$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa File: dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa (raw, json) Hash identifier: 0OoOewaO5sCAVz2Qm+QpZ8N/wk4bfre7BdVd1Rl7qQg= Subject key identifier: 13:7A:AE:2B:ED:DA:C3:AF:D2:FC:F4:EB:C5:C7:C7:2C:D1:B9:C1:A1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF8EA29B33494A5A1980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:8e:a2:9b:33:49:4a:5a:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f65f3aea-4c91-4b26-9e8c-e3d13e25341e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:84:49:56:b4:2d:44:3d:c6:d3:dc:3b:de:fb: 0b:fd:83:33:9b:d9:18:a2:6a:f7:ff:18:d7:db:7f: 56:00:b3:09:3d:8c:65:41:3a:20:f1:97:07:c6:7e: ad:c9:16:75:50:b9:e3:9d:4b:ee:75:0b:6a:35:0c: 24:35:8d:2f:27:b7:3a:87:71:0e:5f:f8:57:99:73: a8:67:29:a1:0b:c1:c4:bc:bf:05:c5:d3:0a:f8:d2: 9a:cc:06:30:97:6f:d5:c9:7a:15:8f:5b:05:75:4e: ff:6d:49:e8:34:56:9f:af:d6:79:f8:45:74:fd:f4: 60:fa:3c:f4:98:5d:15:d3:79:c7:06:6a:45:75:e5: 81:bd:68:68:99:96:1b:99:1f:45:b3:3c:19:da:21: a3:38:83:ab:de:07:df:ea:31:78:cd:4c:13:59:09: 85:82:09:fb:53:1f:cd:7b:15:80:71:ee:76:84:7d: ae:b6:45:8b:e5:dd:ac:fe:17:b7:b2:ad:cb:3e:71: 67:1e:4c:b1:4a:49:2d:73:82:79:a7:cd:1b:01:f9: 24:f9:a1:ba:f4:c7:68:12:2d:a0:8e:61:76:a0:e4: 10:d7:c0:8b:d8:95:6d:89:df:eb:de:46:1e:77:1d: 21:58:b2:b9:7c:f9:23:56:16:a8:2e:b3:b9:a5:5e: 6a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:7A:AE:2B:ED:DA:C3:AF:D2:FC:F4:EB:C5:C7:C7:2C:D1:B9:C1:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd7528fc-7f52-323b-aae3-9aa1ca12354e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:a2:44:34:c6:a3:09:78:6a:23:3f:1c:2c:4f:bb:fe:9f:3c: 11:bb:54:a4:e5:9f:cc:b5:f9:b1:fc:64:24:ba:a9:20:46:25: 07:49:a1:1d:f3:dd:73:70:96:65:21:e6:32:df:dc:5d:b5:57: 18:61:b1:a9:91:45:6e:ca:d9:60:58:a0:48:fe:5f:ea:29:fd: 13:be:63:24:56:32:46:a0:9a:f5:d0:be:7c:25:39:88:f4:07: 14:ce:c8:5b:ab:47:c6:36:50:8c:2f:be:9d:ea:50:3b:37:fe: 36:fa:4b:87:45:c8:ef:7e:a2:28:8f:ef:2d:37:3a:08:d7:8d: 96:10:6c:4e:55:a5:72:fe:26:cc:af:16:91:a5:6d:a9:c7:a5: df:6b:f6:80:10:02:e8:c9:9c:09:71:89:2c:c5:71:77:29:e3: f8:38:15:53:69:c6:61:b4:8e:15:51:0b:f1:0f:5b:c6:f0:7f: 47:b7:a8:ca:01:61:0e:d2:9f:75:cc:8d:a0:22:52:e1:4e:f9: a1:c5:e5:af:b9:c5:ab:b4:d9:12:a9:f0:9a:cc:a1:2b:4d:a0: 15:f9:23:a5:92:1b:29:7d:9a:6a:91:9d:f9:53:e3:83:5d:f7: 64:28:b2:8a:f0:79:39:5f:cf:f5:53:2d:ee:be:f2:99:84:0d: d8:b6:69:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf+OopszSUpaGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjY1ZjNhZWEtNGM5MS00YjI2LTllOGMtZTNkMTNlMjUzNDFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4RJVrQtRD3G09w73vsL/YMzm9kYomr3/xjX 239WALMJPYxlQTog8ZcHxn6tyRZ1ULnjnUvudQtqNQwkNY0vJ7c6h3EOX/hXmXOo ZymhC8HEvL8FxdMK+NKazAYwl2/VyXoVj1sFdU7/bUnoNFafr9Z5+EV0/fRg+jz0 mF0V03nHBmpFdeWBvWhomZYbmR9FszwZ2iGjOIOr3gff6jF4zUwTWQmFggn7Ux/N exWAce52hH2utkWL5d2s/he3sq3LPnFnHkyxSkktc4J5p80bAfkk+aG69MdoEi2g jmF2oOQQ18CL2JVtid/r3kYedx0hWLK5fPkjVhaoLrO5pV5qaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBN6rivt2sOv0vz068XHxyzRucGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQ3NTI4ZmMtN2Y1Mi0z MjNiLWFhZTMtOWFhMWNhMTIzNTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOiRDTGowl4aiM/HCxPu/6fPBG7VKTln8y1+bH8ZCS6qSBGJQdJoR3z 3XNwlmUh5jLf3F21VxhhsamRRW7K2WBYoEj+X+op/RO+YyRWMkagmvXQvnwlOYj0 BxTOyFurR8Y2UIwvvp3qUDs3/jb6S4dFyO9+oiiP7y03OgjXjZYQbE5VpXL+Jsyv FpGlbanHpd9r9oAQAujJnAlxiSzFcXcp4/g4FVNpxmG0jhVRC/EPW8bwf0e3qMoB YQ7Sn3XMjaAiUuFO+aHF5a+5xau02RKp8JrMoStNoBX5I6WSGyl9mmqRnflT44Nd 92QosorweTlfz/VTLe6+8pmEDdi2aVM= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:57 2025 by rpki-client