$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa File: e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa (raw, json) Hash identifier: Y8HDCihBTKeBpyLCuBG787gboGDqr94/3lP9t/E2uvY= Subject key identifier: 23:43:2E:98:01:C6:F6:AB:AD:76:D0:63:A8:56:D9:FF:86:7D:5B:99 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FD4412877AD27950D780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fd:44:12:87:7a:d2:79:50:d7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=721b2155-abf5-40b3-b5ea-81fd2ee5c789 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f7:46:0b:57:c4:fa:6d:3d:bc:b7:0c:41:9f: 69:c2:4e:25:3b:43:f9:2b:f8:9e:b2:c5:87:8e:a4: de:8f:da:e1:e8:fc:12:99:fd:bf:fa:5e:3f:3c:0e: 01:91:98:13:49:db:cc:38:67:60:90:d6:2b:4e:fd: 49:97:a2:36:f3:62:45:2b:64:a2:03:22:da:ab:35: 61:10:04:67:b1:ad:cc:2a:38:26:cf:60:eb:79:7f: a5:bd:c3:e2:b7:b3:ba:42:41:e6:d6:1b:ea:c1:ec: 56:54:88:ee:10:22:bd:af:e4:6a:5b:0a:f9:da:e0: f5:88:f6:dd:89:64:0a:2b:f6:9a:d8:7a:5e:61:3a: a8:9c:fb:49:ee:eb:0a:50:91:49:3f:0a:88:5f:fe: 25:c2:f8:15:a2:a1:02:93:26:e1:f0:ef:f0:c3:02: df:ac:13:0d:5e:f0:bf:28:b8:2b:5e:4c:29:7c:87: f2:2a:d0:75:97:11:1b:48:60:f7:c0:37:f7:73:75: f1:18:12:44:1c:ac:e1:64:c8:af:77:e9:89:16:ec: 0d:fd:e4:65:a2:5c:f3:82:69:6b:91:79:e9:41:ba: 25:30:78:fa:66:ea:cd:37:cf:e4:c2:71:70:f8:e7: a1:5c:4d:a5:3a:d6:a5:46:9c:74:69:38:13:be:d2: 19:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:2E:98:01:C6:F6:AB:AD:76:D0:63:A8:56:D9:FF:86:7D:5B:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e54c5c8b-834b-32c7-87dc-fa896ac93cd7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:aa:21:bc:53:44:da:cb:b6:6e:8d:4b:68:52:28:60:bf:0c: e6:75:2c:60:74:bf:7a:a3:62:29:1b:04:50:9d:13:0b:fa:2e: 79:00:7a:79:a2:59:e8:10:e9:5f:d8:a3:19:7d:a6:05:42:e9: 2a:a4:ce:24:97:f8:f5:52:88:91:e5:a4:34:8f:1d:37:9a:b6: b5:45:e4:4b:62:c2:4d:1a:38:e7:9a:d2:70:9a:98:82:7e:14: 30:6d:fa:6a:2c:d2:c8:b1:60:db:70:5c:05:4b:ef:b3:d8:01: 58:84:d7:c7:26:2c:fe:cd:86:a8:a3:cc:ec:94:c7:69:c0:3c: 0e:dd:ad:ff:9f:43:a8:4d:2f:22:8f:d6:29:0f:8e:54:43:f1: 4c:5a:22:07:01:cc:1e:10:d1:ac:c2:c4:ca:81:42:18:dc:e1: 06:19:37:b8:7c:e3:3a:8f:42:7c:64:ef:4a:e3:a9:8d:16:a2: 85:ea:af:f6:70:c7:0d:db:27:6f:b5:a3:01:f4:c4:78:2d:ad: 70:16:86:a0:bf:89:51:e9:f6:82:6f:bb:d5:46:4d:2a:7c:24: cd:55:b7:c7:37:54:50:4f:0b:3c:7e:26:f4:a0:bb:13:30:16: 8d:f2:ba:f8:98:7d:b4:b5:a3:75:0d:ab:46:6f:11:b2:ad:bd: 9c:ed:e4:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf1EEod60nlQ14AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NzIxYjIxNTUtYWJmNS00MGIzLWI1ZWEtODFmZDJlZTVjNzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvdGC1fE+m09vLcMQZ9pwk4lO0P5K/iessWH jqTej9rh6PwSmf2/+l4/PA4BkZgTSdvMOGdgkNYrTv1Jl6I282JFK2SiAyLaqzVh EARnsa3MKjgmz2DreX+lvcPit7O6QkHm1hvqwexWVIjuECK9r+RqWwr52uD1iPbd iWQKK/aa2HpeYTqonPtJ7usKUJFJPwqIX/4lwvgVoqECkybh8O/wwwLfrBMNXvC/ KLgrXkwpfIfyKtB1lxEbSGD3wDf3c3XxGBJEHKzhZMivd+mJFuwN/eRlolzzgmlr kXnpQbolMHj6ZurNN8/kwnFw+OehXE2lOtalRpx0aTgTvtIZ8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNDLpgBxvarrXbQY6hW2f+GfVuZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTU0YzVjOGItODM0Yi0z MmM3LTg3ZGMtZmE4OTZhYzkzY2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAiqIbxTRNrLtm6NS2hSKGC/DOZ1LGB0v3qjYikbBFCdEwv6LnkAenmi WegQ6V/Yoxl9pgVC6SqkziSX+PVSiJHlpDSPHTeatrVF5Etiwk0aOOea0nCamIJ+ FDBt+mos0sixYNtwXAVL77PYAViE18cmLP7NhqijzOyUx2nAPA7drf+fQ6hNLyKP 1ikPjlRD8UxaIgcBzB4Q0azCxMqBQhjc4QYZN7h84zqPQnxk70rjqY0WooXqr/Zw xw3bJ2+1owH0xHgtrXAWhqC/iVHp9oJvu9VGTSp8JM1Vt8c3VFBPCzx+JvSguxMw Fo3yuviYfbS1o3UNq0ZvEbKtvZzt5H8= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:40 2025 by rpki-client