$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa File: 10a855de-2f56-30f4-b7d6-ad843411b4b9.roa (raw, json) Hash identifier: 9l9jiAkN5vhZ8FBEY04gAmqaePZWdaP6UcsId8pq9dU= Subject key identifier: 2D:4B:B4:0C:1F:FE:03:BA:B2:2C:DB:73:76:0B:A2:C2:B0:54:EA:5F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1D330A8CE9F935970D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.242.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1d:33:0a:8c:e9:f9:35:97:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bcaa985b-395b-4065-9879-d92d8f517148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:9c:7c:b3:f0:7f:14:3c:43:62:d2:86:ae:0e: 1d:80:1c:b8:83:d3:40:2e:94:f6:22:00:3b:11:ab: 90:72:dd:6b:c4:f2:ec:8b:99:f3:71:08:fc:b8:2c: 0a:3f:61:44:53:9f:4e:d7:49:6b:17:45:35:80:28: b5:48:6d:f0:07:42:b1:6c:64:89:07:07:c7:79:2d: c3:7b:af:cc:25:b4:8e:5e:87:6f:77:b6:74:01:66: eb:d2:39:09:79:33:fa:a3:2e:32:44:a1:66:22:60: 07:cf:8b:33:46:c1:36:28:52:d0:48:56:7a:43:70: 8c:86:77:09:ac:31:6b:73:80:82:9e:5c:02:c8:c5: 4a:6a:89:5b:36:78:a2:1c:9a:be:f2:08:96:5a:6c: 04:9e:08:a3:67:3e:b6:fb:f3:7e:36:b8:33:47:97: 32:98:27:c4:b1:3b:4d:7d:d7:28:92:cc:3a:c3:e7: 16:ba:6d:49:f8:75:05:72:5b:86:7e:3a:95:17:2b: 7b:bb:64:5a:ed:06:55:77:23:19:5f:aa:24:6e:49: e2:ff:a3:c0:4e:d9:27:88:d1:18:22:70:f1:42:14: 75:da:52:4b:e1:cc:94:0b:99:c2:ad:59:d2:82:4e: 87:65:85:2f:ce:ca:af:44:ee:52:9f:02:bf:ea:5d: 6c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:4B:B4:0C:1F:FE:03:BA:B2:2C:DB:73:76:0B:A2:C2:B0:54:EA:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/10a855de-2f56-30f4-b7d6-ad843411b4b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.242.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:aa:53:27:00:8e:7f:3f:e7:ed:72:f3:22:4a:34:a5:57:61: f9:7b:b0:db:ef:d1:3b:6d:db:9d:a7:d8:ea:8a:90:07:74:8e: 2e:39:bd:f8:6e:8a:e0:a2:ad:64:bf:eb:ff:d8:ac:dc:9c:32: 31:5c:7e:99:90:c1:62:c3:46:99:1b:2d:16:e7:9e:66:1e:76: 2f:76:ba:ba:e3:55:69:d9:bb:36:ff:a4:b2:b4:49:f3:6b:a1: ec:83:fd:72:b0:84:df:8f:1d:7c:31:0e:69:f6:da:04:24:f7: 15:9c:6d:c3:52:ba:0e:74:91:6d:bc:d0:33:d5:de:d6:08:78: 41:bf:0e:1b:cb:95:63:5a:fc:1d:8e:22:cf:bc:52:51:72:58: 32:57:16:4a:b3:8b:38:c4:40:ab:b2:bd:d6:dc:18:ec:42:ec: 13:a3:ee:82:9f:ac:d8:3a:1a:fb:48:50:b0:db:1e:bc:7d:1e: c0:f3:3f:d8:9d:fd:4d:b0:d1:06:ac:cd:70:bc:05:32:79:09: a8:c0:00:68:28:17:47:28:85:96:f8:15:62:ce:26:a0:61:08: f3:d2:51:6b:9d:f5:47:54:ec:02:61:76:15:af:a6:ac:77:dd: 0d:ce:a4:70:92:c5:7b:f2:38:b9:5e:66:dd:1d:da:39:1f:b2: f0:ec:cb:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzR0zCozp+TWXDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmNhYTk4NWItMzk1Yi00MDY1LTk4NzktZDkyZDhmNTE3MTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5x8s/B/FDxDYtKGrg4dgBy4g9NALpT2IgA7 EauQct1rxPLsi5nzcQj8uCwKP2FEU59O10lrF0U1gCi1SG3wB0KxbGSJBwfHeS3D e6/MJbSOXodvd7Z0AWbr0jkJeTP6oy4yRKFmImAHz4szRsE2KFLQSFZ6Q3CMhncJ rDFrc4CCnlwCyMVKaolbNniiHJq+8giWWmwEngijZz62+/N+NrgzR5cymCfEsTtN fdcoksw6w+cWum1J+HUFcluGfjqVFyt7u2Ra7QZVdyMZX6okbkni/6PATtkniNEY InDxQhR12lJL4cyUC5nCrVnSgk6HZYUvzsqvRO5SnwK/6l1scQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1LtAwf/gO6sizbc3YLosKwVOpfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTBhODU1ZGUtMmY1Ni0z MGY0LWI3ZDYtYWQ4NDM0MTFiNGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+qUycAjn8/5+1y8yJKNKVXYfl7sNvv0Ttt252n2OqKkAd0ji45vfhu iuCirWS/6//YrNycMjFcfpmQwWLDRpkbLRbnnmYedi92urrjVWnZuzb/pLK0SfNr oeyD/XKwhN+PHXwxDmn22gQk9xWcbcNSug50kW280DPV3tYIeEG/DhvLlWNa/B2O Is+8UlFyWDJXFkqzizjEQKuyvdbcGOxC7BOj7oKfrNg6GvtIULDbHrx9HsDzP9id /U2w0QaszXC8BTJ5CajAAGgoF0cohZb4FWLOJqBhCPPSUWud9UdU7AJhdhWvpqx3 3Q3OpHCSxXvyOLleZt0d2jkfsvDsy/M= -----END CERTIFICATE-----Generated at Mon Oct 20 02:22:56 2025 by rpki-client