$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa File: fa384edc-a611-3e15-9f11-52686901fc5a.roa (raw, json) Hash identifier: nKsSU82SsWxFrWZ7ATJeXFpC0YsnKI7kOjzLf4KJEf8= Subject key identifier: 5B:1F:8C:90:C5:6B:78:65:78:AD:04:EF:60:68:11:9B:FA:3E:DE:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84114E6B4F2E75DBEDC44740 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.229.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:4e:6b:4f:2e:75:db:ed:c4:47:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=65d63858-a392-4cb6-a8f8-16832f787a59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:f6:5b:4e:4e:35:2c:64:6a:f2:3c:3c:a7:13: a3:ae:99:78:88:c5:8e:be:6a:17:c5:d0:92:df:23: 91:96:f7:9f:99:17:e4:db:f3:af:63:b5:c3:11:d4: 40:12:e0:ae:3b:68:ad:49:df:d3:2a:79:86:05:2f: c6:1e:08:00:03:33:61:c7:8e:24:10:c4:20:95:ed: 6f:b0:b7:a3:1a:e2:4f:53:1a:55:e8:c7:f2:4d:42: 45:1f:9d:c3:e3:00:29:6d:90:4d:84:5b:7f:fa:72: 44:75:20:97:9b:1a:53:ba:29:c8:3a:f8:d7:a1:ee: d8:86:6a:22:24:32:62:c6:0b:d4:6c:70:a6:81:85: c1:1b:29:8f:a0:76:41:25:7b:ab:a9:89:1f:c8:c2: 0c:98:d6:73:b2:9f:28:76:d2:92:52:79:ea:4d:1a: 7b:c3:8d:57:0b:1a:8a:f4:56:2a:8c:27:27:4f:c8: 14:e9:66:f8:a2:6f:2d:9c:86:60:50:d3:41:03:57: a1:37:33:e7:d9:3b:92:49:19:34:0b:33:33:3d:e5: 58:07:db:46:4b:4f:4c:8f:ff:94:33:51:0f:25:2c: 2a:b1:e2:1f:0d:49:2f:55:2a:a9:3f:da:ae:cf:fd: 6b:49:60:2f:26:d4:f6:79:ab:5d:0b:b5:74:62:18: c5:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1F:8C:90:C5:6B:78:65:78:AD:04:EF:60:68:11:9B:FA:3E:DE:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa384edc-a611-3e15-9f11-52686901fc5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.229.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:05:f3:68:82:e8:c4:b8:57:2c:91:ca:18:63:cc:8e:6f:e7: 6d:0b:7c:1a:8e:b2:f7:d8:bc:b8:2e:ef:06:33:82:15:75:e0: bd:ba:ee:6e:e9:60:42:4d:5b:95:f7:b3:02:aa:bd:37:2f:a4: d0:c5:b1:29:4f:89:0b:48:0d:1b:32:9d:af:4d:6c:1d:60:96: 71:53:5c:6b:93:ba:d3:83:07:f6:26:8a:3c:19:5e:dd:ad:48: c6:8e:48:98:94:24:89:a3:9c:31:72:ee:41:58:b5:c1:f3:60: 05:fa:69:43:71:c5:5a:98:dd:32:c0:db:3a:86:bd:cd:21:8a: 72:c8:09:e7:6b:f5:e4:91:b2:5d:45:1f:2e:f0:3a:a3:5b:6a: 95:1a:bd:4c:98:25:5f:88:6c:e2:f7:e0:c3:75:e8:f0:8b:b0: 26:e9:a8:ab:fd:e8:ea:0b:b7:9d:a6:8f:2f:6a:d7:78:63:66: 62:38:5d:cf:dd:15:70:f2:86:35:c6:23:d0:b7:d8:29:1c:95: 85:cf:12:ef:f5:fb:c3:55:7c:79:9a:28:ad:75:d7:8c:ba:f8: 43:8e:7e:90:bf:5a:5d:93:73:bb:cc:b9:d8:3f:23:25:ed:f8: 29:9e:26:28:48:3e:41:b2:7e:00:85:d8:4f:f7:8b:3e:73:3e: 40:d3:58:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEU5rTy512+3ER0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk NjVkNjM4NTgtYTM5Mi00Y2I2LWE4ZjgtMTY4MzJmNzg3YTU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4vZbTk41LGRq8jw8pxOjrpl4iMWOvmoXxdCS 3yORlvefmRfk2/OvY7XDEdRAEuCuO2itSd/TKnmGBS/GHggAAzNhx44kEMQgle1v sLejGuJPUxpV6MfyTUJFH53D4wApbZBNhFt/+nJEdSCXmxpTuinIOvjXoe7Yhmoi JDJixgvUbHCmgYXBGymPoHZBJXurqYkfyMIMmNZzsp8odtKSUnnqTRp7w41XCxqK 9FYqjCcnT8gU6Wb4om8tnIZgUNNBA1ehNzPn2TuSSRk0CzMzPeVYB9tGS09Mj/+U M1EPJSwqseIfDUkvVSqpP9quz/1rSWAvJtT2eatdC7V0YhjFTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsfjJDFa3hleK0E72BoEZv6Pt5TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEzODRlZGMtYTYxMS0z ZTE1LTlmMTEtNTI2ODY5MDFmYzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACoF82iC6MS4VyyRyhhjzI5v520LfBqOsvfYvLgu7wYzghV14L267m7p YEJNW5X3swKqvTcvpNDFsSlPiQtIDRsyna9NbB1glnFTXGuTutODB/YmijwZXt2t SMaOSJiUJImjnDFy7kFYtcHzYAX6aUNxxVqY3TLA2zqGvc0hinLICedr9eSRsl1F Hy7wOqNbapUavUyYJV+IbOL34MN16PCLsCbpqKv96OoLt52mjy9q13hjZmI4Xc/d FXDyhjXGI9C32CkclYXPEu/1+8NVfHmaKK1114y6+EOOfpC/Wl2Tc7vMudg/IyXt +CmeJihIPkGyfgCF2E/3iz5zPkDTWAU= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:33 2025 by rpki-client