$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d062e90f-6a33-3713-a120-6582f98f58e6.roa File: d062e90f-6a33-3713-a120-6582f98f58e6.roa (raw, json) Hash identifier: 6kKxV5erwf6SKdV5q9k3UrULlFkZqV4Q8KeVEGc3xGc= Subject key identifier: A3:4A:A0:17:F6:B4:72:14:F2:C7:DA:10:E3:37:B8:CE:72:4A:9C:B2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114BC0D55E4DE6B2FC1100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d062e90f-6a33-3713-a120-6582f98f58e6.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4b:c0:d5:5e:4d:e6:b2:fc:11:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=d3fa8939-18fa-4645-9540-717b05cfbb4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:dc:00:fc:75:d0:93:76:2b:17:b4:7a:6f:17: e0:ff:68:da:0d:0f:61:ae:fa:5b:47:c5:cf:f2:98: c3:b0:96:1e:82:77:33:f8:b6:45:05:c6:9e:ec:a6: 93:a6:3a:cf:db:8f:48:72:70:98:f9:9d:5a:8d:27: d7:00:11:76:90:2d:ec:7e:16:2a:0e:48:e3:cd:00: f9:67:f8:c0:42:c2:44:ac:f6:33:d0:63:5c:18:01: 59:b2:08:0b:29:44:c1:8f:8e:c4:3b:e4:12:91:ad: 12:64:3b:be:d5:6e:4b:71:95:21:61:9e:6a:43:cb: 55:8c:57:e2:17:bf:90:04:ed:72:a9:02:0e:75:09: fc:7e:a7:2f:36:69:4f:6d:a7:ee:f0:01:8b:40:1a: c3:1c:7d:6b:f0:c9:8c:9d:92:fe:b1:39:65:89:b5: 07:d0:e1:53:a0:bf:d0:a2:ee:2b:68:0c:7d:43:37: db:5c:c5:a7:55:13:4c:37:a5:7b:c0:97:bf:2a:4a: a5:64:55:c1:2e:31:32:f0:81:43:df:60:c1:28:8b: a7:1b:86:53:0d:1f:fc:00:c1:f5:94:35:bf:10:23: 1b:a8:66:4a:b8:1c:30:8c:63:5a:60:f1:99:a1:ea: 69:3a:5e:70:5c:32:f9:bb:83:44:54:f5:c8:8e:24: 44:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:4A:A0:17:F6:B4:72:14:F2:C7:DA:10:E3:37:B8:CE:72:4A:9C:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d062e90f-6a33-3713-a120-6582f98f58e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a7:4c:a1:4c:db:0b:22:e5:c1:0a:cc:a3:cb:77:4c:94:23:2a: 66:4c:20:ad:2e:51:48:5c:9f:89:1b:23:c0:b0:c5:43:a7:38: b3:c5:33:85:0f:90:4f:5f:14:e0:09:ea:5a:d9:0b:a0:32:9f: 36:50:0b:72:25:17:84:23:b7:7a:2f:1f:c6:21:6a:ad:e7:84: fa:54:6f:34:6e:37:36:42:d0:6e:f4:90:25:eb:d5:c6:39:92: 26:9d:86:87:36:f0:4c:4a:98:3c:82:72:60:d2:ab:b2:35:8b: e9:1e:92:59:0d:02:dc:6a:fa:25:bc:79:79:12:54:43:ff:33: f9:e6:20:d3:a7:b3:ab:34:13:11:fd:19:59:c7:77:ae:6d:db: 4a:87:95:64:ba:b0:2f:60:0f:c3:ae:ef:b3:07:e2:0a:63:c2: cf:0e:da:0d:62:67:60:70:5c:25:a8:5d:77:d0:d1:d8:94:5c: 06:7f:37:01:8d:66:d8:e8:1d:06:b9:29:7f:5e:38:cb:63:9b: 85:6f:81:1b:f3:23:c9:71:73:6c:2b:0e:b7:ba:54:82:69:00: 66:55:e8:2e:d4:1e:0b:76:d1:4d:ee:0e:bc:57:9a:05:d8:4d: 1d:4a:e2:ef:1a:31:b2:85:15:7f:00:c9:68:36:fa:cc:b1:f3: f8:8a:8f:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUvA1V5N5rL8EQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZDNmYTg5MzktMThmYS00NjQ1LTk1NDAtNzE3YjA1Y2ZiYjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0twA/HXQk3YrF7R6bxfg/2jaDQ9hrvpbR8XP 8pjDsJYegncz+LZFBcae7KaTpjrP249IcnCY+Z1ajSfXABF2kC3sfhYqDkjjzQD5 Z/jAQsJErPYz0GNcGAFZsggLKUTBj47EO+QSka0SZDu+1W5LcZUhYZ5qQ8tVjFfi F7+QBO1yqQIOdQn8fqcvNmlPbafu8AGLQBrDHH1r8MmMnZL+sTllibUH0OFToL/Q ou4raAx9QzfbXMWnVRNMN6V7wJe/KkqlZFXBLjEy8IFD32DBKIunG4ZTDR/8AMH1 lDW/ECMbqGZKuBwwjGNaYPGZoeppOl5wXDL5u4NEVPXIjiREpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNKoBf2tHIU8sfaEOM3uM5ySpyyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDA2MmU5MGYtNmEzMy0z NzEzLWExMjAtNjU4MmY5OGY1OGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKdMoUzbCyLlwQrMo8t3TJQjKmZMIK0uUUhcn4kbI8CwxUOnOLPFM4UP kE9fFOAJ6lrZC6AynzZQC3IlF4Qjt3ovH8Yhaq3nhPpUbzRuNzZC0G70kCXr1cY5 kiadhoc28ExKmDyCcmDSq7I1i+keklkNAtxq+iW8eXkSVEP/M/nmINOns6s0ExH9 GVnHd65t20qHlWS6sC9gD8Ou77MH4gpjws8O2g1iZ2BwXCWoXXfQ0diUXAZ/NwGN ZtjoHQa5KX9eOMtjm4VvgRvzI8lxc2wrDre6VIJpAGZV6C7UHgt20U3uDrxXmgXY TR1K4u8aMbKFFX8AyWg2+syx8/iKj8o= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:01 2025 by rpki-client