$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa File: 5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa (raw, json) Hash identifier: 39rW4iUtCA5FwUSQH5KYMtEm8vYTvD5W7Xo2vP8Sfv8= Subject key identifier: 55:C7:D5:FD:2C:FF:58:8A:2C:54:D3:8E:BC:B4:A6:4B:F8:B0:6C:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A35E589611FECCB49FD28D44C Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa Signing time: Mon 16 Jun 2025 13:01:03 +0000 ROA not before: Mon 16 Jun 2025 13:01:03 +0000 ROA not after: Sun 14 Sep 2025 13:01:03 +0000 asID: 7155 IP address blocks: 172.242.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:35:e5:89:61:1f:ec:cb:49:fd:28:d4:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jun 16 13:01:03 2025 GMT Not After : Sep 14 13:01:03 2025 GMT Subject: CN=803d6356-b7ad-4edd-a416-b32545db62b1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:22:c9:4c:4a:17:35:f4:da:51:cc:34:66:1f: 55:4d:d4:23:68:61:5b:ab:46:15:bd:24:71:5e:de: 12:82:56:81:db:73:d9:c9:de:43:74:10:a1:c5:05: e1:12:7e:14:0f:fb:d1:ae:99:a0:88:f3:89:ec:58: 48:94:b8:02:a4:43:13:cc:2a:0f:77:68:4e:78:c6: 63:a1:56:d2:43:fb:25:e1:07:34:11:e7:be:08:a0: 23:01:0f:81:5a:68:91:ba:6f:31:03:1b:19:09:5e: 45:7b:1f:92:54:10:c8:8c:4d:bf:e8:17:3d:79:96: 49:91:97:cd:29:4b:99:af:66:d5:03:f2:e7:ca:82: 78:4c:b5:71:89:6b:f0:2a:dc:93:7b:8f:8e:22:b9: c0:e4:c8:d9:ac:87:b0:94:4b:84:73:cb:0b:10:42: 2d:ff:23:f8:1b:04:ae:ce:47:4b:a9:ef:19:03:f3: 3c:06:c2:f1:77:00:d0:9b:ea:87:ed:fd:73:87:c8: db:4f:ee:a9:b2:85:1e:13:fd:eb:7b:70:98:7b:3f: 0a:43:c7:c0:c0:7b:50:af:88:d7:b5:9a:12:3e:7d: bd:81:95:26:bd:96:03:aa:f3:6d:59:51:58:1e:7c: 0e:fc:5f:69:fe:4e:61:fe:55:0f:01:10:7e:27:63: f0:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:C7:D5:FD:2C:FF:58:8A:2C:54:D3:8E:BC:B4:A6:4B:F8:B0:6C:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:e8:80:a8:ec:1a:9c:9f:cc:83:f7:ad:db:54:1e:ab:fb:0d: 78:5d:0d:5a:49:16:a5:bb:9a:53:3d:61:a9:4d:9e:b0:75:41: f5:d9:8b:3f:7c:b5:f7:a3:38:65:ee:b6:58:0a:f7:53:7d:d7: 58:a2:c0:cd:4f:9e:3a:52:aa:b7:a0:da:1f:eb:2c:03:43:00: bb:fe:86:9a:d4:76:a2:75:4e:4f:b6:99:4d:1f:38:b6:f1:99: 83:81:ab:18:f7:1d:51:09:29:b3:47:01:2f:15:c1:92:b3:6c: 04:1a:96:47:3e:39:3d:40:78:d6:6f:db:2c:25:4d:27:78:76: 2e:96:f1:58:87:fc:37:9f:25:9c:70:8d:d1:b0:2a:03:c7:ba: 57:13:92:2b:e2:e2:1f:5c:d9:f9:38:ab:34:63:58:6b:c7:1a: ff:4d:9b:1e:99:1d:5f:62:70:73:1d:1a:ca:e8:93:eb:32:ec: 1f:b3:23:a2:4b:bf:ec:77:44:d4:16:90:06:77:82:b8:a9:41: 1e:06:9e:b9:8d:2e:87:fe:c2:fb:95:1f:f5:87:36:61:a5:7c: 77:99:43:9b:f8:55:18:aa:b1:98:89:d4:57:82:46:a4:4f:36: f5:84:53:0f:e3:40:63:79:7d:aa:74:30:11:09:5c:44:ab:a0: ce:d4:c5:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo15YlhH+zLSf0o1EwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDYxNjEzMDEwM1oXDTI1MDkxNDEzMDEwM1owLzEtMCsGA1UEAxMk ODAzZDYzNTYtYjdhZC00ZWRkLWE0MTYtYjMyNTQ1ZGI2MmIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApiLJTEoXNfTaUcw0Zh9VTdQjaGFbq0YVvSRx Xt4SglaB23PZyd5DdBChxQXhEn4UD/vRrpmgiPOJ7FhIlLgCpEMTzCoPd2hOeMZj oVbSQ/sl4Qc0Eee+CKAjAQ+BWmiRum8xAxsZCV5Fex+SVBDIjE2/6Bc9eZZJkZfN KUuZr2bVA/LnyoJ4TLVxiWvwKtyTe4+OIrnA5MjZrIewlEuEc8sLEEIt/yP4GwSu zkdLqe8ZA/M8BsLxdwDQm+qH7f1zh8jbT+6psoUeE/3re3CYez8KQ8fAwHtQr4jX tZoSPn29gZUmvZYDqvNtWVFYHnwO/F9p/k5h/lUPARB+J2PwQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFXH1f0s/1iKLFTTjry0pkv4sGyxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWU2NmQzYjYtYzBmYS0z M2NkLTlmNGUtMzk1NTU3ZDIwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErPIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKvogKjsGpyfzIP3rdtUHqv7DXhdDVpJFqW7mlM9YalNnrB1QfXZiz98 tfejOGXutlgK91N911iiwM1PnjpSqreg2h/rLANDALv+hprUdqJ1Tk+2mU0fOLbx mYOBqxj3HVEJKbNHAS8VwZKzbAQalkc+OT1AeNZv2ywlTSd4di6W8ViH/DefJZxw jdGwKgPHulcTkivi4h9c2fk4qzRjWGvHGv9Nmx6ZHV9icHMdGsrok+sy7B+zI6JL v+x3RNQWkAZ3gripQR4GnrmNLof+wvuVH/WHNmGlfHeZQ5v4VRiqsZiJ1FeCRqRP NvWEUw/jQGN5fap0MBEJXESroM7Uxcs= -----END CERTIFICATE-----Generated at Sun Jun 29 16:36:47 2025 by rpki-client