$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8032edc3-44df-366a-b94d-4ea68636a34b.roa File: 8032edc3-44df-366a-b94d-4ea68636a34b.roa (raw, json) Hash identifier: nlFE8jUXNkzjNr1+gWa53dflmPBEdg1IFF1aRmYOXwI= Subject key identifier: 90:32:99:45:94:E9:A1:C5:74:F5:56:5D:8B:7C:ED:09:F5:69:F8:DA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A841146CDE9F793B3754927C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8032edc3-44df-366a-b94d-4ea68636a34b.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 172.242.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:46:cd:e9:f7:93:b3:75:49:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=f9f7aa49-440d-4f32-aa5f-db54373de778 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:a7:1d:56:6d:af:1c:3a:30:00:ae:05:eb:ff: 8b:42:8d:37:4d:da:21:84:b8:90:fe:38:7b:de:f2: 58:ec:c7:01:58:3c:d9:e8:a6:bb:fd:bb:cf:62:ed: 8f:e6:43:40:ce:b4:0b:a4:9d:3b:8e:7e:84:b2:3a: 1e:00:4f:ce:d6:ed:f2:37:33:47:d7:f0:ff:26:0f: 4a:9c:75:1e:0d:fe:1e:b3:00:4b:1e:5e:f9:8a:a0: cb:6d:b6:30:7e:5c:16:93:2b:05:54:de:f8:ae:30: 70:5e:18:18:08:eb:86:90:a0:b4:e3:c7:92:3c:24: 46:b8:4e:61:c3:ed:a5:97:22:85:a4:bf:d9:13:d9: e8:67:12:d8:3f:9f:40:48:f3:d4:32:4c:6e:f0:aa: 3f:a2:76:c4:f7:c6:b2:5f:1e:6b:29:02:46:10:bb: 7a:11:97:1c:e7:3f:99:be:7c:d5:28:f0:32:6e:36: e4:cc:33:b9:33:fd:c1:ca:00:8e:9e:d8:d5:de:a6: 21:21:c0:65:b6:16:fc:80:7a:c4:e5:95:16:dd:a3: 0f:67:9b:be:ea:1c:ea:b2:a4:68:89:94:65:27:19: 59:2e:48:5e:92:21:e8:65:b4:c7:0a:31:24:a2:47: c7:23:77:15:00:40:a2:bf:30:ce:37:a2:98:97:df: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:99:45:94:E9:A1:C5:74:F5:56:5D:8B:7C:ED:09:F5:69:F8:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8032edc3-44df-366a-b94d-4ea68636a34b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:65:c7:3b:35:c0:62:4e:c7:b9:03:c9:e7:ce:5b:3d:fa:cf: 86:74:6a:fa:45:1f:ac:e0:42:db:e7:32:53:ee:b6:1d:09:95: 8d:50:51:2a:a5:83:d6:e5:e8:f9:85:c3:d7:bb:81:c3:f8:4e: 02:c8:a5:a0:fa:5a:eb:5c:f2:ca:23:b9:c6:e1:a4:e4:26:b6: b4:f9:05:8f:98:64:84:88:13:b1:39:2e:46:a3:2b:77:e6:c6: f3:2b:54:0d:1c:39:96:13:d4:af:47:72:c7:e6:b4:74:1d:b2: f9:4b:70:2a:71:9d:44:1a:25:b5:61:b6:94:f9:70:10:30:44: fd:bf:3c:c2:f4:0c:65:7f:9f:99:c7:2e:c7:41:48:17:e4:28: a6:2b:ef:a4:28:54:f0:93:51:0c:1a:fd:40:bf:6f:d7:97:13: f8:bb:5d:47:cd:8b:78:bd:a7:8f:90:7c:86:d9:b7:1d:2b:f7: a0:dd:5f:73:08:e7:fd:87:19:f6:3c:4f:51:8f:30:97:46:24: 0b:3d:39:d9:96:94:67:2c:d9:4e:49:aa:87:b2:c7:9a:24:0c: a4:57:04:e6:d5:c6:22:a8:df:29:4a:c9:b4:53:98:62:ae:48: 50:93:5a:15:33:f3:0a:95:9a:6e:29:c1:e9:bc:08:27:bc:88: df:ab:09:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEUbN6feTs3VJJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk ZjlmN2FhNDktNDQwZC00ZjMyLWFhNWYtZGI1NDM3M2RlNzc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6cdVm2vHDowAK4F6/+LQo03TdohhLiQ/jh7 3vJY7McBWDzZ6Ka7/bvPYu2P5kNAzrQLpJ07jn6EsjoeAE/O1u3yNzNH1/D/Jg9K nHUeDf4eswBLHl75iqDLbbYwflwWkysFVN74rjBwXhgYCOuGkKC048eSPCRGuE5h w+2llyKFpL/ZE9noZxLYP59ASPPUMkxu8Ko/onbE98ayXx5rKQJGELt6EZcc5z+Z vnzVKPAybjbkzDO5M/3BygCOntjV3qYhIcBlthb8gHrE5ZUW3aMPZ5u+6hzqsqRo iZRlJxlZLkhekiHoZbTHCjEkokfHI3cVAECivzDON6KYl99T/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAymUWU6aHFdPVWXYt87Qn1afjaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODAzMmVkYzMtNDRkZi0z NjZhLWI5NGQtNGVhNjg2MzZhMzRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACplxzs1wGJOx7kDyefOWz36z4Z0avpFH6zgQtvnMlPuth0JlY1QUSql g9bl6PmFw9e7gcP4TgLIpaD6Wutc8sojucbhpOQmtrT5BY+YZISIE7E5LkajK3fm xvMrVA0cOZYT1K9HcsfmtHQdsvlLcCpxnUQaJbVhtpT5cBAwRP2/PML0DGV/n5nH LsdBSBfkKKYr76QoVPCTUQwa/UC/b9eXE/i7XUfNi3i9p4+QfIbZtx0r96DdX3MI 5/2HGfY8T1GPMJdGJAs9OdmWlGcs2U5Jqoeyx5okDKRXBObVxiKo3ylKybRTmGKu SFCTWhUz8wqVmm4pwem8CCe8iN+rCZE= -----END CERTIFICATE-----Generated at Tue Aug 5 23:02:06 2025 by rpki-client