$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa File: f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa (raw, json) Hash identifier: V9cjJUNzqY6A20KsJShyJ+kySvwIddz3t6m4wQIlK+Q= Subject key identifier: 9C:9D:07:99:F2:9F:F7:7F:C4:7C:07:63:5B:D6:67:23:B9:D9:F7:3E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411FF5641E9950BD3517180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:ff:56:41:e9:95:0b:d3:51:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=6ae6b563-1455-4ee8-83f9-ac73bad0ba21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6f:6e:57:03:21:f1:6f:c3:fb:e0:f6:98:9c: 57:28:51:34:56:82:36:74:0d:b8:df:5d:21:11:a3: d5:bb:f1:02:ad:07:39:f2:d7:0e:22:6e:30:46:dd: 1e:d7:9d:33:41:cf:57:23:5c:60:f4:2d:3c:aa:28: 7d:95:5e:32:a9:d5:d4:bb:f2:8d:ad:56:4b:13:2e: b8:56:8d:3c:9c:50:d7:a5:e0:08:34:db:d5:5f:65: 4c:a0:48:33:01:61:6c:f0:d6:c8:8e:8d:3a:77:19: a8:e7:c5:a3:45:d7:51:bc:c8:e2:25:8e:d6:47:0f: 37:ab:c9:7e:5b:ba:cb:34:3e:80:ca:28:b6:8b:89: d8:c5:3b:51:18:9d:39:4f:32:31:6f:12:32:85:84: 02:d9:41:8d:9b:76:21:a8:5a:87:92:09:55:07:eb: 70:97:80:6a:8e:09:8d:9b:73:c7:a9:67:49:28:f7: 7e:4f:2e:1f:77:a4:c2:df:ec:b2:d8:a2:98:64:ca: 91:bf:6f:b8:06:45:32:df:94:9c:33:1f:4f:d0:6a: 49:21:67:bb:c9:f4:8d:be:36:c5:d5:2a:f7:b7:fb: 71:f3:1d:45:e4:aa:12:84:c8:99:d8:3d:d7:9a:ff: c2:0c:c3:22:36:0d:33:a1:ff:4b:9b:cf:9f:c4:23: 7a:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:9D:07:99:F2:9F:F7:7F:C4:7C:07:63:5B:D6:67:23:B9:D9:F7:3E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:e7:b2:b6:ba:fd:cf:be:de:37:a5:dd:c9:02:a5:41:0d:1c: 98:f6:a5:c3:b8:ae:3e:1e:fa:47:a3:aa:94:df:fb:09:24:2d: ea:25:b6:87:1b:3f:c5:66:2a:dc:72:92:c4:22:31:cc:93:15: ea:8a:8d:6f:7c:2c:09:d1:e4:99:52:86:bf:55:50:70:70:71: 19:1c:a7:54:e8:60:62:44:e9:ab:98:a5:d1:b2:07:09:91:da: 0e:00:a1:b0:3b:cf:b9:fd:2a:8e:aa:c8:ef:69:3b:33:6d:66: e7:f4:30:d9:85:67:c9:a6:56:60:42:2b:dc:60:6c:50:b8:07: da:a9:5c:84:38:49:fd:2d:bd:63:0a:c3:94:4e:a3:72:40:10: 94:4b:b8:64:5f:fb:30:96:8c:83:5a:46:c5:3c:91:83:73:1f: d2:42:6d:1e:d2:ca:99:e5:2b:9b:1f:bb:f6:7f:52:fe:cc:a0: a2:97:54:0f:0d:ed:0d:80:e0:2a:38:cf:f9:8d:90:48:a5:a9: e2:59:0c:24:0e:ec:64:d2:8f:53:06:b6:a5:fd:e5:47:81:ac: 46:57:3d:a1:f4:83:4a:c7:e2:6e:fb:52:61:48:17:9c:1f:67: a7:bd:bb:b8:0f:36:89:b4:04:dd:b7:21:9d:fe:7a:b3:39:15: 22:34:c7:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEf9WQemVC9NRcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NmFlNmI1NjMtMTQ1NS00ZWU4LTgzZjktYWM3M2JhZDBiYTIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArW9uVwMh8W/D++D2mJxXKFE0VoI2dA24310h EaPVu/ECrQc58tcOIm4wRt0e150zQc9XI1xg9C08qih9lV4yqdXUu/KNrVZLEy64 Vo08nFDXpeAINNvVX2VMoEgzAWFs8NbIjo06dxmo58WjRddRvMjiJY7WRw83q8l+ W7rLND6Ayii2i4nYxTtRGJ05TzIxbxIyhYQC2UGNm3YhqFqHkglVB+twl4BqjgmN m3PHqWdJKPd+Ty4fd6TC3+yy2KKYZMqRv2+4BkUy35ScMx9P0GpJIWe7yfSNvjbF 1Sr3t/tx8x1F5KoShMiZ2D3Xmv/CDMMiNg0zof9Lm8+fxCN6kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJydB5nyn/d/xHwHY1vWZyO52fc+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjc3YmQ5YmItYWU2Zi0z N2E5LWIxMTQtM2RlNzNhZTU1ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG7nsra6/c++3jel3ckCpUENHJj2pcO4rj4e+kejqpTf+wkkLeoltocb P8VmKtxyksQiMcyTFeqKjW98LAnR5JlShr9VUHBwcRkcp1ToYGJE6auYpdGyBwmR 2g4AobA7z7n9Ko6qyO9pOzNtZuf0MNmFZ8mmVmBCK9xgbFC4B9qpXIQ4Sf0tvWMK w5ROo3JAEJRLuGRf+zCWjINaRsU8kYNzH9JCbR7SypnlK5sfu/Z/Uv7MoKKXVA8N 7Q2A4Co4z/mNkEilqeJZDCQO7GTSj1MGtqX95UeBrEZXPaH0g0rH4m77UmFIF5wf Z6e9u7gPNom0BN23IZ3+erM5FSI0xxg= -----END CERTIFICATE-----Generated at Sat Jul 26 00:05:54 2025 by rpki-client