$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa File: da586d84-433b-3f79-a0e6-17aa74076e21.roa (raw, json) Hash identifier: 34jnkd+Je8Fai+haPunPoP6v+W9uSavvDmfjNCZR+aE= Subject key identifier: DA:E2:34:4E:3D:6A:7F:F6:84:62:04:AF:D4:3E:67:EF:5E:45:5A:48 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841142853E9F5A5F22FD7F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:42:85:3e:9f:5a:5f:22:fd:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=39d5bcb4-51d8-4cdc-8582-419bc7208e63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:2b:d2:2c:25:90:2b:80:95:7c:cf:cf:26:a4: fb:5c:89:60:b2:d4:a1:39:9f:cb:d4:27:73:9c:bf: 27:3a:c4:61:94:67:58:cb:94:47:ce:e5:c4:56:fd: d8:01:74:e1:0e:ba:ab:74:86:ae:9d:54:f2:41:2e: 18:e2:ef:b8:5d:71:0d:61:07:92:71:82:1e:f4:ef: 50:71:39:f2:71:b6:20:fa:ee:e3:47:42:15:bd:3b: 10:0e:67:95:66:00:0f:12:9c:26:6e:72:33:f4:48: 7e:9d:f3:82:c9:37:13:75:38:4b:c2:37:07:53:54: 96:19:1f:3c:87:86:2b:42:72:38:e3:82:59:05:47: ee:da:d6:53:73:93:67:fc:6c:bd:da:bf:a9:8f:83: 98:96:d4:2e:1e:66:ed:47:af:3c:0f:a6:26:c3:68: 08:d4:e6:2e:df:b7:22:a5:50:55:76:ca:e3:c6:ac: 0f:98:70:fe:f3:5c:ef:a2:59:2b:68:3f:6f:91:44: 55:b7:db:f6:e4:9e:95:4b:67:23:dc:d0:a7:72:a3: 95:3a:55:55:a5:35:1b:20:6e:e0:57:25:e2:bd:4c: 88:09:44:8a:09:8b:cb:d5:f2:5b:ac:ba:e6:be:aa: 90:bd:fd:dc:0a:65:ab:4b:29:a3:19:bf:05:7c:e3: a4:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:E2:34:4E:3D:6A:7F:F6:84:62:04:AF:D4:3E:67:EF:5E:45:5A:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:9a:f1:92:7b:cc:fe:42:e3:51:11:32:19:9d:b2:6e:f7:ea: 2b:1f:e9:eb:8f:d8:be:40:b2:d6:4b:95:16:1e:77:76:5f:f1: 0a:31:db:e9:10:81:2d:8d:f4:28:33:b0:83:48:53:77:ec:dd: 98:00:d9:bf:f0:18:a9:24:90:33:07:23:e1:e1:a9:74:ee:b8: ff:81:31:09:25:71:31:f5:87:a3:b4:8d:87:d2:8e:34:e9:14: 88:12:5c:47:7c:65:38:2a:24:e3:ba:cf:f7:cb:38:5f:1b:7d: a8:16:5e:66:a9:93:49:ef:67:9e:b1:d6:18:fe:1e:3e:ef:7f: 30:e7:0c:2c:6c:7a:1d:e4:33:29:b6:85:cb:6d:71:13:b7:58: 82:3e:61:82:e8:5f:67:4d:6b:7d:52:42:f0:55:45:45:d1:7f: 32:5e:64:f6:0d:0e:cd:7b:bd:7e:a6:31:ff:09:e5:51:5d:90: 47:f7:41:00:c0:5d:c9:ec:bf:77:85:86:6f:96:ad:11:3a:4e: 01:9c:26:32:59:0e:1d:61:39:43:66:9f:11:bd:8d:e9:52:7d: 47:42:9f:2d:8f:39:7a:a3:2f:16:1b:de:8a:1a:77:a3:1e:cb: 21:e6:f3:f9:fc:7f:b0:6e:26:ad:c2:00:1b:68:56:49:f1:0f: 2f:14:95:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUKFPp9aXyL9fwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzlkNWJjYjQtNTFkOC00Y2RjLTg1ODItNDE5YmM3MjA4ZTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkyvSLCWQK4CVfM/PJqT7XIlgstShOZ/L1Cdz nL8nOsRhlGdYy5RHzuXEVv3YAXThDrqrdIaunVTyQS4Y4u+4XXENYQeScYIe9O9Q cTnycbYg+u7jR0IVvTsQDmeVZgAPEpwmbnIz9Eh+nfOCyTcTdThLwjcHU1SWGR88 h4YrQnI444JZBUfu2tZTc5Nn/Gy92r+pj4OYltQuHmbtR688D6Ymw2gI1OYu37ci pVBVdsrjxqwPmHD+81zvolkraD9vkURVt9v25J6VS2cj3NCncqOVOlVVpTUbIG7g VyXivUyICUSKCYvL1fJbrLrmvqqQvf3cCmWrSymjGb8FfOOkfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNriNE49an/2hGIEr9Q+Z+9eRVpIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGE1ODZkODQtNDMzYi0z Zjc5LWEwZTYtMTdhYTc0MDc2ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADia8ZJ7zP5C41ERMhmdsm736isf6euP2L5AstZLlRYed3Zf8Qox2+kQ gS2N9CgzsINIU3fs3ZgA2b/wGKkkkDMHI+HhqXTuuP+BMQklcTH1h6O0jYfSjjTp FIgSXEd8ZTgqJOO6z/fLOF8bfagWXmapk0nvZ56x1hj+Hj7vfzDnDCxseh3kMym2 hcttcRO3WII+YYLoX2dNa31SQvBVRUXRfzJeZPYNDs17vX6mMf8J5VFdkEf3QQDA Xcnsv3eFhm+WrRE6TgGcJjJZDh1hOUNmnxG9jelSfUdCny2POXqjLxYb3ooad6Me yyHm8/n8f7BuJq3CABtoVknxDy8UleY= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:47 2025 by rpki-client