$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa File: d12c5bca-e1ca-3d00-afc0-e005b203b536.roa (raw, json) Hash identifier: pVM90BXFA56d9tFDbwv5d82goAM+QFU8S6QL92jGuFc= Subject key identifier: 97:01:79:D4:14:33:12:59:90:D4:5B:7C:02:73:CD:CF:D5:34:01:E2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FD004937CC2C32F4C1C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fd:00:49:37:cc:2c:32:f4:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=7a7ef04f-5f61-4c3f-94d1-a2a5fc793bb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:cf:20:1a:ec:e1:21:4b:cf:87:e5:dd:e3:79: 3f:3c:b9:6d:e8:33:1a:3b:09:fe:9f:57:2b:61:82: 2c:d1:0c:01:7e:14:5b:74:7d:ca:d6:85:48:6f:e9: 2c:6d:ed:ef:fa:b1:95:07:05:ff:36:31:c6:1d:64: fa:ec:f0:53:64:52:0b:49:ce:c5:c9:a6:7b:ec:43: ea:d1:d7:47:f6:40:f1:c5:9b:71:6d:5a:b3:f0:a8: a8:09:43:ee:2b:09:34:84:0c:b6:f2:25:9d:c5:4f: 12:02:f8:d9:02:fd:d9:8e:be:17:a7:4c:2d:c9:74: 5d:77:bf:54:dc:eb:08:7d:09:57:68:95:ea:d1:86: ed:3c:ca:ff:c6:a6:dd:e5:3b:8e:4d:81:23:fb:2d: 00:76:72:99:b8:b7:11:5a:bc:15:f0:30:84:ce:3c: 0a:d2:51:fd:3d:fc:63:94:fc:17:7c:8c:e7:54:be: fb:d8:8a:b4:ff:0e:bf:1b:37:15:23:93:51:d4:88: 0d:29:0f:31:70:06:cf:66:e6:a5:29:0b:87:71:2f: 0f:55:cc:cf:94:c6:47:fa:1a:64:35:d7:a0:4f:1a: ea:30:61:f7:4d:30:c3:92:53:39:1b:74:aa:94:a0: a9:50:24:d2:fb:0c:28:93:bf:7d:bd:2c:2a:5a:8d: 11:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:01:79:D4:14:33:12:59:90:D4:5B:7C:02:73:CD:CF:D5:34:01:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:79:a3:4e:af:85:b6:0d:eb:4f:4b:72:76:e4:7d:d2:c0:e2: c0:fa:bd:66:41:4e:65:56:5f:fb:4a:11:46:75:6e:48:44:48: ba:a2:0f:02:a4:53:0b:77:9e:dc:7a:d9:fd:f3:3b:ae:dd:0c: fc:3e:ed:e7:9f:bd:27:f2:f1:a8:1a:96:49:e3:f3:3b:ba:d5: 11:66:4a:ee:fe:22:3f:ef:72:c0:e2:f4:0e:b9:a2:ed:91:38: 81:47:81:b1:97:0a:e9:93:16:34:cd:d9:f1:1a:27:3a:52:ee: b5:94:22:2d:0d:0c:5e:4e:47:61:9c:00:77:0e:3c:73:24:98: 9c:53:d1:07:4e:55:4a:66:e0:59:18:1f:92:8e:af:7d:ce:0d: 7c:bc:95:d0:ba:26:23:aa:b5:b0:22:79:23:bd:e0:15:4f:37: b9:90:1c:b9:9b:e6:df:00:09:69:82:fd:b8:9f:90:f7:fc:77: e2:22:8a:53:31:5d:ec:ae:92:19:71:e5:1b:c8:ba:57:8b:cb: 64:e8:02:14:e4:92:45:43:4c:80:7c:39:21:6f:50:89:b8:10: 26:69:5b:38:73:05:88:1d:7a:ad:89:7f:62:04:13:a2:5a:2a: e6:f7:c6:c7:15:6c:f7:cf:3d:87:6f:f3:20:e6:9e:88:a5:15: 2f:71:45:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf0ASTfMLDL0wcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk N2E3ZWYwNGYtNWY2MS00YzNmLTk0ZDEtYTJhNWZjNzkzYmI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj88gGuzhIUvPh+Xd43k/PLlt6DMaOwn+n1cr YYIs0QwBfhRbdH3K1oVIb+ksbe3v+rGVBwX/NjHGHWT67PBTZFILSc7FyaZ77EPq 0ddH9kDxxZtxbVqz8KioCUPuKwk0hAy28iWdxU8SAvjZAv3Zjr4Xp0wtyXRdd79U 3OsIfQlXaJXq0YbtPMr/xqbd5TuOTYEj+y0AdnKZuLcRWrwV8DCEzjwK0lH9Pfxj lPwXfIznVL772Iq0/w6/GzcVI5NR1IgNKQ8xcAbPZualKQuHcS8PVczPlMZH+hpk NdegTxrqMGH3TTDDklM5G3SqlKCpUCTS+wwok799vSwqWo0RBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJcBedQUMxJZkNRbfAJzzc/VNAHiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEyYzViY2EtZTFjYS0z ZDAwLWFmYzAtZTAwNWIyMDNiNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJ5o06vhbYN609LcnbkfdLA4sD6vWZBTmVWX/tKEUZ1bkhESLqiDwKk Uwt3ntx62f3zO67dDPw+7eefvSfy8agalknj8zu61RFmSu7+Ij/vcsDi9A65ou2R OIFHgbGXCumTFjTN2fEaJzpS7rWUIi0NDF5OR2GcAHcOPHMkmJxT0QdOVUpm4FkY H5KOr33ODXy8ldC6JiOqtbAieSO94BVPN7mQHLmb5t8ACWmC/bifkPf8d+IiilMx Xeyukhlx5RvIuleLy2ToAhTkkkVDTIB8OSFvUIm4ECZpWzhzBYgdeq2Jf2IEE6Ja Kub3xscVbPfPPYdv8yDmnoilFS9xRak= -----END CERTIFICATE-----Generated at Sat Jul 26 00:13:27 2025 by rpki-client