$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa File: e4af146f-4186-31c6-aa18-e49d99a4017d.roa (raw, json) Hash identifier: duxBzHR1lkVakO3u07GT993haJLvTX6GKYl0a+Zn5Ws= Subject key identifier: 32:92:A9:13:4A:C6:73:D0:9B:E2:25:90:BA:F7:F6:99:5F:2C:9E:40 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FA1BCD818FAD928E6280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fa:1b:cd:81:8f:ad:92:8e:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=05edd9bf-fd9d-45c9-b5a3-fcf08c95fceb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:89:3f:47:01:8a:47:84:e6:8e:1a:46:49:72: 65:b2:90:61:34:e5:bf:19:39:12:d2:f7:fd:a7:ce: f3:bf:61:e9:c2:05:8e:02:9e:e3:4d:4e:b2:5e:a7: 6f:91:0a:c4:c4:05:d6:b8:c4:69:e3:0a:7d:db:4e: 07:7f:fd:c0:99:d0:fa:e2:36:ed:8b:23:01:91:ea: 6f:cc:10:cc:18:d3:01:3d:ed:b9:91:f3:cf:d0:fb: 65:40:ae:48:69:d4:ce:51:40:54:34:39:ac:66:fe: 18:8b:ef:b1:74:09:e0:0d:98:ea:a1:7e:c5:84:35: 72:62:3f:66:23:7f:4c:44:19:7c:46:11:c8:e3:fb: c6:f4:cb:33:4d:68:32:d8:5e:37:57:f6:fe:19:e8: a1:a2:5e:a7:e5:b3:f4:8f:22:b6:b9:d2:92:9b:16: 80:42:a3:16:f3:2a:2d:c0:b7:0a:46:47:97:81:6a: 71:4f:3c:e6:36:cc:92:e2:ab:8d:51:72:b7:13:26: 58:82:7d:96:c3:3f:f8:8f:9e:13:e0:d9:65:05:90: 7e:96:a4:9e:d0:80:88:a1:91:64:84:7b:df:d7:29: e2:e5:5a:dc:20:0d:86:90:d7:2d:78:51:b1:12:dc: 30:5b:a6:a8:83:15:f8:d7:e6:73:89:5a:87:0e:7d: 0b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:92:A9:13:4A:C6:73:D0:9B:E2:25:90:BA:F7:F6:99:5F:2C:9E:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e4af146f-4186-31c6-aa18-e49d99a4017d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:6d:de:d3:6c:fc:f8:e2:24:5a:5c:75:52:46:eb:21:05:8b: f5:95:21:70:49:18:ea:11:36:ff:35:de:10:78:84:b8:0c:c2: f0:6f:e9:71:a2:29:aa:57:11:31:82:fc:1d:fc:b2:88:3d:f1: fe:e1:28:b4:55:b0:20:dc:e2:4d:ee:3a:36:1f:87:5d:fe:67: a1:85:1d:1d:6b:f3:ed:a5:df:e9:29:09:5e:27:ac:3f:6a:38: b6:c4:f1:e6:0f:60:bd:85:7f:cf:71:26:ff:91:88:d0:1c:d6: bb:4e:e6:13:09:48:69:0b:cd:77:56:a0:5d:4f:ff:d9:57:96: e2:80:aa:df:9e:d9:b3:db:05:fb:b7:45:6f:b4:26:f9:ad:a3: 77:7d:0e:dd:24:ea:86:f5:42:49:db:fc:12:d4:cb:e6:0d:a3: 3f:1b:13:ad:3e:9a:b3:c3:2e:c6:91:e8:1f:26:3e:38:98:da: d1:7f:c5:fe:72:cc:8d:16:a7:21:16:3a:45:b0:99:40:37:68: 53:5b:e3:ef:1b:8d:80:d2:d0:7c:6c:98:a6:29:06:51:2f:c0: 7d:b3:68:e9:14:53:ed:8c:d8:de:72:56:1e:76:32:d9:d7:de: 9c:f7:cb:20:f3:48:fa:09:03:81:91:54:02:eb:85:6d:8b:c7: 78:d3:69:4c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfobzYGPrZKOYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDVlZGQ5YmYtZmQ5ZC00NWM5LWI1YTMtZmNmMDhjOTVmY2ViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmok/RwGKR4TmjhpGSXJlspBhNOW/GTkS0vf9 p87zv2HpwgWOAp7jTU6yXqdvkQrExAXWuMRp4wp9204Hf/3AmdD64jbtiyMBkepv zBDMGNMBPe25kfPP0PtlQK5IadTOUUBUNDmsZv4Yi++xdAngDZjqoX7FhDVyYj9m I39MRBl8RhHI4/vG9MszTWgy2F43V/b+Geihol6n5bP0jyK2udKSmxaAQqMW8yot wLcKRkeXgWpxTzzmNsyS4quNUXK3EyZYgn2Wwz/4j54T4NllBZB+lqSe0ICIoZFk hHvf1yni5VrcIA2GkNcteFGxEtwwW6aogxX41+ZziVqHDn0LCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDKSqRNKxnPQm+IlkLr39plfLJ5AMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTRhZjE0NmYtNDE4Ni0z MWM2LWFhMTgtZTQ5ZDk5YTQwMTdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF5t3tNs/PjiJFpcdVJG6yEFi/WVIXBJGOoRNv813hB4hLgMwvBv6XGi KapXETGC/B38sog98f7hKLRVsCDc4k3uOjYfh13+Z6GFHR1r8+2l3+kpCV4nrD9q OLbE8eYPYL2Ff89xJv+RiNAc1rtO5hMJSGkLzXdWoF1P/9lXluKAqt+e2bPbBfu3 RW+0Jvmto3d9Dt0k6ob1Qknb/BLUy+YNoz8bE60+mrPDLsaR6B8mPjiY2tF/xf5y zI0WpyEWOkWwmUA3aFNb4+8bjYDS0HxsmKYpBlEvwH2zaOkUU+2M2N5yVh52MtnX 3pz3yyDzSPoJA4GRVALrhW2Lx3jTaUw= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:38 2025 by rpki-client