$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9e7088d-b57d-31e2-bf8e-8eb047fde7e5.roa File: c9e7088d-b57d-31e2-bf8e-8eb047fde7e5.roa (raw, json) Hash identifier: 74A7SR11oRCF+QXFQcyINVJXtRGDK9aG+vzoLQPk6Os= Subject key identifier: 3C:31:9E:44:4A:FD:B3:B3:3F:39:C5:E0:63:15:44:C3:70:22:25:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841200A9957465F2228443C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9e7088d-b57d-31e2-bf8e-8eb047fde7e5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:00:a9:95:74:65:f2:22:84:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1d4fc4ff-c9f5-458d-ba37-58dd9bd9b588 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a4:66:6d:f7:ae:3c:75:38:0a:b6:87:14:c4: de:3c:ed:2f:3b:45:5e:94:b5:fe:4a:1e:5b:d9:2b: 31:a7:5d:e3:68:44:83:d4:48:a4:0a:a5:04:5a:5c: 54:b4:49:55:b1:da:aa:76:a4:fb:66:dd:3d:2d:a3: 40:6b:a8:8f:5e:77:3b:d8:7a:76:94:3d:62:4c:33: ad:07:50:fb:d3:49:66:77:fa:72:b2:44:fc:4a:3d: 0d:8f:e0:1d:29:e0:b3:89:e9:ac:08:55:8c:25:38: 21:7c:3e:aa:c2:da:09:f9:6d:08:e9:14:9b:5c:0d: c3:47:31:1b:be:12:8d:5a:6d:a8:77:65:1d:eb:15: ae:2b:9a:91:ca:3d:a6:f2:92:20:12:35:d8:50:ba: 31:32:49:c2:34:a8:3e:12:a9:63:fe:eb:cb:3b:f9: 74:3a:45:79:8e:2c:e2:7e:10:39:36:66:88:f4:0a: 30:49:c8:cf:f7:9a:62:28:1f:20:32:d1:58:2c:c5: eb:0c:da:f3:50:ba:c7:65:26:57:27:a9:37:2f:e9: 71:66:da:c9:15:ad:d8:2d:c7:10:a0:cd:08:c6:f6: a6:e7:5c:fc:01:7f:b9:66:1f:8a:dc:90:ee:e5:fd: b7:79:02:dc:ad:28:61:10:26:a1:c9:b9:3b:18:47: 1b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:31:9E:44:4A:FD:B3:B3:3F:39:C5:E0:63:15:44:C3:70:22:25:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9e7088d-b57d-31e2-bf8e-8eb047fde7e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:3b:e5:c2:8f:95:5e:89:6b:75:cb:14:d2:14:58:74:cd:f5: a1:1f:2c:aa:b5:b8:31:0f:80:aa:dd:5a:28:cc:f6:82:1a:a8: 0d:7a:3d:4d:ac:65:06:b1:3d:d6:65:45:25:db:8b:39:cd:1c: 0e:ed:c7:27:d0:77:f1:d6:37:1c:52:eb:03:bf:e3:cf:31:ed: b8:8b:69:ce:d8:a1:79:29:b9:a9:f0:7f:50:a4:12:18:fe:f1: 81:cf:4e:8f:1b:0a:06:e5:d0:b3:4e:e2:3a:60:39:37:46:05: 3c:e7:2e:56:aa:34:5c:8c:86:e3:9b:2b:e1:99:ee:ea:b3:2a: 03:9f:40:4d:4b:2c:e9:95:5d:42:9f:40:df:88:3a:ab:64:a7: 00:a8:38:8b:c0:02:79:32:9a:26:47:ba:d8:d3:98:19:98:27: b7:22:1f:e0:f6:19:e8:b1:1c:59:59:36:65:af:42:c1:be:a9: d7:41:df:f9:f4:34:06:de:dc:b8:d4:c4:0a:7b:e7:3d:e0:28: 6a:9d:73:37:e8:5f:2f:57:e5:f1:07:f8:07:ee:cc:1c:41:a0: ac:24:ac:98:39:d5:48:37:77:65:b9:ab:79:fa:95:d5:65:ea: ca:56:dd:6e:fd:25:f2:e7:79:c6:70:0f:cc:e8:f7:b8:86:a1: 74:65:ba:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgCplXRl8iKEQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWQ0ZmM0ZmYtYzlmNS00NThkLWJhMzctNThkZDliZDliNTg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKRmbfeuPHU4CraHFMTePO0vO0VelLX+Sh5b 2Ssxp13jaESD1EikCqUEWlxUtElVsdqqdqT7Zt09LaNAa6iPXnc72Hp2lD1iTDOt B1D700lmd/pyskT8Sj0Nj+AdKeCziemsCFWMJTghfD6qwtoJ+W0I6RSbXA3DRzEb vhKNWm2od2Ud6xWuK5qRyj2m8pIgEjXYULoxMknCNKg+Eqlj/uvLO/l0OkV5jizi fhA5NmaI9AowScjP95piKB8gMtFYLMXrDNrzULrHZSZXJ6k3L+lxZtrJFa3YLccQ oM0Ixvam51z8AX+5Zh+K3JDu5f23eQLcrShhECahybk7GEcbBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwxnkRK/bOzPznF4GMVRMNwIiUHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzllNzA4OGQtYjU3ZC0z MWUyLWJmOGUtOGViMDQ3ZmRlN2U1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALg75cKPlV6Ja3XLFNIUWHTN9aEfLKq1uDEPgKrdWijM9oIaqA16PU2s ZQaxPdZlRSXbiznNHA7txyfQd/HWNxxS6wO/488x7biLac7YoXkpuanwf1CkEhj+ 8YHPTo8bCgbl0LNO4jpgOTdGBTznLlaqNFyMhuObK+GZ7uqzKgOfQE1LLOmVXUKf QN+IOqtkpwCoOIvAAnkymiZHutjTmBmYJ7ciH+D2GeixHFlZNmWvQsG+qddB3/n0 NAbe3LjUxAp75z3gKGqdczfoXy9X5fEH+AfuzBxBoKwkrJg51Ug3d2W5q3n6ldVl 6spW3W79JfLnecZwD8zo97iGoXRlutw= -----END CERTIFICATE-----Generated at Sat Jul 26 11:11:51 2025 by rpki-client