$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa File: 01207d9e-3598-33a2-9041-7a4fafffdb25.roa (raw, json) Hash identifier: cau269chF6dX0safMwuK4l7R9zqXXCEn93daeAjsd4g= Subject key identifier: 1F:36:3E:0D:46:EB:9E:8D:F7:6F:D7:2E:91:08:61:AA:67:20:DF:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE00E1BA0EFFD3351D900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e0:0e:1b:a0:ef:fd:33:51:d9:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=72ae180f-59bd-41b8-bf6e-2b72666b8770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:c6:fc:b1:29:c9:41:56:c8:12:c7:fb:ec:6b: 43:5e:81:50:6d:ac:e2:47:df:42:e9:e5:8e:9e:63: 35:b8:6e:72:10:0e:f7:bb:61:16:3a:7b:28:67:0e: ab:b8:cc:ed:f0:96:79:23:c7:38:eb:c0:0b:98:bd: d4:90:9b:de:64:0a:a2:bf:1c:21:4d:85:5b:b3:fb: ae:5b:9e:c8:f7:20:ad:cd:94:4a:9c:f5:e3:7f:42: 28:d9:c6:0f:7a:f6:99:e2:2e:17:a1:f4:c3:9b:47: 6c:c3:dd:ec:5b:ad:c8:85:d7:07:15:24:cf:5a:db: 84:e5:49:e2:e0:8f:57:80:4d:ba:93:0b:9f:a0:c8: 81:61:77:83:2b:c1:66:b1:1f:23:ba:51:04:71:03: 03:b0:5f:ab:75:90:8a:2e:38:5f:89:b2:5c:96:d6: 3a:44:15:40:07:24:d7:8e:95:ae:69:8f:5f:69:4f: 2f:00:2b:b0:71:7e:4a:34:72:1e:ae:b8:34:08:9d: 5e:75:b1:b5:39:3b:50:95:d8:99:17:6e:d8:dd:67: ab:16:23:21:e1:82:c7:98:db:9d:c9:06:17:83:7b: d1:b8:b6:3a:94:82:1a:1a:fc:5d:28:ed:98:da:d1: 97:2a:cc:cd:b8:fd:5c:38:8f:ad:12:04:e6:ab:01: 40:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:36:3E:0D:46:EB:9E:8D:F7:6F:D7:2E:91:08:61:AA:67:20:DF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:e1:6f:a6:0b:bf:d6:ba:eb:10:83:44:27:94:0a:95:0a:00: ba:1f:2f:5c:4f:d0:15:9b:b4:9b:21:b6:ad:6c:46:72:52:ed: 7a:c2:54:f4:6f:23:48:a4:d5:63:66:36:fd:8e:d1:73:66:04: 1e:d1:c5:80:6f:1b:d8:07:bf:4a:3e:51:cf:e2:6c:7e:3e:bb: 22:55:8a:72:68:a7:29:8b:96:3d:eb:bc:c7:15:62:0e:4a:64: 12:8b:58:60:d6:b5:3e:61:35:33:38:67:5d:4c:af:33:21:13: 67:b4:28:02:f4:92:da:f7:4c:7a:1b:ab:77:c6:95:44:3e:f4: fe:2d:97:a0:1d:a9:73:6d:8c:b8:ba:3d:91:40:55:b4:12:d9: c1:3d:1a:10:a4:5d:df:27:02:c8:9d:cf:9e:7b:d9:ec:b2:19: 7b:a3:00:6a:f9:85:27:46:ce:f1:24:c6:4f:93:a8:2c:48:3f: 0d:8c:f8:29:8b:92:54:48:be:6d:f5:2b:2f:e4:7d:02:55:1a: 29:94:43:77:ce:e5:06:f8:89:c0:39:ce:95:bc:80:00:31:4b: 19:f4:f3:41:7b:a0:84:37:17:f4:97:6f:6c:f9:49:2f:61:95: 28:55:e4:4e:0b:cd:a8:6e:20:50:5e:ae:0f:83:f1:61:ca:f2: a9:27:4c:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeAOG6Dv/TNR2QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzJhZTE4MGYtNTliZC00MWI4LWJmNmUtMmI3MjY2NmI4NzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcb8sSnJQVbIEsf77GtDXoFQbaziR99C6eWO nmM1uG5yEA73u2EWOnsoZw6ruMzt8JZ5I8c468ALmL3UkJveZAqivxwhTYVbs/uu W57I9yCtzZRKnPXjf0Io2cYPevaZ4i4XofTDm0dsw93sW63IhdcHFSTPWtuE5Uni 4I9XgE26kwufoMiBYXeDK8FmsR8julEEcQMDsF+rdZCKLjhfibJcltY6RBVAByTX jpWuaY9faU8vACuwcX5KNHIerrg0CJ1edbG1OTtQldiZF27Y3WerFiMh4YLHmNud yQYXg3vRuLY6lIIaGvxdKO2Y2tGXKszNuP1cOI+tEgTmqwFAuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB82Pg1G656N92/XLpEIYapnIN/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDEyMDdkOWUtMzU5OC0z M2EyLTkwNDEtN2E0ZmFmZmZkYjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKLhb6YLv9a66xCDRCeUCpUKALofL1xP0BWbtJshtq1sRnJS7XrCVPRv I0ik1WNmNv2O0XNmBB7RxYBvG9gHv0o+Uc/ibH4+uyJVinJopymLlj3rvMcVYg5K ZBKLWGDWtT5hNTM4Z11MrzMhE2e0KAL0ktr3THobq3fGlUQ+9P4tl6AdqXNtjLi6 PZFAVbQS2cE9GhCkXd8nAsidz5572eyyGXujAGr5hSdGzvEkxk+TqCxIPw2M+CmL klRIvm31Ky/kfQJVGimUQ3fO5Qb4icA5zpW8gAAxSxn080F7oIQ3F/SXb2z5SS9h lShV5E4LzahuIFBerg+D8WHK8qknTA8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:12 2025 by rpki-client