$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9b5e10c-1128-32ee-a533-204d607e7e78.roa File: d9b5e10c-1128-32ee-a533-204d607e7e78.roa (raw, json) Hash identifier: 4ZYZAFbaPu0yIP0WmA6i8hrS9geGe9mbTjLzcdcyfEI= Subject key identifier: 43:25:04:54:C8:22:ED:69:9A:FE:BE:97:74:9E:F3:AE:0D:38:10:94 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114178E987C830E274E800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9b5e10c-1128-32ee-a533-204d607e7e78.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 162.72.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:41:78:e9:87:c8:30:e2:74:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3cd643b6-9e80-4d5b-8246-b4749937dedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:87:39:a0:91:e9:18:91:df:8e:d2:e2:21:b9: 4a:fc:cb:09:29:5b:62:2e:8b:a9:4d:51:19:85:e8: 7f:32:f1:53:68:67:4f:43:8b:4e:36:29:21:4c:f8: 3f:f8:23:c1:94:3c:7c:a5:fe:4b:14:3e:df:17:c3: fb:07:9c:47:a5:e8:5e:a0:25:71:50:83:9f:6b:9d: e6:30:48:fb:cc:0b:93:d6:c0:68:77:f5:38:df:97: 2e:23:25:b1:6f:54:8d:f2:24:4b:33:b0:e1:45:2f: 36:28:68:9f:3b:71:52:97:ad:3f:46:eb:4c:2b:e5: 5b:d6:af:14:d7:3c:5f:a5:90:f2:5c:93:1e:c5:1a: 31:66:f8:e3:7d:24:6f:60:d6:91:91:63:67:0e:6f: 8f:cf:c0:da:a7:17:8b:dc:0b:eb:de:ab:46:04:16: cc:58:99:cd:48:9b:18:c5:2b:59:22:16:3a:1c:6b: 37:4a:2f:30:f4:67:54:4f:57:6d:2f:9a:f7:b5:47: 83:63:c6:89:a1:98:f7:8e:f3:67:82:01:de:eb:cb: ac:10:5a:52:a0:6d:b6:cb:06:de:22:b6:4a:b1:34: 58:bd:49:31:12:97:08:90:29:3a:0d:7b:45:16:ed: 7a:40:4f:40:0f:2c:aa:68:a0:ee:7f:c2:43:65:e0: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:25:04:54:C8:22:ED:69:9A:FE:BE:97:74:9E:F3:AE:0D:38:10:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9b5e10c-1128-32ee-a533-204d607e7e78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:a6:c9:89:c1:31:1a:db:4c:27:bd:60:07:ae:18:1c:5b:8e: 59:90:47:d0:ba:74:47:d9:7e:78:b3:ea:fc:6d:9b:fd:b6:ea: 2c:2c:91:9a:68:f5:51:5e:31:95:3a:2d:f4:9c:a1:70:db:5d: 8a:d9:88:0c:24:94:ee:d0:32:93:5d:a6:53:f1:4e:72:f5:3c: 4c:77:b9:fd:2f:2b:ae:be:b2:49:16:82:ae:90:ae:f6:d3:f1: de:eb:c1:bc:da:06:c2:13:b7:71:89:ed:c7:5c:1d:1d:5b:bf: 4f:ad:57:d5:11:39:1b:75:aa:0d:75:26:36:c0:ae:65:8c:1e: f8:88:ce:28:56:6d:62:98:cd:25:c4:32:36:78:8f:cc:24:64: c5:e7:dd:2d:53:13:7c:44:60:83:0e:3b:1d:db:90:27:af:d5: e7:bc:2d:d7:af:9a:a7:d9:4e:24:52:10:d9:1a:30:44:bc:2c: cc:c3:6c:1e:e3:d8:63:f9:28:48:31:3c:9e:e6:89:4f:a5:fe: fa:35:05:95:89:d4:3c:db:37:54:a8:3b:ac:73:dd:90:d6:52: 25:6a:f0:20:0b:42:82:d3:01:b0:e9:f6:5f:a9:a4:b3:63:22: 31:2a:f6:1a:97:85:dd:b5:51:cc:f9:83:b4:5b:46:fd:d7:dc: c4:5e:60:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUF46YfIMOJ06AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2NkNjQzYjYtOWU4MC00ZDViLTgyNDYtYjQ3NDk5MzdkZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoc5oJHpGJHfjtLiIblK/MsJKVtiLoupTVEZ heh/MvFTaGdPQ4tONikhTPg/+CPBlDx8pf5LFD7fF8P7B5xHpeheoCVxUIOfa53m MEj7zAuT1sBod/U435cuIyWxb1SN8iRLM7DhRS82KGifO3FSl60/RutMK+Vb1q8U 1zxfpZDyXJMexRoxZvjjfSRvYNaRkWNnDm+Pz8DapxeL3Avr3qtGBBbMWJnNSJsY xStZIhY6HGs3Si8w9GdUT1dtL5r3tUeDY8aJoZj3jvNnggHe68usEFpSoG22ywbe IrZKsTRYvUkxEpcIkCk6DXtFFu16QE9ADyyqaKDuf8JDZeAnwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMlBFTIIu1pmv6+l3Se864NOBCUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDliNWUxMGMtMTEyOC0z MmVlLWE1MzMtMjA0ZDYwN2U3ZTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACGmyYnBMRrbTCe9YAeuGBxbjlmQR9C6dEfZfniz6vxtm/226iwskZpo 9VFeMZU6LfScoXDbXYrZiAwklO7QMpNdplPxTnL1PEx3uf0vK66+skkWgq6QrvbT 8d7rwbzaBsITt3GJ7cdcHR1bv0+tV9URORt1qg11JjbArmWMHviIzihWbWKYzSXE MjZ4j8wkZMXn3S1TE3xEYIMOOx3bkCev1ee8LdevmqfZTiRSENkaMES8LMzDbB7j 2GP5KEgxPJ7miU+l/vo1BZWJ1DzbN1SoO6xz3ZDWUiVq8CALQoLTAbDp9l+ppLNj IjEq9hqXhd21Ucz5g7RbRv3X3MReYBQ= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:20 2025 by rpki-client