$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa File: cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa (raw, json) Hash identifier: OP5bzChJEYNqaQfmX0h5rJYfHVs1XUvKvfVixEAlE+o= Subject key identifier: 41:23:87:8E:32:77:F7:44:AB:47:C6:A0:FB:B0:28:47:44:E0:0A:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114343013E122CF1F76480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.67.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:43:43:01:3e:12:2c:f1:f7:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=200aeec8-c626-4b84-aa9f-805a7ec49acc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:38:6a:b9:39:0c:b1:3a:aa:06:f0:9b:03: 54:03:a4:b6:20:1e:16:58:f2:99:56:e0:ef:b3:18: b4:10:f0:09:4b:eb:40:8a:ff:d5:7e:1c:2d:35:d6: c3:c9:de:93:66:81:6a:b0:5a:69:ff:47:b9:e6:a3: ac:c2:52:81:91:1c:74:b2:ca:eb:2e:6a:34:13:d6: 6d:5e:fa:37:2d:55:c3:a7:ef:8b:be:76:f7:f7:4b: 81:3d:c3:c6:59:23:9d:e3:5c:92:02:ef:1d:1e:b1: 19:19:56:23:f1:9c:60:68:10:d8:7d:a5:02:3b:46: a3:50:39:7e:71:52:2d:70:1a:bb:cc:4f:6e:cd:ae: 30:4f:5e:60:10:2f:8e:cf:c6:bf:52:eb:d2:83:be: 09:23:bf:5a:bb:1d:9b:66:2b:c1:75:b1:ea:8a:49: c9:80:19:8e:06:40:b7:44:d8:0e:82:8a:35:ad:da: e4:f4:1b:0f:f5:61:10:1a:7c:3c:28:42:db:aa:90: 27:15:d8:87:2f:8d:40:99:82:c3:68:75:38:d3:55: 8d:6e:f1:ee:88:2b:81:6f:2b:8a:4e:a8:08:fd:b6: c2:00:08:56:2a:60:f3:d8:39:ae:de:d5:17:0d:06: 9a:62:2c:71:40:12:9a:e4:fc:a2:31:41:82:a2:11: 22:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:23:87:8E:32:77:F7:44:AB:47:C6:A0:FB:B0:28:47:44:E0:0A:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cc36c9c9-a7a7-3645-b779-bb2dfaa0b05f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.67.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:07:13:07:ee:a7:6d:86:21:7f:94:1d:6c:0b:e3:20:94:aa: 73:0e:e1:f5:b6:03:b7:5b:1f:47:b6:00:7c:0b:aa:bd:4a:e1: 51:77:b3:53:d2:ed:20:6d:5e:e5:9b:db:09:df:40:83:eb:c3: 39:04:b8:d1:2a:30:15:40:3a:9d:80:8a:03:e4:cc:f9:8d:35: 94:6f:e3:21:bd:36:43:a8:4b:3a:b7:86:30:78:1a:82:cc:51: 91:e9:a0:34:73:c9:2a:8b:81:08:e6:4f:21:58:66:3a:35:8b: 59:8d:8b:7b:da:4c:26:f0:77:92:a7:53:61:0b:7e:f7:a8:61: d9:2f:93:df:0f:25:f7:67:9f:02:71:a1:8e:4a:a6:4f:0d:e8: f6:c5:e4:02:9b:b0:a0:45:63:7c:b7:9d:de:ec:25:e2:4d:a3: eb:48:60:43:c9:1a:6c:ab:b4:2c:1d:d4:86:bb:12:08:86:26: 43:c9:0a:ef:0c:4a:4d:d1:41:03:47:a7:0c:07:a0:05:b7:a8: 04:29:6b:38:42:f2:fb:0f:1c:29:6a:3e:3c:c1:f1:31:cd:5f: a2:c8:6e:d3:45:94:94:7d:b0:60:c6:2b:aa:25:65:f3:56:cf: 17:0c:bc:ee:10:9f:8a:10:8c:07:f4:37:30:57:f1:5b:e6:fb: 83:ad:fe:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUNDAT4SLPH3ZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MjAwYWVlYzgtYzYyNi00Yjg0LWFhOWYtODA1YTdlYzQ5YWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLQ4ark5DLE6qgbwmwNUA6S2IB4WWPKZVuDv sxi0EPAJS+tAiv/VfhwtNdbDyd6TZoFqsFpp/0e55qOswlKBkRx0ssrrLmo0E9Zt Xvo3LVXDp++Lvnb390uBPcPGWSOd41ySAu8dHrEZGVYj8ZxgaBDYfaUCO0ajUDl+ cVItcBq7zE9uza4wT15gEC+Oz8a/UuvSg74JI79aux2bZivBdbHqiknJgBmOBkC3 RNgOgoo1rdrk9BsP9WEQGnw8KELbqpAnFdiHL41AmYLDaHU401WNbvHuiCuBbyuK TqgI/bbCAAhWKmDz2Dmu3tUXDQaaYixxQBKa5PyiMUGCohEiaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEEjh44yd/dEq0fGoPuwKEdE4ApDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2MzNmM5YzktYTdhNy0z NjQ1LWI3NzktYmIyZGZhYTBiMDVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgHEwfup22GIX+UHWwL4yCUqnMO4fW2A7dbH0e2AHwLqr1K4VF3s1PS 7SBtXuWb2wnfQIPrwzkEuNEqMBVAOp2AigPkzPmNNZRv4yG9NkOoSzq3hjB4GoLM UZHpoDRzySqLgQjmTyFYZjo1i1mNi3vaTCbwd5KnU2ELfveoYdkvk98PJfdnnwJx oY5Kpk8N6PbF5AKbsKBFY3y3nd7sJeJNo+tIYEPJGmyrtCwd1Ia7EgiGJkPJCu8M Sk3RQQNHpwwHoAW3qAQpazhC8vsPHClqPjzB8THNX6LIbtNFlJR9sGDGK6olZfNW zxcMvO4Qn4oQjAf0NzBX8Vvm+4Ot/gs= -----END CERTIFICATE-----Generated at Sat Jul 26 00:04:56 2025 by rpki-client