$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa File: d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa (raw, json) Hash identifier: 8jsmWBRpxgW73QcN+l9jUvSRxmzZQk3+W9nv7ivx6Vc= Subject key identifier: 86:57:BE:14:8D:C2:0A:C1:BF:2F:7A:0B:2A:3E:8A:67:91:F9:78:0C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841200302A06165E66A3CF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:00:30:2a:06:16:5e:66:a3:cf:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c0c34ecf-8b37-4e49-8426-b8817f8758b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ca:f6:bf:03:86:a2:1c:08:50:bf:c1:4b:1f: 63:d0:b3:c0:3a:58:27:47:52:3a:6a:f8:fc:d1:90: 51:90:a6:7a:d1:8b:3f:95:40:3f:a7:2a:45:42:a8: de:6b:11:1b:04:03:b0:33:bc:2a:b4:61:99:8f:76: ec:78:4d:86:f4:f6:e1:fc:59:f4:d0:f5:e9:de:26: bf:72:0c:de:69:c8:b0:c7:03:82:2d:a8:9b:fb:7c: 0d:ec:5f:89:8f:ff:f2:56:14:9f:30:af:5e:b9:17: b8:2c:53:c0:f1:8a:7e:7f:e8:8e:58:7d:f1:7b:fb: 21:36:f5:bb:26:be:11:58:d3:56:fd:76:f5:1e:a1: 27:52:54:46:79:f9:68:7d:9e:a8:db:6d:2f:7f:32: 80:31:82:4e:eb:d6:d0:8f:f1:14:3e:48:34:d4:ab: 06:f8:c3:7e:16:fe:c0:ad:68:51:84:c1:6b:c8:0f: 43:6d:b8:55:8f:62:93:29:cf:30:e4:84:bb:92:86: d7:a5:f4:2f:dc:b7:bb:cd:01:0e:38:14:f5:f7:1d: e0:16:3a:43:7e:45:33:5d:0a:f7:c2:06:bc:9f:bf: 8a:49:9f:8d:6e:ab:e1:54:42:4f:bc:25:b3:01:82: d1:19:e4:92:79:f7:c5:32:f3:5d:8b:bd:9d:88:32: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:57:BE:14:8D:C2:0A:C1:BF:2F:7A:0B:2A:3E:8A:67:91:F9:78:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d2e4c00f-1092-3c2e-a8f5-abe3e94438e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:b6:b5:30:d0:79:06:40:73:0f:16:22:8e:2a:5b:ca:1f:88: 55:0b:5a:80:26:2f:d1:01:c0:65:a7:64:81:48:1a:c0:46:f2: 5c:05:29:59:46:6b:4b:a7:1e:5a:db:2b:a7:1d:08:2d:33:d4: bf:e8:8f:b2:a9:03:bc:cb:c4:cb:17:f8:5f:78:d7:44:cb:3c: a0:2f:ae:4f:75:5d:50:0e:45:f6:72:8a:36:18:c5:83:88:75: 59:14:1c:ee:7a:27:3f:6b:ef:8f:90:8a:6a:ca:7b:63:8d:57: b9:01:62:20:99:11:1b:6d:ee:97:8f:ee:a5:fd:64:09:5d:14: 93:e1:37:f0:62:56:d1:5a:c3:a8:ca:89:6f:07:37:b4:35:87: eb:9c:8f:20:3f:bc:a4:5f:c3:b4:d7:71:5c:3a:e0:a1:1f:c3: 56:3f:d8:bf:de:48:f8:8f:8f:f7:77:48:12:48:d4:ff:37:42: 48:f7:2e:f9:96:ee:ad:6a:eb:a8:6a:c1:e0:3f:ab:a4:2c:16: b8:2e:c8:f4:73:d6:46:8a:6e:b9:ee:f6:0d:fc:ed:fb:1e:79: c0:d1:89:dc:a8:03:a8:67:18:fe:86:1e:7d:b5:22:81:55:e5: 61:55:49:44:98:58:89:3a:21:33:4e:ff:4b:3a:e6:38:6c:13: 21:6b:fb:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgAwKgYWXmajzwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzBjMzRlY2YtOGIzNy00ZTQ5LTg0MjYtYjg4MTdmODc1OGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcr2vwOGohwIUL/BSx9j0LPAOlgnR1I6avj8 0ZBRkKZ60Ys/lUA/pypFQqjeaxEbBAOwM7wqtGGZj3bseE2G9Pbh/Fn00PXp3ia/ cgzeaciwxwOCLaib+3wN7F+Jj//yVhSfMK9euRe4LFPA8Yp+f+iOWH3xe/shNvW7 Jr4RWNNW/Xb1HqEnUlRGeflofZ6o220vfzKAMYJO69bQj/EUPkg01KsG+MN+Fv7A rWhRhMFryA9DbbhVj2KTKc8w5IS7kobXpfQv3Le7zQEOOBT19x3gFjpDfkUzXQr3 wga8n7+KSZ+NbqvhVEJPvCWzAYLRGeSSeffFMvNdi72diDLPFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZXvhSNwgrBvy96Cyo+imeR+XgMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDJlNGMwMGYtMTA5Mi0z YzJlLWE4ZjUtYWJlM2U5NDQzOGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANa2tTDQeQZAcw8WIo4qW8ofiFULWoAmL9EBwGWnZIFIGsBG8lwFKVlG a0unHlrbK6cdCC0z1L/oj7KpA7zLxMsX+F9410TLPKAvrk91XVAORfZyijYYxYOI dVkUHO56Jz9r74+QimrKe2ONV7kBYiCZERtt7peP7qX9ZAldFJPhN/BiVtFaw6jK iW8HN7Q1h+ucjyA/vKRfw7TXcVw64KEfw1Y/2L/eSPiPj/d3SBJI1P83Qkj3LvmW 7q1q66hqweA/q6QsFrguyPRz1kaKbrnu9g387fseecDRidyoA6hnGP6GHn21IoFV 5WFVSUSYWIk6ITNO/0s65jhsEyFr+4c= -----END CERTIFICATE-----Generated at Sat Jul 26 00:00:53 2025 by rpki-client