$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d549648c-cd33-3bcc-a228-ef1cc8c9b3f7.roa File: d549648c-cd33-3bcc-a228-ef1cc8c9b3f7.roa (raw, json) Hash identifier: /XjXPPJRWrFpNaH0YHaqlpiRCYB6r3SU/jD76a6z2Rg= Subject key identifier: 0E:29:9B:0A:EE:96:B1:68:2B:77:3E:FF:BB:E0:E4:98:C8:A1:8E:D1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841145A8152DA6A9EB5105C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d549648c-cd33-3bcc-a228-ef1cc8c9b3f7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:45:a8:15:2d:a6:a9:eb:51:05:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6b346f9b-a823-4513-85f2-569d9ef8e303 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:57:bc:02:1e:e8:b1:8c:21:e0:78:87:bd:cf: bf:11:8a:52:e1:ae:fc:ad:7e:d0:6b:b3:a1:34:59: ed:cc:60:73:06:67:88:e4:09:41:d4:5b:6e:e6:fe: 2c:8d:63:99:70:5b:c2:db:20:25:06:8e:8f:90:3f: 34:b3:e1:5e:6c:fb:5f:93:09:5d:f1:0b:19:56:4a: 3f:e9:07:88:9c:ee:21:e3:5a:aa:7a:6c:7a:8c:0a: d6:8a:33:f4:32:ed:2b:1b:c5:5e:d3:37:8f:b3:6c: a3:37:3c:b9:75:bd:d5:04:85:b8:76:33:20:96:4a: cd:68:95:d7:9b:2f:f4:23:05:50:2c:64:dc:3d:f9: 15:29:73:88:25:2b:da:82:05:70:52:5d:be:8b:88: b8:41:27:cd:82:cd:cf:d2:b5:3c:c8:c0:c8:97:b0: 0c:82:3e:ba:2a:84:07:b8:17:7c:ac:34:ff:42:7d: 96:53:ed:4b:10:55:d5:f4:94:f9:37:56:c5:ed:14: 9c:5f:38:b9:e3:42:67:66:96:47:f9:91:e7:8a:4a: 4b:54:f3:5a:41:6c:6b:b3:d3:11:08:bd:8c:3d:4e: 0a:4f:33:50:b5:ae:48:13:d9:73:2a:b1:4b:27:08: 01:c2:05:05:44:6b:f9:dc:a7:b9:32:0a:76:c6:86: 9d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:29:9B:0A:EE:96:B1:68:2B:77:3E:FF:BB:E0:E4:98:C8:A1:8E:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d549648c-cd33-3bcc-a228-ef1cc8c9b3f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:c9:04:ef:50:88:57:a8:24:3d:df:d7:08:61:ae:1e:ee:5a: 39:40:73:24:9c:49:85:99:cc:5a:bd:17:0a:0a:a8:41:1e:64: f5:93:16:ae:57:3c:c9:50:40:de:7a:d1:9c:e2:30:e5:20:88: 84:d9:6a:81:82:1b:90:cd:13:56:05:1e:4f:3a:e9:5c:11:0c: 6f:d6:a5:e4:6e:8c:48:52:60:43:05:b8:eb:ad:50:6e:a7:b5: 45:97:00:29:69:0d:5b:0f:07:f7:da:c5:72:79:05:73:22:a2: d7:04:1f:2e:58:d2:12:e9:b0:ef:ea:9e:a2:c6:7f:f7:97:6b: 94:1b:b3:b5:09:dd:d0:de:3d:61:46:9b:6d:2b:85:e8:95:b0: 74:92:44:df:2a:c1:59:ec:23:c3:9d:5a:ff:80:97:93:cc:90: 6c:e3:bf:0a:7d:53:09:b8:b7:f9:58:13:d3:bd:98:81:11:48: 45:8a:b9:30:ea:fa:72:29:9a:48:f3:75:01:9a:cd:09:4d:66: db:16:d3:b9:e0:fd:9c:78:c7:0d:c2:4b:ac:c8:f4:aa:f4:5f: 55:2c:ba:a9:70:00:68:0e:e3:29:ad:f5:6c:35:c2:f1:97:62: ab:72:55:81:aa:7b:02:51:92:bf:bc:dc:42:16:4a:cf:7c:4d: 4a:07:e8:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUWoFS2mqetRBcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmIzNDZmOWItYTgyMy00NTEzLTg1ZjItNTY5ZDllZjhlMzAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1e8Ah7osYwh4HiHvc+/EYpS4a78rX7Qa7Oh NFntzGBzBmeI5AlB1Ftu5v4sjWOZcFvC2yAlBo6PkD80s+FebPtfkwld8QsZVko/ 6QeInO4h41qqemx6jArWijP0Mu0rG8Ve0zePs2yjNzy5db3VBIW4djMglkrNaJXX my/0IwVQLGTcPfkVKXOIJSvaggVwUl2+i4i4QSfNgs3P0rU8yMDIl7AMgj66KoQH uBd8rDT/Qn2WU+1LEFXV9JT5N1bF7RScXzi540JnZpZH+ZHnikpLVPNaQWxrs9MR CL2MPU4KTzNQta5IE9lzKrFLJwgBwgUFRGv53Ke5Mgp2xoadKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA4pmwrulrFoK3c+/7vg5JjIoY7RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDU0OTY0OGMtY2QzMy0z YmNjLWEyMjgtZWYxY2M4YzliM2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADjJBO9QiFeoJD3f1whhrh7uWjlAcyScSYWZzFq9FwoKqEEeZPWTFq5X PMlQQN560ZziMOUgiITZaoGCG5DNE1YFHk866VwRDG/WpeRujEhSYEMFuOutUG6n tUWXAClpDVsPB/faxXJ5BXMiotcEHy5Y0hLpsO/qnqLGf/eXa5Qbs7UJ3dDePWFG m20rheiVsHSSRN8qwVnsI8OdWv+Al5PMkGzjvwp9Uwm4t/lYE9O9mIERSEWKuTDq +nIpmkjzdQGazQlNZtsW07ng/Zx4xw3CS6zI9Kr0X1UsuqlwAGgO4ymt9Ww1wvGX YqtyVYGqewJRkr+83EIWSs98TUoH6HE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:31 2025 by rpki-client