$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54b4323-64b0-3224-b562-d2fbb8824449.roa File: e54b4323-64b0-3224-b562-d2fbb8824449.roa (raw, json) Hash identifier: D7+035yoDsapXFFXZiJVkFALxdnCiuf4jB2sy8pcMYk= Subject key identifier: DF:89:8B:B0:A5:DF:1E:B4:F9:69:0B:76:3F:08:82:86:5B:C7:16:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FE35D828F4B7B7AEAB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54b4323-64b0-3224-b562-d2fbb8824449.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.172.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Jul 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fe:35:d8:28:f4:b7:b7:ae:ab:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=141ecb9b-45de-42f2-833a-431411892bd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:e1:28:3a:7c:6b:a2:4a:43:93:8b:54:36:5a: ea:0d:8c:2b:ac:84:52:16:2e:cb:c1:53:75:08:cb: 35:6b:cf:6f:0c:15:20:f0:9c:6a:c8:82:79:67:83: 45:09:70:f4:72:57:18:3c:0f:0c:a9:97:31:08:a5: dd:86:14:0b:b9:a8:6f:de:31:a5:f8:79:83:b4:45: c9:dd:ca:40:90:6e:e5:01:0c:96:61:6e:67:56:0a: bc:ce:6b:cb:13:07:3d:fb:2d:27:9a:01:38:62:48: d2:eb:30:cf:0f:cc:bf:6e:c2:2b:a2:c3:8e:08:8c: 30:82:f4:9d:84:96:38:55:56:ec:c8:36:ec:69:12: 0f:54:24:30:25:2e:36:c8:7b:bb:65:f1:fd:4f:b4: b8:0b:de:a4:ca:95:f6:19:7a:2e:66:c4:35:09:35: 83:ff:9f:1b:ed:73:53:77:ba:95:7e:c0:d9:40:d5: 17:af:70:5d:7c:62:7f:4e:04:2f:24:e8:9e:15:bf: ad:16:6a:07:38:f7:2f:a3:87:e7:17:2b:a0:fb:8f: f8:d3:3f:b2:d1:29:2a:93:c7:d5:aa:c3:3e:02:e1: 4f:13:fa:c5:3a:9c:8f:69:11:13:c5:4b:d3:17:f0: 42:48:d3:ba:6e:7f:d4:59:84:20:7a:3b:27:8d:a7: 41:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:89:8B:B0:A5:DF:1E:B4:F9:69:0B:76:3F:08:82:86:5B:C7:16:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54b4323-64b0-3224-b562-d2fbb8824449.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.172.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:e1:1c:b1:f5:03:72:d8:e5:7e:16:48:21:db:df:56:d9:b5: e8:b0:9f:b7:51:28:09:9d:a5:49:a8:dc:5c:62:09:23:c1:49: 19:99:aa:b7:64:e8:9c:6b:9c:be:75:28:c3:60:bb:81:35:2e: 23:f4:b3:6a:23:f4:2c:12:97:f5:1e:84:4d:4a:7e:fd:dc:14: d5:2a:6d:e7:51:b7:31:6d:86:84:ea:fe:a6:85:0e:a4:33:14: 3c:64:48:2d:f4:c9:36:0d:a7:70:04:cb:9a:e4:03:cd:b2:4b: ff:9a:34:ca:99:58:8e:91:47:f7:fc:64:bb:6b:63:7c:d4:27: 83:ed:05:ad:b0:4d:40:33:b8:9e:bf:df:bb:7c:a0:e9:f0:a1: b3:b6:d2:d3:bf:17:dd:67:7d:0d:d5:9d:29:72:cb:f2:f9:ff: 43:86:9d:b4:46:74:92:03:1b:22:59:35:db:da:f4:71:e1:15: a5:0c:f7:1d:3e:ea:83:0f:50:fe:82:c8:3a:22:7f:b5:36:4d: 1a:b5:19:86:4d:17:8f:4a:92:71:69:47:b0:03:9f:42:41:05: 0b:b6:c3:5c:cc:c9:9b:56:65:36:65:83:4a:62:fe:92:07:7b: 69:de:5a:35:2d:76:59:cc:9b:43:9f:8e:4e:8c:34:4e:7e:3d: f4:fd:83:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf412Cj0t7euqwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MTQxZWNiOWItNDVkZS00MmYyLTgzM2EtNDMxNDExODkyYmQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAguEoOnxrokpDk4tUNlrqDYwrrIRSFi7LwVN1 CMs1a89vDBUg8JxqyIJ5Z4NFCXD0clcYPA8MqZcxCKXdhhQLuahv3jGl+HmDtEXJ 3cpAkG7lAQyWYW5nVgq8zmvLEwc9+y0nmgE4YkjS6zDPD8y/bsIrosOOCIwwgvSd hJY4VVbsyDbsaRIPVCQwJS42yHu7ZfH9T7S4C96kypX2GXouZsQ1CTWD/58b7XNT d7qVfsDZQNUXr3BdfGJ/TgQvJOieFb+tFmoHOPcvo4fnFyug+4/40z+y0Skqk8fV qsM+AuFPE/rFOpyPaRETxUvTF/BCSNO6bn/UWYQgejsnjadBhQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN+Ji7Cl3x60+WkLdj8IgoZbxxawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTU0YjQzMjMtNjRiMC0z MjI0LWI1NjItZDJmYmI4ODI0NDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADXhHLH1A3LY5X4WSCHb31bZteiwn7dRKAmdpUmo3FxiCSPBSRmZqrdk 6JxrnL51KMNgu4E1LiP0s2oj9CwSl/UehE1Kfv3cFNUqbedRtzFthoTq/qaFDqQz FDxkSC30yTYNp3AEy5rkA82yS/+aNMqZWI6RR/f8ZLtrY3zUJ4PtBa2wTUAzuJ6/ 37t8oOnwobO20tO/F91nfQ3VnSlyy/L5/0OGnbRGdJIDGyJZNdva9HHhFaUM9x0+ 6oMPUP6CyDoif7U2TRq1GYZNF49KknFpR7ADn0JBBQu2w1zMyZtWZTZlg0pi/pIH e2neWjUtdlnMm0Ofjk6MNE5+PfT9gxQ= -----END CERTIFICATE-----Generated at Sat Jul 26 20:16:17 2025 by rpki-client