$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa File: e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa (raw, json) Hash identifier: qe37FPTu9g16IBWLrmLFv1O8FZks9l0REPuO2y4xx88= Subject key identifier: 16:20:22:56:A8:AA:65:47:BF:F1:7C:0F:B1:5B:D1:0D:42:48:F0:F3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841145211DC6BAE5E0018000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:45:21:1d:c6:ba:e5:e0:01:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=5837d019-35ed-4e66-9403-fb0e52aed5ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:be:a5:79:b7:93:c5:af:9e:64:02:b3:8f:3a: 53:e3:49:2b:03:3d:0d:ae:90:78:da:cb:0b:c0:59: 0c:82:30:ec:1c:5f:52:5e:98:e8:eb:58:97:71:02: e4:4a:44:f9:b4:4c:5d:08:e0:e9:e0:8a:56:85:b0: c3:24:2c:b6:b9:c6:55:de:3b:0d:38:e9:40:ed:96: a3:2f:fa:da:49:05:00:d8:7e:95:3a:56:b2:95:71: ac:3f:f2:d7:94:00:4e:90:93:6e:85:22:59:1c:5a: de:af:0d:07:76:7a:7d:c9:49:0c:cb:c7:f6:72:ef: 92:93:9c:02:e8:47:78:df:21:f8:30:81:e1:06:a2: bb:2b:9c:b9:ec:12:bb:31:10:95:7f:c1:7c:c0:81: 05:b8:68:2c:01:5f:59:ea:23:79:d4:a3:9d:e3:9d: aa:87:cf:ef:bc:a7:36:0f:4e:c5:44:53:25:f8:e1: fa:42:a0:f7:b7:39:ed:d8:1e:01:74:9e:c6:49:1e: c2:db:13:d9:70:ad:0a:db:b6:3a:bd:8b:8c:c0:fd: 97:ad:5d:00:48:b8:0b:d7:d0:d4:7f:49:ca:d1:25: 7b:04:5a:fc:d8:d1:d9:96:e8:ea:1b:ef:55:f2:93: d9:08:3a:e0:7d:07:e8:b2:f1:aa:7d:41:60:46:14: 59:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:20:22:56:A8:AA:65:47:BF:F1:7C:0F:B1:5B:D1:0D:42:48:F0:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e0a7d5a3-1f82-3c49-9350-35e7bc61718a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:26:a5:09:d8:be:0d:a3:d5:d7:dd:25:95:1b:b7:7c:6a:10: 2d:b4:f3:e5:d6:ca:24:9c:be:fa:b6:aa:a8:fe:db:88:cc:e7: a4:1b:c3:39:40:ec:91:de:df:e4:53:43:9f:ea:36:f6:99:0f: 35:73:b8:61:a8:a0:52:3d:7e:2a:82:ec:93:26:11:a0:12:ea: f9:bc:9c:d4:4d:72:e4:0d:de:71:f9:76:de:c1:6b:16:b6:39: 0e:be:b5:b2:0f:28:ec:04:7f:10:fe:e0:27:bf:9d:df:ce:cd: d9:5c:a5:0e:62:92:08:f0:18:18:02:1c:8f:c6:7d:52:68:a6: dc:58:e3:18:75:01:c6:3b:ff:e7:d2:f5:9f:78:09:fa:c4:b9: 87:c8:4d:2d:25:df:51:f8:ea:f5:e4:a5:8e:c2:93:c3:d4:17: f7:5d:a9:8f:f6:ef:ca:fc:12:b2:dd:40:7d:82:b9:94:30:90: 94:4b:cd:c9:8e:d6:c8:1c:fe:b6:25:cf:1f:b1:59:30:f6:67: bc:68:36:2a:f3:cd:e1:bc:51:9f:a1:04:e5:df:04:d7:13:7a: 46:bd:17:c5:0b:2a:68:8b:cf:b6:79:1f:0f:10:c1:06:c9:97: 82:b6:76:72:76:d6:7d:25:e9:95:5f:40:74:8c:b3:80:90:6d: 45:bc:84:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUUhHca65eABgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NTgzN2QwMTktMzVlZC00ZTY2LTk0MDMtZmIwZTUyYWVkNWZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr6lebeTxa+eZAKzjzpT40krAz0NrpB42ssL wFkMgjDsHF9SXpjo61iXcQLkSkT5tExdCODp4IpWhbDDJCy2ucZV3jsNOOlA7Zaj L/raSQUA2H6VOlaylXGsP/LXlABOkJNuhSJZHFrerw0Hdnp9yUkMy8f2cu+Sk5wC 6Ed43yH4MIHhBqK7K5y57BK7MRCVf8F8wIEFuGgsAV9Z6iN51KOd452qh8/vvKc2 D07FRFMl+OH6QqD3tznt2B4BdJ7GSR7C2xPZcK0K27Y6vYuMwP2XrV0ASLgL19DU f0nK0SV7BFr82NHZlujqG+9V8pPZCDrgfQfosvGqfUFgRhRZqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBYgIlaoqmVHv/F8D7Fb0Q1CSPDzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTBhN2Q1YTMtMWY4Mi0z YzQ5LTkzNTAtMzVlN2JjNjE3MThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJsmpQnYvg2j1dfdJZUbt3xqEC208+XWyiScvvq2qqj+24jM56QbwzlA 7JHe3+RTQ5/qNvaZDzVzuGGooFI9fiqC7JMmEaAS6vm8nNRNcuQN3nH5dt7Baxa2 OQ6+tbIPKOwEfxD+4Ce/nd/OzdlcpQ5ikgjwGBgCHI/GfVJoptxY4xh1AcY7/+fS 9Z94CfrEuYfITS0l31H46vXkpY7Ck8PUF/ddqY/278r8ErLdQH2CuZQwkJRLzcmO 1sgc/rYlzx+xWTD2Z7xoNirzzeG8UZ+hBOXfBNcTeka9F8ULKmiLz7Z5Hw8QwQbJ l4K2dnJ21n0l6ZVfQHSMs4CQbUW8hP8= -----END CERTIFICATE-----Generated at Sat Jul 26 00:10:02 2025 by rpki-client