$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa File: 05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa (raw, json) Hash identifier: jAz2hv5sMFhUWXgJZV+kxX4HpVJ6aFu6TbpQFjHbKR8= Subject key identifier: F9:57:88:BE:80:A0:19:83:E6:06:74:D0:8F:94:AD:EC:B6:A8:93:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD25C3D861195C5324C280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.236.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:25:c3:d8:61:19:5c:53:24:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dc58283a-4ea1-4c0e-8e1a-dc6e75ed5d87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:73:bd:f7:41:66:b1:ec:66:a7:f8:91:5b: bd:65:20:0f:b4:31:8e:f1:45:fd:7c:e9:22:3d:dd: 49:96:ce:a8:e9:c3:b4:ae:65:71:ee:d2:91:7b:f3: ed:96:fc:c2:b5:0c:e3:36:11:c2:12:0a:12:ef:7b: 77:f4:2c:96:98:fe:52:93:d9:69:5d:a2:21:a7:58: 13:c3:73:6b:48:81:27:88:19:02:9e:8f:98:09:f1: 0b:5e:28:ed:c0:9e:a0:e0:87:4d:7c:9a:ab:86:20: ff:e1:b6:69:63:32:40:30:13:1b:f2:86:1e:bd:65: 01:48:10:ed:b2:77:ba:ec:b2:ea:17:aa:c3:f3:36: 7b:a4:d7:58:f7:08:51:06:e7:31:b6:f2:32:bb:69: e7:af:7e:37:0f:bb:f0:59:1c:96:bf:9b:d0:49:11: 03:3d:98:a5:c8:62:5b:c9:fd:48:f7:af:89:f7:6a: 23:e5:7e:54:4f:f9:e9:b7:bd:0f:6d:a8:f9:87:c6: e4:af:f5:68:76:9d:ff:a1:71:f9:19:08:8f:38:ff: be:69:a3:bb:2f:88:e4:0d:3b:f1:95:95:7c:97:ea: e2:92:a2:44:b6:8a:ef:35:96:f7:be:06:2d:74:18: dd:ea:26:29:5c:f0:96:6c:57:e1:27:12:82:e5:96: 34:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:57:88:BE:80:A0:19:83:E6:06:74:D0:8F:94:AD:EC:B6:A8:93:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05c6e145-7a04-35d5-b8aa-bebf94ae0361.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.236.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:06:a1:24:0c:a5:d6:2e:df:20:2a:91:bf:98:f9:0c:1a:dd: 52:8f:23:25:b4:8d:98:fb:4b:43:ce:a8:7d:84:bc:1e:8c:2b: 3a:21:8b:d9:c4:0c:3f:4d:51:b4:06:e5:c8:e3:8b:cc:fe:65: 20:75:39:6c:03:ae:db:23:62:9e:19:3b:11:5e:57:41:1e:8e: 83:d1:d7:31:d0:1f:41:f9:6d:9d:4a:f8:09:e4:cb:e9:58:20: d9:5d:93:a6:54:09:75:db:b4:2c:09:f7:9a:a8:17:9d:22:8d: ff:a9:5a:32:18:c5:0f:42:1f:14:10:05:33:9c:33:85:a5:30: d6:e6:44:45:cf:c7:fb:af:75:dd:44:be:dc:b9:da:cc:d0:a1: 24:a4:c0:22:98:fd:b7:e4:1c:06:31:82:20:a4:0e:a9:60:c2: a4:09:fc:16:9a:ea:f9:c9:56:7a:0e:e8:c3:70:aa:54:7d:fd: 2e:7e:79:3a:5c:e7:5d:66:ff:79:9c:ac:62:f3:c9:22:04:9c: 8c:e2:d7:32:8f:ad:7f:08:be:9a:1c:a2:3a:01:a6:65:2a:ad: 14:79:46:39:5a:b8:b2:33:ff:cc:5c:01:37:47:1e:ac:05:f6: 03:07:41:70:0b:48:7d:c9:f1:2e:5d:e6:c6:7c:84:bb:fa:b1: 44:e8:44:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSXD2GEZXFMkwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGM1ODI4M2EtNGVhMS00YzBlLThlMWEtZGM2ZTc1ZWQ1ZDg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVFzvfdBZrHsZqf4kVu9ZSAPtDGO8UX9fOki Pd1Jls6o6cO0rmVx7tKRe/PtlvzCtQzjNhHCEgoS73t39CyWmP5Sk9lpXaIhp1gT w3NrSIEniBkCno+YCfELXijtwJ6g4IdNfJqrhiD/4bZpYzJAMBMb8oYevWUBSBDt sne67LLqF6rD8zZ7pNdY9whRBucxtvIyu2nnr343D7vwWRyWv5vQSREDPZilyGJb yf1I96+J92oj5X5UT/npt70Pbaj5h8bkr/Vodp3/oXH5GQiPOP++aaO7L4jkDTvx lZV8l+rikqJEtorvNZb3vgYtdBjd6iYpXPCWbFfhJxKC5ZY0UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlXiL6AoBmD5gZ00I+Urey2qJMwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDVjNmUxNDUtN2EwNC0z NWQ1LWI4YWEtYmViZjk0YWUwMzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH4GoSQMpdYu3yAqkb+Y+Qwa3VKPIyW0jZj7S0POqH2EvB6MKzohi9nE DD9NUbQG5cjji8z+ZSB1OWwDrtsjYp4ZOxFeV0EejoPR1zHQH0H5bZ1K+Anky+lY INldk6ZUCXXbtCwJ95qoF50ijf+pWjIYxQ9CHxQQBTOcM4WlMNbmREXPx/uvdd1E vty52szQoSSkwCKY/bfkHAYxgiCkDqlgwqQJ/Baa6vnJVnoO6MNwqlR9/S5+eTpc 511m/3mcrGLzySIEnIzi1zKPrX8IvpocojoBpmUqrRR5RjlauLIz/8xcATdHHqwF 9gMHQXALSH3J8S5d5sZ8hLv6sUToREg= -----END CERTIFICATE-----Generated at Mon Oct 20 07:15:02 2025 by rpki-client