$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa File: 12304d24-1c4d-30ee-8950-9cb3fd480a88.roa (raw, json) Hash identifier: SUiyNKNykSgmvOVxBYwSVaayijj3CbwG4Z0A42t/m64= Subject key identifier: C7:3E:22:A5:F6:3A:E7:E1:D0:F8:D3:90:1F:4F:EA:DD:40:77:E4:E7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD67CE02EF675C3919380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d6:7c:e0:2e:f6:75:c3:91:93:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8b67ebf8-40e1-4990-aaaf-6877a5687dd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:dc:b0:e6:06:3b:4d:b7:26:63:dd:ae:93:a7: bb:b5:4e:c0:f9:fa:57:b7:69:70:ce:66:8f:85:66: c1:46:73:94:c4:79:e2:b6:93:69:2d:57:4c:40:f7: 5e:d3:f8:7f:29:85:34:68:ba:d0:90:df:ac:cb:ec: 26:bd:8b:c3:7f:e0:06:aa:dc:21:25:87:f9:df:36: d6:7e:dc:e4:85:38:7a:e5:11:15:2c:2c:04:e4:1f: 04:00:61:ec:e5:da:1f:e4:af:18:4f:dc:56:cc:d7: 17:98:42:d8:f5:97:0c:0e:cf:fe:73:b5:5a:7d:4c: a6:8f:ba:63:a5:1b:e1:72:d5:56:62:af:09:e6:fe: 04:f1:ea:31:0d:85:a5:6e:13:fe:b9:17:c8:46:50: d6:b2:b8:36:df:3c:66:ea:e8:b0:5b:96:21:fe:27: e8:7c:0d:84:34:dc:e2:78:59:9e:d1:81:f7:92:d2: b2:be:49:7b:2b:d2:cb:6a:66:fb:23:9c:8e:65:3e: 51:f8:0f:a7:44:a1:87:b1:9d:b0:f2:f1:6f:20:64: cf:c1:84:6d:aa:aa:70:87:d9:8e:8c:c4:35:81:57: 00:36:c0:83:2a:35:c1:40:e6:2d:c4:28:23:16:83: b7:6a:14:de:69:e9:ce:fb:d9:53:ae:5f:6f:b0:ed: 88:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:3E:22:A5:F6:3A:E7:E1:D0:F8:D3:90:1F:4F:EA:DD:40:77:E4:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/12304d24-1c4d-30ee-8950-9cb3fd480a88.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:41:8f:ae:ae:86:24:6d:72:e7:e4:96:bd:29:6b:7c:32:f1: ba:5b:7f:2f:70:ae:ac:d6:58:60:63:82:be:fd:9f:4b:cd:d0: e4:e7:64:32:ac:d0:3e:f6:ca:7d:94:b7:b2:0c:a7:60:6a:70: 20:ed:10:48:2c:cc:39:c5:0a:12:26:1a:1a:b1:b4:44:15:25: d1:93:40:84:fe:64:91:01:b0:a8:e7:55:f1:c1:25:b9:a5:cc: 1e:b2:bb:bc:59:40:f8:a2:72:36:34:c2:f1:fe:6d:36:3b:e7: 8b:84:19:a8:57:87:47:1b:d5:f4:b4:65:35:0a:0e:e1:e2:34: e8:38:70:45:ba:d6:bf:b2:65:76:d2:05:a7:e8:45:52:1a:6a: 42:37:4e:71:70:1e:59:1e:65:a4:f6:a3:31:ad:b0:33:59:22: 53:85:b2:2c:f1:04:08:91:eb:50:f6:58:4f:1f:2a:95:e9:cc: 6c:53:57:fb:8f:e3:dd:3d:e8:d7:19:5d:22:fd:a2:fa:b8:5e: 97:e2:96:fc:c1:17:6a:8d:1d:10:51:0a:76:d6:b0:ec:bf:64: ad:cb:a0:2d:a8:d4:7b:cc:c3:a0:bb:7f:89:82:3a:3c:35:c3: 2e:28:de:41:5c:3c:0c:56:5c:e0:f1:6a:c1:98:23:a3:40:d6: 63:ce:11:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdZ84C72dcORk4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGI2N2ViZjgtNDBlMS00OTkwLWFhYWYtNjg3N2E1Njg3ZGQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNyw5gY7TbcmY92uk6e7tU7A+fpXt2lwzmaP hWbBRnOUxHnitpNpLVdMQPde0/h/KYU0aLrQkN+sy+wmvYvDf+AGqtwhJYf53zbW ftzkhTh65REVLCwE5B8EAGHs5dof5K8YT9xWzNcXmELY9ZcMDs/+c7VafUymj7pj pRvhctVWYq8J5v4E8eoxDYWlbhP+uRfIRlDWsrg23zxm6uiwW5Yh/ifofA2ENNzi eFme0YH3ktKyvkl7K9LLamb7I5yOZT5R+A+nRKGHsZ2w8vFvIGTPwYRtqqpwh9mO jMQ1gVcANsCDKjXBQOYtxCgjFoO3ahTeaenO+9lTrl9vsO2IcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMc+IqX2Oufh0PjTkB9P6t1Ad+TnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTIzMDRkMjQtMWM0ZC0z MGVlLTg5NTAtOWNiM2ZkNDgwYTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAExBj66uhiRtcufklr0pa3wy8bpbfy9wrqzWWGBjgr79n0vN0OTnZDKs 0D72yn2Ut7IMp2BqcCDtEEgszDnFChImGhqxtEQVJdGTQIT+ZJEBsKjnVfHBJbml zB6yu7xZQPiicjY0wvH+bTY754uEGahXh0cb1fS0ZTUKDuHiNOg4cEW61r+yZXbS BafoRVIaakI3TnFwHlkeZaT2ozGtsDNZIlOFsizxBAiR61D2WE8fKpXpzGxTV/uP 49096NcZXSL9ovq4XpfilvzBF2qNHRBRCnbWsOy/ZK3LoC2o1HvMw6C7f4mCOjw1 wy4o3kFcPAxWXODxasGYI6NA1mPOEXE= -----END CERTIFICATE-----Generated at Sun Oct 19 23:53:22 2025 by rpki-client