$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa File: e68fab52-4b7b-3186-a6db-24c47ebb3712.roa (raw, json) Hash identifier: 9W7jYjXD6ncyJGBCErf/5cGpYVK8AAWa4hpndeoJgBs= Subject key identifier: C1:B4:E7:7A:4C:6A:19:29:CA:C0:9E:A2:56:73:BC:35:81:8E:02:50 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114B34636A531C2F5E7600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4b:34:63:6a:53:1c:2f:5e:76:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c57e6c31-0c05-45b4-85e0-97c26040634a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d1:26:d4:96:21:be:da:c5:d5:a4:41:76:78: 09:2a:87:fe:a6:d8:ad:92:b8:06:d7:bf:6b:58:82: b4:5d:f2:56:44:77:ef:0d:f8:c2:03:b8:d1:fe:07: 94:38:30:34:7e:13:7d:76:5d:05:66:10:a1:e4:59: 7e:7c:19:c9:fd:41:df:38:90:f3:df:6d:27:56:c5: dc:a7:73:ee:69:b9:ad:6e:77:04:ba:56:ff:5a:95: ce:ca:96:32:37:28:88:36:ce:fd:1a:fd:5e:c1:e5: e9:31:cf:9a:22:30:c8:af:5c:40:f4:62:df:b0:33: a7:6a:8e:c3:46:40:db:04:08:a5:e9:10:3d:9b:68: 16:bb:57:32:cd:40:b1:5d:73:2b:ce:0c:4a:79:b6: ad:dd:a5:c0:58:5a:0b:63:90:61:4f:e7:69:15:7b: 7f:cc:dd:a3:19:ba:3d:11:d1:e9:fe:0d:c6:be:19: 58:35:60:9e:05:10:0c:00:05:67:84:63:83:e6:e9: 37:d4:65:f3:40:4a:d8:c4:21:72:85:c9:80:35:6b: e5:43:83:74:1c:a2:04:2c:79:54:01:3c:80:83:77: f2:8e:c8:51:f5:09:9b:fc:73:23:09:27:38:dc:8a: 9f:91:dc:10:1b:f6:0e:75:cb:08:72:29:3d:55:11: c9:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:B4:E7:7A:4C:6A:19:29:CA:C0:9E:A2:56:73:BC:35:81:8E:02:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e68fab52-4b7b-3186-a6db-24c47ebb3712.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:73:48:62:1e:20:46:bd:03:b5:f1:17:8b:b7:67:8b:57:27: b7:f1:2b:a6:b7:3d:6b:2d:68:17:9f:2c:3f:fd:cc:d7:c8:36: 14:9f:b4:85:50:81:40:04:70:50:5a:e4:2c:ba:34:6b:72:88: e4:f4:9c:50:cb:66:ea:c7:63:50:1d:0f:4f:6a:ff:e9:7d:36: 51:ef:b2:ed:d3:44:64:67:13:b0:1c:db:73:7f:ea:8d:f1:83: 0b:7f:e3:7c:a4:2c:a8:dd:0b:3f:66:3c:c6:5e:a3:f6:2b:f8: 2c:50:c8:97:14:ca:44:71:50:95:e1:95:e8:6b:00:78:76:7a: 8c:28:fe:ed:71:26:f1:38:3f:71:45:d2:fe:22:5c:d9:0d:2e: 9a:2f:48:d7:91:82:8c:09:02:b8:a0:57:c7:16:66:d0:c2:57: 03:d5:ef:61:cd:da:40:48:03:82:cc:79:05:d7:ea:a4:ab:20: 5e:d3:0d:89:b0:04:90:11:77:6d:f7:a0:2b:e8:55:87:87:5e: c5:ff:98:15:df:37:ca:83:e1:36:83:be:e3:9e:d3:83:95:86: e0:fc:b4:0f:72:1c:a4:40:b5:fc:d9:b5:fa:01:f9:20:d3:13: d7:d9:9d:ab:f6:20:2a:1e:aa:28:bc:6c:14:2b:e8:11:7f:1e: 72:7d:54:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUs0Y2pTHC9edgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzU3ZTZjMzEtMGMwNS00NWI0LTg1ZTAtOTdjMjYwNDA2MzRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dEm1JYhvtrF1aRBdngJKof+ptitkrgG179r WIK0XfJWRHfvDfjCA7jR/geUODA0fhN9dl0FZhCh5Fl+fBnJ/UHfOJDz320nVsXc p3PuabmtbncEulb/WpXOypYyNyiINs79Gv1eweXpMc+aIjDIr1xA9GLfsDOnao7D RkDbBAil6RA9m2gWu1cyzUCxXXMrzgxKebat3aXAWFoLY5BhT+dpFXt/zN2jGbo9 EdHp/g3GvhlYNWCeBRAMAAVnhGOD5uk31GXzQErYxCFyhcmANWvlQ4N0HKIELHlU ATyAg3fyjshR9Qmb/HMjCSc43IqfkdwQG/YOdcsIcik9VRHJ+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMG053pMahkpysCeolZzvDWBjgJQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTY4ZmFiNTItNGI3Yi0z MTg2LWE2ZGItMjRjNDdlYmIzNzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpzSGIeIEa9A7XxF4u3Z4tXJ7fxK6a3PWstaBefLD/9zNfINhSftIVQ gUAEcFBa5Cy6NGtyiOT0nFDLZurHY1AdD09q/+l9NlHvsu3TRGRnE7Ac23N/6o3x gwt/43ykLKjdCz9mPMZeo/Yr+CxQyJcUykRxUJXhlehrAHh2eowo/u1xJvE4P3FF 0v4iXNkNLpovSNeRgowJArigV8cWZtDCVwPV72HN2kBIA4LMeQXX6qSrIF7TDYmw BJARd233oCvoVYeHXsX/mBXfN8qD4TaDvuOe04OVhuD8tA9yHKRAtfzZtfoB+SDT E9fZnav2ICoeqii8bBQr6BF/HnJ9VFQ= -----END CERTIFICATE-----Generated at Sat Jul 26 00:00:08 2025 by rpki-client