$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f53b05d3-84cc-324b-b794-aad4d3de8bb9.roa File: f53b05d3-84cc-324b-b794-aad4d3de8bb9.roa (raw, json) Hash identifier: QatAgT4iK5sxhxqTolSnZOuqm+WKmSphL2wN7qNaWHw= Subject key identifier: 5A:66:39:06:94:F4:64:61:F7:E4:01:04:7A:06:78:D0:9F:2E:08:CF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF1B1F64402D4CB63160 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f53b05d3-84cc-324b-b794-aad4d3de8bb9.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:1b:1f:64:40:2d:4c:b6:31:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f4e75011-106c-4ec7-9b32-25ea17fb986f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:1c:1f:24:4a:51:54:49:43:a5:c0:6d:d4:0a: 62:60:91:48:56:6d:9d:1c:9f:2f:56:0a:00:a9:d1: 99:1f:68:07:e1:b9:30:e8:8b:f7:45:58:3a:a3:7d: a5:8f:59:f7:f4:3b:9a:0a:35:27:e1:1e:4b:08:e8: b8:db:b3:d7:0e:83:81:39:b8:b1:5c:37:9c:e3:23: ed:d2:df:ff:e9:17:54:91:e2:19:c9:d7:70:cd:8d: 1f:54:4e:72:2f:23:bc:03:37:18:cf:50:cb:37:f5: e6:20:55:9d:49:cb:58:fc:f7:8f:e9:fb:d7:5c:62: 77:0b:a7:e6:23:0f:82:55:c9:f2:63:88:fa:11:a0: 8e:05:a4:1a:7a:e6:e1:ac:3d:b1:ac:69:48:9d:47: 87:84:46:b0:bf:8b:4a:22:e8:10:9e:6a:39:9a:34: 2f:6d:88:03:9d:07:07:5e:7b:e7:5b:fa:51:e5:f7: fc:7d:9f:c0:42:09:94:1a:37:b3:be:b5:bf:be:80: ca:bc:58:6c:b9:3b:09:23:10:e2:48:85:81:f8:bc: 93:d1:ad:6e:85:ea:c1:a3:a2:df:87:9e:25:fa:ef: 88:e0:38:a4:2b:2f:d6:f5:c6:dc:35:7a:ce:84:b0: a0:24:7c:a8:0f:19:6a:f0:ef:6b:31:95:28:c9:42: 16:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:66:39:06:94:F4:64:61:F7:E4:01:04:7A:06:78:D0:9F:2E:08:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f53b05d3-84cc-324b-b794-aad4d3de8bb9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:9f:4a:06:a6:83:92:26:5d:95:67:5e:89:8d:87:c7:15:e8: 7f:c7:31:b3:48:2a:0e:02:f6:ab:df:28:b0:aa:32:c7:ac:18: 4f:d4:db:51:d2:e2:40:be:46:4a:84:75:0b:9f:26:fd:e7:80: c8:33:4a:fc:91:2c:d7:e4:b9:13:1d:49:f1:4c:7a:c1:e2:a1: 96:d9:32:b8:1e:52:70:0a:78:0f:13:3e:d6:57:93:0a:a3:37: 2e:f9:21:71:61:b6:e6:4a:a0:4c:65:af:df:c7:42:dc:82:69: 67:56:b1:6b:0b:55:d8:68:c1:6a:53:22:18:bb:c8:7d:c6:0c: 03:7b:1f:a1:6e:9a:61:3a:12:0b:e9:50:44:4c:66:c2:3f:6d: 8c:c3:06:73:95:0b:ec:cf:66:a2:17:78:32:78:c0:8d:5d:18: 38:34:0c:e1:45:8b:f5:46:8f:0d:8c:b9:46:10:38:4d:86:b1: 2a:c8:61:f9:34:bf:1e:d7:aa:2d:92:b3:26:00:5d:cd:19:ce: 14:2e:df:c4:5c:6d:1a:07:6c:95:15:8c:09:7b:15:52:43:cb: 1e:dd:cc:77:83:41:72:d7:97:26:c9:20:19:3b:c2:c5:f8:88: 24:50:a3:e3:ad:e1:89:60:c9:16:b6:8d:b7:5d:fd:5a:3a:53: 1d:1c:0f:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf8bH2RALUy2MWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjRlNzUwMTEtMTA2Yy00ZWM3LTliMzItMjVlYTE3ZmI5ODZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRwfJEpRVElDpcBt1ApiYJFIVm2dHJ8vVgoA qdGZH2gH4bkw6Iv3RVg6o32lj1n39DuaCjUn4R5LCOi427PXDoOBObixXDec4yPt 0t//6RdUkeIZyddwzY0fVE5yLyO8AzcYz1DLN/XmIFWdSctY/PeP6fvXXGJ3C6fm Iw+CVcnyY4j6EaCOBaQaeubhrD2xrGlInUeHhEawv4tKIugQnmo5mjQvbYgDnQcH XnvnW/pR5ff8fZ/AQgmUGjezvrW/voDKvFhsuTsJIxDiSIWB+LyT0a1uherBo6Lf h54l+u+I4DikKy/W9cbcNXrOhLCgJHyoDxlq8O9rMZUoyUIWvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFpmOQaU9GRh9+QBBHoGeNCfLgjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjUzYjA1ZDMtODRjYy0z MjRiLWI3OTQtYWFkNGQzZGU4YmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWfSgamg5ImXZVnXomNh8cV6H/HMbNIKg4C9qvfKLCqMsesGE/U21HS 4kC+RkqEdQufJv3ngMgzSvyRLNfkuRMdSfFMesHioZbZMrgeUnAKeA8TPtZXkwqj Ny75IXFhtuZKoExlr9/HQtyCaWdWsWsLVdhowWpTIhi7yH3GDAN7H6FummE6Egvp UERMZsI/bYzDBnOVC+zPZqIXeDJ4wI1dGDg0DOFFi/VGjw2MuUYQOE2GsSrIYfk0 vx7Xqi2SsyYAXc0ZzhQu38RcbRoHbJUVjAl7FVJDyx7dzHeDQXLXlybJIBk7wsX4 iCRQo+Ot4YlgyRa2jbdd/Vo6Ux0cD58= -----END CERTIFICATE-----Generated at Sat Jul 26 11:36:10 2025 by rpki-client