$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa File: 0b94eb6e-546d-3206-8024-f1e432ee56f0.roa (raw, json) Hash identifier: n4jwLx9RNEtbtUWWRApX+r0UxZrBI2nuYYNK9AC7Aco= Subject key identifier: 66:07:64:4B:77:DF:7C:7D:18:FC:4E:D2:93:9F:0D:1E:52:FA:A4:EE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDDC049F29354237B3100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:dd:c0:49:f2:93:54:23:7b:31:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=416e8571-4326-4066-a29f-21a77628a858 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:73:0f:f1:4f:c1:9b:6a:c8:91:46:1f:19:16: 5b:31:e8:f3:3a:2d:93:8f:42:0d:e9:a4:28:16:82: 2a:d5:0e:cf:f5:24:09:49:2f:e7:74:e4:91:3c:0e: 1c:31:ea:b7:a7:a9:9f:a8:fe:9e:a6:98:44:48:af: e6:9e:8b:6d:15:60:dd:96:c3:23:eb:4a:21:9f:ac: ef:e0:e1:eb:e1:91:34:84:48:9d:01:d7:fd:19:38: eb:ab:e3:6f:8b:10:65:2e:82:cb:90:72:10:39:97: d6:c5:c8:87:63:05:ca:4b:47:5a:17:35:ed:9c:41: 8e:2f:4d:e9:92:a6:41:25:89:ca:90:57:9e:c1:37: d0:c8:5d:10:5f:69:57:27:c8:ca:f9:4a:d1:37:ce: a1:23:c3:5b:4b:13:c0:65:02:9a:ed:69:80:40:32: 14:79:c3:bb:81:a1:06:87:32:5b:6b:63:c2:0c:28: 06:d8:da:f2:4c:2e:57:08:3f:94:db:88:23:9d:ca: 48:09:24:8f:23:ba:63:8f:92:63:81:1b:e6:d2:72: 24:8c:0b:4c:78:1d:54:40:70:1f:84:2f:89:bb:a5: 70:76:c7:2a:f7:14:b3:22:6c:80:1e:41:d8:26:9b: cb:5f:57:69:8a:d3:2a:6d:84:b8:08:42:a9:ce:43: 00:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:07:64:4B:77:DF:7C:7D:18:FC:4E:D2:93:9F:0D:1E:52:FA:A4:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b94eb6e-546d-3206-8024-f1e432ee56f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:5b:fe:91:3e:cf:42:91:cd:d3:e6:be:9e:3f:eb:e3:ce:80: 85:9d:bb:1d:b5:3a:97:bc:d1:d4:88:e4:9c:bb:7d:45:97:bc: 56:cd:48:59:11:f3:2c:7a:1c:28:83:4f:b8:24:be:3f:91:e1: 6d:54:97:1f:c9:18:de:0f:8f:aa:b0:ce:d0:e8:03:03:ca:69: 20:b0:8a:1b:7c:45:8a:eb:42:80:d0:5a:ea:01:94:31:0f:d8: a3:5a:0a:a0:24:cb:ee:c5:7e:2d:62:72:86:2f:75:cc:16:75: b6:e4:70:bb:a9:9b:6f:fe:41:30:12:9c:a8:15:a3:4d:d6:c3: e2:4d:cb:17:59:b7:22:5b:1b:85:71:cd:ec:eb:ee:47:f8:95: 88:fe:8b:c3:1d:f1:7c:c2:82:23:19:29:a0:04:23:c0:a0:61: 03:6f:df:1a:62:00:cb:0c:b2:93:88:5f:2d:72:5f:fb:94:04: 79:95:71:22:a7:65:31:63:97:80:40:8a:fa:2b:a3:aa:ed:49: 2c:3b:9a:f0:d7:e8:59:88:89:cb:56:7f:fd:a5:88:3b:78:30: 4c:c5:54:8e:d9:cb:43:49:04:cc:bf:da:a0:77:91:bf:50:49: bb:99:0b:e3:3c:09:03:cc:bb:11:ad:03:2b:59:11:af:92:5a: f6:ef:72:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzd3ASfKTVCN7MQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDE2ZTg1NzEtNDMyNi00MDY2LWEyOWYtMjFhNzc2MjhhODU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXMP8U/Bm2rIkUYfGRZbMejzOi2Tj0IN6aQo FoIq1Q7P9SQJSS/ndOSRPA4cMeq3p6mfqP6epphESK/mnottFWDdlsMj60ohn6zv 4OHr4ZE0hEidAdf9GTjrq+NvixBlLoLLkHIQOZfWxciHYwXKS0daFzXtnEGOL03p kqZBJYnKkFeewTfQyF0QX2lXJ8jK+UrRN86hI8NbSxPAZQKa7WmAQDIUecO7gaEG hzJba2PCDCgG2NryTC5XCD+U24gjncpICSSPI7pjj5JjgRvm0nIkjAtMeB1UQHAf hC+Ju6Vwdscq9xSzImyAHkHYJpvLX1dpitMqbYS4CEKpzkMAgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGYHZEt333x9GPxO0pOfDR5S+qTuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI5NGViNmUtNTQ2ZC0z MjA2LTgwMjQtZjFlNDMyZWU1NmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAxb/pE+z0KRzdPmvp4/6+POgIWdux21Ope80dSI5Jy7fUWXvFbNSFkR 8yx6HCiDT7gkvj+R4W1Ulx/JGN4Pj6qwztDoAwPKaSCwiht8RYrrQoDQWuoBlDEP 2KNaCqAky+7Ffi1icoYvdcwWdbbkcLupm2/+QTASnKgVo03Ww+JNyxdZtyJbG4Vx zezr7kf4lYj+i8Md8XzCgiMZKaAEI8CgYQNv3xpiAMsMspOIXy1yX/uUBHmVcSKn ZTFjl4BAivoro6rtSSw7mvDX6FmIictWf/2liDt4MEzFVI7Zy0NJBMy/2qB3kb9Q SbuZC+M8CQPMuxGtAytZEa+SWvbvcmc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:25 2025 by rpki-client