$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa File: 16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa (raw, json) Hash identifier: UEtzBUWEjrM5SxxK4nrqa2uDoNSJ6mI4mdTUEsqiMY8= Subject key identifier: 44:83:90:82:B0:0E:74:88:51:C6:76:9F:A4:42:8D:3F:94:79:BC:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE4B855368DBE052FDD40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e4:b8:55:36:8d:be:05:2f:dd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3ee7e0c3-a998-4cdb-b3c5-cfe9f5704e6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:74:87:40:f0:c6:60:d7:1d:74:aa:01:17:88: 56:59:cc:fc:ee:b4:e5:be:07:5a:35:17:61:28:f6: 82:ea:27:c8:29:d5:1b:7d:e1:1e:46:e6:ba:79:f6: fd:03:6e:cb:e7:1c:b2:a5:94:95:8c:f1:0c:1b:f8: 1f:85:86:67:af:de:94:2a:c0:09:ec:a3:17:ba:78: 46:08:de:15:32:57:1b:8c:4a:2e:b7:b0:a3:a1:74: 8f:b6:e2:80:db:a7:e0:5d:dd:3b:f7:3b:01:4f:9c: f4:4c:aa:9c:d4:c2:5c:1f:86:8c:ca:e8:04:9f:fb: 8f:88:a3:ce:b4:e8:e7:5f:f9:06:a7:b1:8d:5e:26: 4f:f8:65:ae:33:6a:7e:46:73:e9:44:2d:ce:f5:31: 3f:eb:c8:71:4e:12:3d:50:c6:b4:71:f0:80:a0:70: 7e:4b:07:3a:ac:45:9f:37:af:1c:21:75:a9:2f:45: 22:10:b9:39:d7:52:63:8a:05:99:e9:8c:0e:83:5c: 77:3b:08:8e:bf:4c:d7:fa:1b:a0:21:6c:e7:f8:3f: 90:16:5d:3c:eb:5c:43:46:fa:53:8a:b8:c8:24:5c: a8:69:29:03:7a:d6:4e:12:79:26:c1:39:9c:91:15: 3a:0e:af:ba:e6:e9:87:ae:fd:0b:1b:29:91:04:c0: a2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:83:90:82:B0:0E:74:88:51:C6:76:9F:A4:42:8D:3F:94:79:BC:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16a5ede4-a665-30f9-8ea6-08275fd9d8e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:2d:aa:aa:e6:05:07:71:21:ca:0c:ba:26:45:9a:03:c0:e2: 11:7d:8c:fc:cd:f6:1d:22:06:d8:a7:d0:7c:98:62:67:90:3c: 17:0b:ee:92:4d:05:3b:d6:91:73:7c:dc:dc:00:94:a2:f7:ef: 9d:da:e6:d2:e7:5b:bc:9a:81:1e:f7:32:67:f8:b7:02:6f:fb: 77:0b:30:9f:66:56:88:42:91:68:bb:b1:ca:fe:46:7c:21:0a: 8b:e8:60:c8:e4:15:de:87:5f:a7:10:6f:8a:05:39:57:85:d3: 54:76:57:66:93:82:9d:51:8b:85:b2:59:46:ea:92:82:a2:bb: 37:17:78:66:04:97:1b:cd:f4:cb:fc:c2:a5:99:1c:a3:fe:e7: 18:31:c5:07:eb:f0:80:21:08:cb:85:b5:de:9a:67:74:e1:d8: af:7a:48:60:91:ed:d1:69:85:44:02:c8:01:b7:6a:ec:be:0e: 79:d2:de:d7:7d:2a:cf:69:52:d0:61:ed:9f:63:b8:aa:b0:ba: df:a4:bf:9e:48:5d:48:81:8f:4c:6a:b8:dc:ca:0e:94:18:29: e4:62:83:3c:7a:c5:a3:8d:30:ed:53:af:57:66:6b:50:7f:10: 8a:18:b6:84:03:bc:33:63:61:53:ab:6c:f2:86:5e:c9:ea:7f: e7:52:a7:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeS4VTaNvgUv3UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2VlN2UwYzMtYTk5OC00Y2RiLWIzYzUtY2ZlOWY1NzA0ZTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmXSHQPDGYNcddKoBF4hWWcz87rTlvgdaNRdh KPaC6ifIKdUbfeEeRua6efb9A27L5xyypZSVjPEMG/gfhYZnr96UKsAJ7KMXunhG CN4VMlcbjEout7CjoXSPtuKA26fgXd079zsBT5z0TKqc1MJcH4aMyugEn/uPiKPO tOjnX/kGp7GNXiZP+GWuM2p+RnPpRC3O9TE/68hxThI9UMa0cfCAoHB+Swc6rEWf N68cIXWpL0UiELk511JjigWZ6YwOg1x3OwiOv0zX+hugIWzn+D+QFl0861xDRvpT irjIJFyoaSkDetZOEnkmwTmckRU6Dq+65umHrv0LGymRBMCiZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFESDkIKwDnSIUcZ2n6RCjT+UebwyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTZhNWVkZTQtYTY2NS0z MGY5LThlYTYtMDgyNzVmZDlkOGU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAAtqqrmBQdxIcoMuiZFmgPA4hF9jPzN9h0iBtin0HyYYmeQPBcL7pJN BTvWkXN83NwAlKL3753a5tLnW7yagR73Mmf4twJv+3cLMJ9mVohCkWi7scr+Rnwh CovoYMjkFd6HX6cQb4oFOVeF01R2V2aTgp1Ri4WyWUbqkoKiuzcXeGYElxvN9Mv8 wqWZHKP+5xgxxQfr8IAhCMuFtd6aZ3Th2K96SGCR7dFphUQCyAG3auy+DnnS3td9 Ks9pUtBh7Z9juKqwut+kv55IXUiBj0xquNzKDpQYKeRigzx6xaONMO1Tr1dma1B/ EIoYtoQDvDNjYVOrbPKGXsnqf+dSp+0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:12:39 2025 by rpki-client