$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa File: d647b28c-0262-394b-917f-9592b2c72397.roa (raw, json) Hash identifier: F+N5JdN2FKYMMxaVHGjd+xAWwCOizyvqiD/IHdIlgtk= Subject key identifier: FF:2D:E7:E4:19:62:4E:3A:7D:85:DD:BF:54:0B:99:82:BA:AB:15:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841146BF475CFB89A5FD3000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:46:bf:47:5c:fb:89:a5:fd:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=95728cd1-a58d-4ce8-9f34-dab1a22bc4d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:a1:bd:23:9d:84:be:e3:89:7b:fe:00:e6:45: c6:2b:93:04:d0:d9:00:13:a4:64:5e:01:c6:10:f9: b5:71:3e:6d:90:69:90:47:8c:53:f2:88:30:92:7f: 8b:10:7b:cf:8d:27:aa:ae:f1:ca:6b:d5:95:b7:d6: 20:aa:5b:01:9c:25:e9:d3:ac:71:df:f8:c7:7b:8e: 2f:e2:c1:92:74:29:92:75:f7:53:2b:cf:9c:54:60: 22:c6:54:e8:04:f6:5e:8e:72:f6:31:3d:a6:ff:c0: 3e:14:b3:5d:72:9e:db:68:a4:c2:fc:a5:90:57:8a: 51:9c:20:a2:cb:2c:39:30:6c:fb:78:d9:2e:fe:9d: 2b:dd:f5:22:12:a5:ce:42:da:3c:4d:fb:7d:4b:e2: dc:04:a4:10:e6:01:83:cc:90:82:d3:ed:b5:8c:22: 55:56:02:dc:35:b3:92:0a:31:2e:78:6a:6f:81:e5: 4b:63:6c:5d:a0:ee:14:19:a2:b5:d6:1d:1f:fb:57: 04:f8:a3:37:bb:5e:c6:a9:c8:c9:16:9c:b4:a6:f2: c6:8a:28:dd:c0:8c:13:0b:75:1e:bc:25:43:ac:6c: 09:c1:cb:0c:d5:48:27:0d:56:60:8e:77:05:de:1d: 45:81:2b:da:bc:6f:e0:65:16:58:1c:92:e4:ab:5a: 82:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:2D:E7:E4:19:62:4E:3A:7D:85:DD:BF:54:0B:99:82:BA:AB:15:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d647b28c-0262-394b-917f-9592b2c72397.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:b2:61:01:15:f2:29:54:2e:45:82:5e:49:57:56:a0:41:19: 4a:a9:4f:07:81:80:d1:96:5b:e1:61:e5:48:13:9a:97:d9:2e: c4:b3:8d:b3:b2:b1:eb:0f:f7:7b:89:c1:d3:70:43:34:ca:73: 8b:8e:27:fe:08:9e:1a:0c:27:07:ac:5c:0a:39:0c:f0:98:ba: 46:2f:55:ad:40:92:9e:88:c5:34:63:f9:05:01:72:4b:2d:da: 23:ce:c7:61:89:39:58:24:9a:c4:d5:fd:38:08:df:ac:31:cf: 4b:11:b2:4c:32:69:d4:76:ba:d7:b7:6e:9b:d6:89:20:60:53: 56:c5:5a:ad:73:36:76:9a:51:45:1b:d2:dd:90:16:19:f5:6f: 4a:c3:82:34:48:12:02:38:ba:66:6d:f0:f2:28:50:06:a1:51: 6c:e3:9f:36:10:6e:5b:13:f0:b5:3c:59:a3:c1:e2:dd:e3:50: 27:a1:3d:e1:eb:28:48:04:34:7d:a8:7b:c7:41:c9:92:f1:71: 9c:ae:47:ed:96:71:c1:26:d8:4f:89:20:8f:88:09:b5:5f:61: 2b:dd:bf:dc:3c:58:db:65:3d:ac:ae:56:bb:64:97:b5:5c:e9: 7d:57:57:e4:c0:87:c2:54:bb:1f:ab:bd:69:ba:47:a6:92:5e: eb:40:05:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUa/R1z7iaX9MAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OTU3MjhjZDEtYTU4ZC00Y2U4LTlmMzQtZGFiMWEyMmJjNGQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiKG9I52EvuOJe/4A5kXGK5ME0NkAE6RkXgHG EPm1cT5tkGmQR4xT8ogwkn+LEHvPjSeqrvHKa9WVt9YgqlsBnCXp06xx3/jHe44v 4sGSdCmSdfdTK8+cVGAixlToBPZejnL2MT2m/8A+FLNdcp7baKTC/KWQV4pRnCCi yyw5MGz7eNku/p0r3fUiEqXOQto8Tft9S+LcBKQQ5gGDzJCC0+21jCJVVgLcNbOS CjEueGpvgeVLY2xdoO4UGaK11h0f+1cE+KM3u17GqcjJFpy0pvLGiijdwIwTC3Ue vCVDrGwJwcsM1UgnDVZgjncF3h1FgSvavG/gZRZYHJLkq1qCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP8t5+QZYk46fYXdv1QLmYK6qxW2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDY0N2IyOGMtMDI2Mi0z OTRiLTkxN2YtOTU5MmIyYzcyMzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB+yYQEV8ilULkWCXklXVqBBGUqpTweBgNGWW+Fh5UgTmpfZLsSzjbOy sesP93uJwdNwQzTKc4uOJ/4InhoMJwesXAo5DPCYukYvVa1Akp6IxTRj+QUBckst 2iPOx2GJOVgkmsTV/TgI36wxz0sRskwyadR2ute3bpvWiSBgU1bFWq1zNnaaUUUb 0t2QFhn1b0rDgjRIEgI4umZt8PIoUAahUWzjnzYQblsT8LU8WaPB4t3jUCehPeHr KEgENH2oe8dByZLxcZyuR+2WccEm2E+JII+ICbVfYSvdv9w8WNtlPayuVrtkl7Vc 6X1XV+TAh8JUux+rvWm6R6aSXutABfM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:46 2025 by rpki-client