$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa File: c9d8e783-12ac-3b61-9dc9-88f74787c212.roa (raw, json) Hash identifier: 8OcJCr7KvQW8ElQ3f4f0og1GuqbJkLgJO+eZEfPg6jA= Subject key identifier: FF:D8:68:BB:E6:ED:CE:A1:5A:26:BD:02:FF:21:DE:98:6F:90:74:10 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FED393C44128D7B18100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fe:d3:93:c4:41:28:d7:b1:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=05bc704d-90d5-4993-9901-789b4b551c96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:a7:e2:8c:99:ab:18:1e:57:eb:f5:73:af:d6: d1:ee:cc:e3:5f:c3:99:ab:f7:9a:60:f2:53:5e:ec: a4:5d:a0:c7:99:4d:52:71:c7:6e:5d:28:8b:c0:0a: 90:0e:49:fe:e4:a3:c6:fc:f7:39:2b:d8:98:50:55: 9b:aa:b9:fb:7f:10:01:02:52:85:50:8b:95:a5:42: 97:83:da:f0:ad:6c:42:29:91:c9:5a:a2:f8:6e:6a: 8b:36:ca:3c:0e:c2:a3:a7:da:b3:2a:7c:bd:2e:f0: 11:bd:ff:03:36:33:bb:6a:93:a7:5b:fb:2f:bb:f4: 05:d1:d5:2d:67:98:25:0f:9a:29:54:a3:2c:1d:55: 4d:e2:43:07:56:fe:58:e1:5a:97:31:4a:23:bf:39: 8f:24:bf:29:d1:7d:e8:e6:1c:56:bf:1e:6e:0b:d1: f4:89:f4:cf:7d:73:ec:a6:9f:f8:72:d5:95:5f:dc: 62:00:25:58:84:d8:04:a1:d8:62:59:d5:ff:ab:83: 9e:f9:26:58:56:bb:3c:25:4c:97:73:76:a5:2f:64: a1:13:43:ee:a8:af:b9:b9:ea:6a:a1:f0:b1:15:9e: 34:e0:ca:5e:14:e1:2d:19:4b:c1:17:21:ee:3e:4c: 83:75:58:3b:80:94:c9:e4:3e:8d:6c:0d:ea:c6:8c: 45:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:D8:68:BB:E6:ED:CE:A1:5A:26:BD:02:FF:21:DE:98:6F:90:74:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9d8e783-12ac-3b61-9dc9-88f74787c212.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d1:43:69:f1:fd:9d:26:a4:6c:c2:55:58:19:ff:ab:4c:19:00: 2f:16:16:7d:63:6a:d6:02:6e:57:fd:57:32:29:79:ce:20:5c: cc:70:a4:00:8b:c1:ef:3f:a7:cc:38:79:e1:70:5e:83:bb:3c: b2:ff:ef:cc:57:95:7f:61:87:b4:45:9e:1a:80:4c:2e:d8:08: 7f:24:b0:65:a6:44:38:a4:73:a2:f6:d4:60:22:61:c8:a7:f0: ed:fc:f9:ed:69:77:42:17:e7:43:8c:79:f8:55:75:26:1b:93: 52:16:1a:72:e1:9d:c4:45:6d:59:81:92:ba:0c:c9:16:41:a6: 41:f6:b9:51:03:ec:a0:cf:db:f1:e9:79:fa:ae:3a:85:d6:79: 75:c9:f7:3f:9b:fd:2e:72:ab:00:fa:a3:f6:53:53:be:41:9d: 57:b8:13:ad:db:3a:f4:3a:e5:b6:cb:92:90:00:a7:36:a7:24: 84:fe:a7:a9:23:0b:5e:f6:50:ad:2c:09:37:77:8a:2b:3e:15: d8:be:39:5d:ae:27:c1:00:8c:16:42:b7:df:d1:7a:e6:de:fc: 16:3a:13:36:52:4e:e2:4a:9d:2d:b2:e0:fe:21:78:ee:7b:32: b1:aa:14:a7:1b:07:fb:d1:4b:e5:48:fe:60:d4:b4:c2:93:17: de:c7:63:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf7Tk8RBKNexgQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDViYzcwNGQtOTBkNS00OTkzLTk5MDEtNzg5YjRiNTUxYzk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqfijJmrGB5X6/Vzr9bR7szjX8OZq/eaYPJT XuykXaDHmU1SccduXSiLwAqQDkn+5KPG/Pc5K9iYUFWbqrn7fxABAlKFUIuVpUKX g9rwrWxCKZHJWqL4bmqLNso8DsKjp9qzKny9LvARvf8DNjO7apOnW/svu/QF0dUt Z5glD5opVKMsHVVN4kMHVv5Y4VqXMUojvzmPJL8p0X3o5hxWvx5uC9H0ifTPfXPs pp/4ctWVX9xiACVYhNgEodhiWdX/q4Oe+SZYVrs8JUyXc3alL2ShE0PuqK+5uepq ofCxFZ404MpeFOEtGUvBFyHuPkyDdVg7gJTJ5D6NbA3qxoxFEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/YaLvm7c6hWia9Av8h3phvkHQQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlkOGU3ODMtMTJhYy0z YjYxLTlkYzktODhmNzQ3ODdjMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANFDafH9nSakbMJVWBn/q0wZAC8WFn1jatYCblf9VzIpec4gXMxwpACL we8/p8w4eeFwXoO7PLL/78xXlX9hh7RFnhqATC7YCH8ksGWmRDikc6L21GAiYcin 8O38+e1pd0IX50OMefhVdSYbk1IWGnLhncRFbVmBkroMyRZBpkH2uVED7KDP2/Hp efquOoXWeXXJ9z+b/S5yqwD6o/ZTU75BnVe4E63bOvQ65bbLkpAApzanJIT+p6kj C172UK0sCTd3iis+Fdi+OV2uJ8EAjBZCt9/Reube/BY6EzZSTuJKnS2y4P4heO57 MrGqFKcbB/vRS+VI/mDUtMKTF97HY6s= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:26 2025 by rpki-client