$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa File: ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa (raw, json) Hash identifier: mLkQ/xP3zQMgltElMVdgpEzXo6vV6wa7CWc7K8Wk1mE= Subject key identifier: D6:D7:AE:EB:FB:5D:F3:F0:61:F0:F5:04:6A:E4:19:00:C3:58:56:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841204F8BFAD73187E750F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.243.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:04:f8:bf:ad:73:18:7e:75:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=0b14fc72-b6d9-4dc9-a12d-5301e99666bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:d6:4a:8d:b8:82:aa:47:78:22:d7:3e:9f:cd: 25:be:3b:8a:ae:9d:64:52:42:d6:50:62:fe:6d:bc: 03:c1:4c:26:77:35:0c:e5:cc:d8:bf:09:f0:c1:f7: fb:25:4c:d6:5a:17:38:53:3a:22:95:bb:74:d3:de: 62:03:5b:78:ef:ff:0e:88:8e:04:c0:0c:6e:95:a2: 87:a9:fe:be:f3:0f:5e:fe:09:e5:29:57:ff:b8:b2: 96:10:97:00:fd:88:15:f1:d4:1d:bd:1c:9c:bc:a1: 3f:7f:87:b5:e6:51:38:f9:c3:bb:03:67:13:e3:cb: fc:94:6c:71:a9:1d:0b:4a:8d:8e:7a:27:7f:d7:70: 58:d6:8c:01:0a:0a:0c:54:62:ef:23:4b:39:f5:a9: 96:1a:e7:ff:d2:8d:b7:a0:53:b8:55:13:68:80:f9: e3:2c:af:06:c2:ab:09:8a:91:c9:82:72:2f:33:36: 86:ba:66:61:d3:72:ea:10:5a:e1:2e:ef:c2:bc:8c: d7:30:1e:79:bf:c3:6a:ee:b9:90:37:27:b9:c0:3a: 08:6c:a3:d5:1d:0f:92:01:53:74:35:33:3e:f7:e8: d2:a1:df:fa:88:14:d7:90:68:aa:cf:66:b2:b4:b1: f7:8c:6c:91:be:07:d4:d9:69:48:e6:0a:20:6f:c0: e9:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:D7:AE:EB:FB:5D:F3:F0:61:F0:F5:04:6A:E4:19:00:C3:58:56:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:99:23:d4:52:65:dd:39:67:d0:17:1a:d9:6a:70:d5:7d:a4: c4:63:e3:40:ec:01:07:2c:ce:e0:4f:1d:55:9c:c0:0e:4d:41: 61:e8:94:53:c5:35:1a:52:50:02:3c:69:b1:94:e5:48:9d:49: f3:9c:53:68:81:9d:b1:33:71:4a:22:91:e9:c3:e8:fe:3d:07: 50:4d:9d:d9:7f:49:84:ec:79:5a:59:30:81:c2:3e:25:d2:09: 8e:58:56:66:27:ca:52:ed:87:a3:a0:0b:a2:f1:0e:09:e6:5d: 24:c0:86:3c:f1:6a:3a:0c:66:47:df:1f:34:b0:6f:b1:fe:88: 42:6e:75:6c:35:4b:01:43:9f:f0:c4:c1:f4:55:a4:b1:80:e4: 2d:05:21:3c:c8:27:95:87:5f:53:c3:9b:13:29:61:c8:03:32: 00:f0:8f:5d:a5:90:8c:ef:bf:6a:5b:30:f5:ca:4d:1d:8a:a7: a2:79:af:09:c3:6c:00:a9:9c:e2:e4:ef:6d:a4:fd:2e:b4:6a: 9b:1b:b7:ac:b1:76:6a:d5:eb:43:fa:9d:27:6e:ae:20:23:07: 94:7f:57:71:95:85:93:30:ea:b5:be:7c:2b:96:c2:2d:0a:dd: 1d:bd:f4:13:9b:32:e7:b9:98:f9:5c:82:a3:e9:cf:8d:86:95: f1:7f:4c:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEgT4v61zGH51DwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MGIxNGZjNzItYjZkOS00ZGM5LWExMmQtNTMwMWU5OTY2NmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjNZKjbiCqkd4Itc+n80lvjuKrp1kUkLWUGL+ bbwDwUwmdzUM5czYvwnwwff7JUzWWhc4Uzoilbt0095iA1t47/8OiI4EwAxulaKH qf6+8w9e/gnlKVf/uLKWEJcA/YgV8dQdvRycvKE/f4e15lE4+cO7A2cT48v8lGxx qR0LSo2Oeid/13BY1owBCgoMVGLvI0s59amWGuf/0o23oFO4VRNogPnjLK8GwqsJ ipHJgnIvMzaGumZh03LqEFrhLu/CvIzXMB55v8Nq7rmQNye5wDoIbKPVHQ+SAVN0 NTM+9+jSod/6iBTXkGiqz2aytLH3jGyRvgfU2WlI5gogb8DpUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbXruv7XfPwYfD1BGrkGQDDWFawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmZlOWRmZjgtMDk0NC0z ZTU4LTlkYTUtY2U4YjZmNWYxNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMGZI9RSZd05Z9AXGtlqcNV9pMRj40DsAQcszuBPHVWcwA5NQWHolFPF NRpSUAI8abGU5UidSfOcU2iBnbEzcUoikenD6P49B1BNndl/SYTseVpZMIHCPiXS CY5YVmYnylLth6OgC6LxDgnmXSTAhjzxajoMZkffHzSwb7H+iEJudWw1SwFDn/DE wfRVpLGA5C0FITzIJ5WHX1PDmxMpYcgDMgDwj12lkIzvv2pbMPXKTR2Kp6J5rwnD bACpnOLk722k/S60apsbt6yxdmrV60P6nSduriAjB5R/V3GVhZMw6rW+fCuWwi0K 3R299BObMue5mPlcgqPpz42GlfF/TEE= -----END CERTIFICATE-----Generated at Sat Jul 26 00:07:38 2025 by rpki-client