$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa File: df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa (raw, json) Hash identifier: jBNSy7fVkjHaSu/LFOUQ0KmdN/rfn714+6ETRkEtnH8= Subject key identifier: A8:57:B7:3E:E9:7D:49:96:4A:B7:C0:74:1E:E0:3A:B6:CD:42:EA:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114907A516D9FB7338C980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.39.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:49:07:a5:16:d9:fb:73:38:c9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=523ca20c-968c-4686-8852-21e682899470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f7:df:57:7c:bf:52:63:58:1d:4d:0f:61:9b: 4b:32:d3:65:79:bc:77:62:ca:97:ce:45:09:01:68: 25:74:b3:94:8d:5d:d8:0c:cd:db:a5:e1:4f:26:9f: 0f:30:82:46:0e:c2:7b:27:fa:bc:5d:e5:e3:16:29: 93:fd:29:6a:33:18:92:8e:2e:97:d8:8d:be:1f:ba: b0:22:e0:5b:64:31:e9:ea:58:2d:a1:68:54:a6:28: dc:d4:48:98:b0:73:94:c0:a4:4f:7f:08:24:a0:8f: 86:c4:0b:57:39:ec:21:d1:ba:7f:05:0c:a8:64:cc: 30:69:ce:a4:fe:06:e5:52:21:8f:ed:d6:83:9a:f3: 43:d5:79:52:56:39:8b:d5:83:75:77:31:51:fe:e5: 8d:fb:f3:ad:78:54:cb:5d:5b:fe:fe:b5:cd:07:7d: 7b:2f:f5:d7:92:58:ce:4a:56:e3:03:73:55:49:90: 11:c6:88:ae:65:39:0d:e6:8b:be:22:f0:df:fb:8d: 29:d2:1f:74:71:af:74:dc:4e:3e:cd:fb:19:9a:b2: 43:66:6b:0a:ec:38:35:c6:0f:b7:32:2d:77:a6:f8: 40:57:75:ad:c7:02:46:d1:ab:45:0d:e6:0a:be:c2: 78:cb:7d:86:5d:6a:01:ad:cf:04:35:c9:12:0c:79: ae:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:57:B7:3E:E9:7D:49:96:4A:B7:C0:74:1E:E0:3A:B6:CD:42:EA:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df84a301-ddf7-363a-b7e0-95c54bbfb27b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.39.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:e9:98:92:0f:21:91:fb:00:07:69:95:b9:65:1d:66:0a:86: 7a:34:e3:22:fb:00:58:c3:b8:71:fc:96:5c:20:98:5c:ca:17: 64:62:02:f7:0a:6f:9a:00:34:11:be:d2:db:3c:3d:73:fa:44: e9:25:0e:a5:24:28:92:72:f6:f4:26:6c:9b:11:10:de:e1:f2: 48:ec:67:a3:99:0b:7a:47:98:d3:60:a6:14:e9:a9:2e:00:1e: 48:a7:f8:e2:6b:b0:65:a7:03:ae:c9:5d:dc:b7:44:45:55:fe: dc:76:fa:49:e4:9f:db:e5:a3:57:04:d8:60:06:c4:e9:fd:c5: 3d:ae:bf:f1:b7:2a:40:7c:69:19:33:16:5c:6d:23:70:a5:0d: 0f:01:bc:d4:a0:a2:04:2c:43:31:53:19:21:5b:b2:01:4b:fd: ed:70:ef:f3:ba:a3:72:50:2f:63:c8:60:86:27:e2:89:34:58: 02:f2:36:e6:a3:b3:86:58:2a:3a:83:f7:7c:fc:44:89:cd:44: b3:f4:49:ff:17:b5:4c:05:71:b3:e5:b1:c5:a0:02:f9:b7:c2: 70:bd:44:2e:de:a6:3c:4e:0c:1e:1e:88:c3:d2:8f:40:66:bd: b6:82:3e:9e:6a:3c:6b:c0:99:15:9d:ea:b4:5d:b9:6f:34:34: 4c:92:e7:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUkHpRbZ+3M4yYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTIzY2EyMGMtOTY4Yy00Njg2LTg4NTItMjFlNjgyODk5NDcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtfffV3y/UmNYHU0PYZtLMtNlebx3YsqXzkUJ AWgldLOUjV3YDM3bpeFPJp8PMIJGDsJ7J/q8XeXjFimT/SlqMxiSji6X2I2+H7qw IuBbZDHp6lgtoWhUpijc1EiYsHOUwKRPfwgkoI+GxAtXOewh0bp/BQyoZMwwac6k /gblUiGP7daDmvND1XlSVjmL1YN1dzFR/uWN+/OteFTLXVv+/rXNB317L/XXkljO SlbjA3NVSZARxoiuZTkN5ou+IvDf+40p0h90ca903E4+zfsZmrJDZmsK7Dg1xg+3 Mi13pvhAV3WtxwJG0atFDeYKvsJ4y32GXWoBrc8ENckSDHmutQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhXtz7pfUmWSrfAdB7gOrbNQuruMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY4NGEzMDEtZGRmNy0z NjNhLWI3ZTAtOTVjNTRiYmZiMjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALHpmJIPIZH7AAdplbllHWYKhno04yL7AFjDuHH8llwgmFzKF2RiAvcK b5oANBG+0ts8PXP6ROklDqUkKJJy9vQmbJsREN7h8kjsZ6OZC3pHmNNgphTpqS4A Hkin+OJrsGWnA67JXdy3REVV/tx2+knkn9vlo1cE2GAGxOn9xT2uv/G3KkB8aRkz FlxtI3ClDQ8BvNSgogQsQzFTGSFbsgFL/e1w7/O6o3JQL2PIYIYn4ok0WALyNuaj s4ZYKjqD93z8RInNRLP0Sf8XtUwFcbPlscWgAvm3wnC9RC7epjxODB4eiMPSj0Bm vbaCPp5qPGvAmRWd6rRduW80NEyS5+Y= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:31 2025 by rpki-client