$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa File: e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa (raw, json) Hash identifier: /ZMqQPSBSGU7g1Tl0poerz/pRaYeD5/6lFK/lrEGTKs= Subject key identifier: AE:45:31:45:05:53:6B:48:78:28:AF:35:5A:CD:55:0D:41:E8:9D:7A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FB00073D104C504A9600 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:fb:00:07:3d:10:4c:50:4a:96:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=e59d140f-186d-4948-b899-01797f0d7437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:88:36:f0:9d:88:6f:66:b1:d7:0f:4e:2d:da: 32:07:82:0f:6c:b2:c7:3c:6b:72:29:d8:57:ef:e1: fc:b4:07:05:65:3e:6b:d6:1c:0e:30:58:b6:47:16: 88:f4:23:89:c1:20:fe:2d:b7:69:f3:81:b9:84:e8: 0b:12:c6:b6:69:51:bd:3d:7f:27:db:25:d6:d4:3f: 8f:3f:c2:12:2c:dc:4f:6c:84:e6:0b:2c:02:3f:37: 6b:66:04:6f:98:73:de:9a:f0:a1:9f:bd:44:58:0c: 0e:15:ac:3b:10:35:ac:b9:29:bb:65:1a:6f:28:ab: 54:3a:23:49:62:d5:d7:c5:00:db:ce:5d:77:4a:6f: 47:b1:2a:83:ff:b6:28:5f:1d:03:19:10:75:d9:75: 17:e2:ca:0f:e0:1e:10:6d:33:48:6a:70:7d:51:68: e7:c5:9a:53:4b:b4:1f:84:51:41:6a:bd:52:61:68: 83:3a:e6:48:20:ec:5f:07:d8:12:1f:b2:82:5d:0b: cd:5c:15:de:42:27:fa:37:eb:19:28:5e:68:78:35: 1a:86:d5:c8:92:d0:4f:43:22:d4:14:71:d3:da:81: 5a:03:2a:9c:94:63:21:13:63:f0:05:ea:fb:12:46: ff:b3:23:05:f5:d8:d8:3a:ce:a6:20:20:d6:a7:a1: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:45:31:45:05:53:6B:48:78:28:AF:35:5A:CD:55:0D:41:E8:9D:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e73b0002-4ed0-3e2d-98a3-56867e7719f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:2f:7c:e7:f1:22:87:bf:69:1d:e8:89:31:67:1f:af:50:f9: c6:af:3a:29:f2:af:9e:fe:14:4b:1b:8d:41:8a:37:fe:64:9a: af:0b:11:cb:58:fe:f1:26:c6:1e:43:6e:04:e5:ca:ca:8c:cb: b0:a2:1c:58:72:c2:f4:16:a9:e3:f3:86:6d:47:a2:25:ea:df: fe:9c:52:2c:c5:88:47:a9:93:48:90:b0:89:27:f1:e4:34:e0: 86:2f:01:cd:05:87:73:7e:17:5e:c8:b8:67:93:4e:a5:9b:46: e7:46:65:2a:34:e9:cb:af:e2:4c:f6:1e:ae:eb:63:d5:64:c1: 61:40:53:09:48:e3:5e:15:55:cc:cd:0c:e3:a3:44:d2:06:31: aa:ad:21:d6:c3:54:8c:2a:8b:e3:9e:36:8f:e0:5a:1f:14:16: 08:41:aa:3a:b9:b6:f0:d6:33:b3:c6:b7:59:8d:80:7c:65:0d: fa:ed:58:e8:46:09:1d:d2:0e:05:36:96:a6:54:72:c7:52:4a: d1:ef:0a:2e:fa:02:49:e6:c0:5f:34:7d:8a:ac:ff:b4:a4:20: 1c:7c:ed:d2:19:6c:b6:ea:62:2a:4c:c0:3e:8c:87:e5:ef:a4: 6e:24:2f:4b:53:8a:ec:3f:c2:2b:ec:8d:2e:6f:77:45:35:4a: f2:8d:a6:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfsABz0QTFBKlgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZTU5ZDE0MGYtMTg2ZC00OTQ4LWI4OTktMDE3OTdmMGQ3NDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwYg28J2Ib2ax1w9OLdoyB4IPbLLHPGtyKdhX 7+H8tAcFZT5r1hwOMFi2RxaI9COJwSD+Lbdp84G5hOgLEsa2aVG9PX8n2yXW1D+P P8ISLNxPbITmCywCPzdrZgRvmHPemvChn71EWAwOFaw7EDWsuSm7ZRpvKKtUOiNJ YtXXxQDbzl13Sm9HsSqD/7YoXx0DGRB12XUX4soP4B4QbTNIanB9UWjnxZpTS7Qf hFFBar1SYWiDOuZIIOxfB9gSH7KCXQvNXBXeQif6N+sZKF5oeDUahtXIktBPQyLU FHHT2oFaAyqclGMhE2PwBer7Ekb/syMF9djYOs6mICDWp6ECNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK5FMUUFU2tIeCivNVrNVQ1B6J16MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTczYjAwMDItNGVkMC0z ZTJkLTk4YTMtNTY4NjdlNzcxOWYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKovfOfxIoe/aR3oiTFnH69Q+cavOinyr57+FEsbjUGKN/5kmq8LEctY /vEmxh5DbgTlysqMy7CiHFhywvQWqePzhm1HoiXq3/6cUizFiEepk0iQsIkn8eQ0 4IYvAc0Fh3N+F17IuGeTTqWbRudGZSo06cuv4kz2Hq7rY9VkwWFAUwlI414VVczN DOOjRNIGMaqtIdbDVIwqi+OeNo/gWh8UFghBqjq5tvDWM7PGt1mNgHxlDfrtWOhG CR3SDgU2lqZUcsdSStHvCi76AknmwF80fYqs/7SkIBx87dIZbLbqYipMwD6Mh+Xv pG4kL0tTiuw/wivsjS5vd0U1SvKNpu4= -----END CERTIFICATE-----Generated at Sat Jul 26 00:11:34 2025 by rpki-client