$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa File: d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa (raw, json) Hash identifier: B6ZkNR9xRo3YLW2UQzQFTF8/qfTwf2DqRRFiJddGDRM= Subject key identifier: 19:8B:1E:34:20:4E:11:36:51:60:C6:20:41:F3:49:BA:CE:E0:8B:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF71DD27FAB850343F60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:71:dd:27:fa:b8:50:34:3f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0a30f57b-dc18-4f10-9b30-88c6f98ac013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:84:7f:a1:5c:c1:d3:71:98:10:43:a5:27:07: 2a:ce:ad:1f:24:44:fc:22:50:26:2a:7b:3b:44:39: 88:df:47:2d:ac:a7:cc:0b:a4:4c:ba:5e:c2:69:0e: ae:08:d1:7b:ae:69:d5:4a:5d:a1:0e:91:cf:e6:72: cf:92:8a:1a:f9:da:cd:4f:a7:e0:62:b4:c4:c1:f0: 33:25:ae:c5:19:fb:64:6e:3a:b4:58:38:06:f2:aa: c9:55:4e:f8:20:99:0b:8e:e4:04:cb:43:f0:ac:45: c9:e4:68:52:b2:03:1a:13:62:33:cc:36:04:c5:10: 09:02:cb:b6:83:b5:53:98:a9:97:95:b7:54:32:ca: 1e:3d:1a:49:f5:d2:f5:42:16:95:87:7d:c1:05:58: 8c:b6:8f:3c:5a:43:84:73:ac:5b:24:2d:1a:ed:76: 83:1c:9e:d7:0b:b6:76:59:c6:ff:a6:95:fd:05:89: ad:be:0f:9c:8e:3c:ac:ab:e1:d9:ea:e2:d6:c2:ad: f8:9c:d5:93:a5:bd:cb:59:c4:86:b4:ae:51:f9:7d: de:3b:ca:ab:c6:60:90:52:bb:ee:55:26:8e:ba:58: 30:ab:80:9b:41:36:80:72:92:e9:0b:a2:dd:78:05: 13:16:06:66:dd:21:db:8b:e0:b7:50:85:55:53:c6: 1b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8B:1E:34:20:4E:11:36:51:60:C6:20:41:F3:49:BA:CE:E0:8B:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d7f77bf6-de76-3c3b-b698-56eee6ca2b6a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:ad:90:0e:4c:af:7c:36:3c:0e:17:f8:ee:df:25:fc:f8:20: 2d:09:d4:72:72:a1:d8:54:4f:d3:0e:a1:9e:45:29:dc:b1:21: 38:6e:83:82:c3:b6:49:10:d9:88:99:a8:c3:2f:81:4a:4c:56: 9d:b5:51:7f:68:d7:8a:30:cd:34:e0:20:3e:ae:c8:06:4f:4d: cb:e1:6d:b1:08:88:b4:f2:85:74:02:4b:ec:5f:1a:5c:db:85: e9:ae:b4:bb:22:da:ff:86:bc:53:35:a5:56:37:17:07:41:a9: c9:f6:aa:0f:7e:4f:82:bf:3f:ff:3d:89:a0:e7:cd:e8:98:68: 0d:82:ac:3b:ec:ef:52:a3:75:93:a7:91:88:72:d2:79:1f:8e: 2f:02:20:28:4c:aa:3e:ac:98:f0:85:bd:e3:de:09:f4:5d:6f: 68:35:22:5d:86:f8:d7:07:1e:9b:98:94:4a:6e:d7:3b:e4:9a: a4:d2:9c:11:6c:89:12:cf:e8:82:bb:3f:34:7d:48:76:bf:7c: fe:52:bf:a0:95:16:95:89:72:ec:95:84:d6:fc:9a:f2:39:b8: 00:e3:74:28:db:6d:18:34:50:8c:8f:e3:ca:e6:e2:8c:98:6f: c9:33:56:b4:10:d0:4e:72:3e:df:8f:dc:72:96:3a:89:3b:29: c8:76:a1:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf9x3Sf6uFA0P2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGEzMGY1N2ItZGMxOC00ZjEwLTliMzAtODhjNmY5OGFjMDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4R/oVzB03GYEEOlJwcqzq0fJET8IlAmKns7 RDmI30ctrKfMC6RMul7CaQ6uCNF7rmnVSl2hDpHP5nLPkooa+drNT6fgYrTEwfAz Ja7FGftkbjq0WDgG8qrJVU74IJkLjuQEy0PwrEXJ5GhSsgMaE2IzzDYExRAJAsu2 g7VTmKmXlbdUMsoePRpJ9dL1QhaVh33BBViMto88WkOEc6xbJC0a7XaDHJ7XC7Z2 Wcb/ppX9BYmtvg+cjjysq+HZ6uLWwq34nNWTpb3LWcSGtK5R+X3eO8qrxmCQUrvu VSaOulgwq4CbQTaAcpLpC6LdeAUTFgZm3SHbi+C3UIVVU8YbZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBmLHjQgThE2UWDGIEHzSbrO4It1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDdmNzdiZjYtZGU3Ni0z YzNiLWI2OTgtNTZlZWU2Y2EyYjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKytkA5Mr3w2PA4X+O7fJfz4IC0J1HJyodhUT9MOoZ5FKdyxIThug4LD tkkQ2YiZqMMvgUpMVp21UX9o14owzTTgID6uyAZPTcvhbbEIiLTyhXQCS+xfGlzb hemutLsi2v+GvFM1pVY3FwdBqcn2qg9+T4K/P/89iaDnzeiYaA2CrDvs71KjdZOn kYhy0nkfji8CIChMqj6smPCFvePeCfRdb2g1Il2G+NcHHpuYlEpu1zvkmqTSnBFs iRLP6IK7PzR9SHa/fP5Sv6CVFpWJcuyVhNb8mvI5uADjdCjbbRg0UIyP48rm4oyY b8kzVrQQ0E5yPt+P3HKWOok7Kch2oUg= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:27 2025 by rpki-client