$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d0375e-b11a-35f2-98ff-0da748e948ef.roa File: 16d0375e-b11a-35f2-98ff-0da748e948ef.roa (raw, json) Hash identifier: WvjgPnaLaqP6m8NHdrUQxZEHIIgr/RVfqfzu1bNdbtA= Subject key identifier: 82:54:A7:AA:3F:55:BE:94:8F:B7:2F:F1:2E:72:30:A9:6E:65:17:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDEDA2F998EF6B5060AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d0375e-b11a-35f2-98ff-0da748e948ef.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:de:da:2f:99:8e:f6:b5:06:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8dba18dd-2def-489f-94ea-7831bc804043 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:1d:e5:3e:ee:cb:c8:89:4d:14:ad:42:27:3f: 00:dd:16:64:15:bc:36:37:54:c2:86:dc:42:0c:82: 44:b6:8b:0f:e2:fb:be:cc:97:21:06:90:e7:b9:b2: 9b:04:bb:4f:49:c4:68:5b:18:fb:5e:ed:49:8c:79: ab:ba:79:8d:f5:51:bd:9e:cc:d2:10:28:bb:4e:24: 75:1f:97:de:9a:d2:c8:d2:82:dc:22:36:28:f7:a6: b2:7e:00:3e:28:f6:f5:62:96:0e:c7:0f:c9:2c:4a: fd:4b:ca:ee:85:fa:f9:3d:84:db:9f:25:1b:6c:ed: 11:d3:b0:e7:a0:35:c0:85:9a:87:e8:83:81:0e:0c: 65:e9:da:e0:32:67:0f:75:8a:fc:a0:fa:7d:b9:66: 76:1a:5d:7c:95:db:af:bc:b7:f2:2d:6b:da:74:cb: d2:12:03:b0:03:6b:ea:85:58:ac:61:c1:3e:78:da: 2d:cd:44:ba:6d:95:ef:7d:be:09:c1:27:28:d5:f0: 40:70:0f:a7:da:63:c6:82:77:56:d7:fc:ad:f4:a8: eb:c2:e7:1b:a5:ba:fa:92:2c:30:65:50:4c:4a:05: 82:51:d6:d6:b4:4f:e8:0d:95:02:09:d2:30:4b:4f: 7e:78:ca:f7:9d:57:92:34:b1:47:13:a7:ad:51:71: 27:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:54:A7:AA:3F:55:BE:94:8F:B7:2F:F1:2E:72:30:A9:6E:65:17:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/16d0375e-b11a-35f2-98ff-0da748e948ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:d5:3a:5b:af:83:25:0b:0a:e4:be:3b:35:41:ba:6c:89:09: ee:cb:34:12:50:da:75:f9:26:7b:d9:6d:37:86:6b:e2:40:1c: 3f:83:49:22:06:0b:45:d6:99:31:24:f6:10:60:a1:ef:eb:f6: 08:d7:1f:f6:c9:cb:5a:94:e9:2b:e3:e1:46:a7:fd:a0:ed:90: 8b:be:df:b3:df:d1:e4:5e:09:f0:7e:cd:fc:99:00:11:81:59: ed:95:f2:0e:25:49:55:10:dd:1d:3c:fb:59:f6:a4:f2:b8:57: eb:4b:fa:b4:15:c8:07:35:4b:07:d2:e2:b7:8c:1f:2c:eb:5c: a4:11:72:1b:36:2c:71:41:7f:2a:ab:f9:69:d3:81:21:8b:05: eb:b6:5c:ee:7d:05:e3:51:99:97:3b:94:20:5f:9c:34:06:a6: de:e0:fb:38:c0:5e:76:35:00:fd:0d:27:de:46:8a:81:a3:f6: 38:0e:da:dc:1e:df:fd:16:1a:cd:77:9c:33:a8:83:31:b7:e0: 30:78:0b:af:83:2f:68:05:2e:f4:dd:ed:e6:8f:3a:0e:b7:09: 60:2e:be:b4:0a:58:09:97:8e:0f:11:cd:b6:12:67:aa:d3:f0: ee:4b:93:16:04:db:73:44:e5:19:12:c7:d7:02:bc:f7:84:0f: c5:99:39:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzd7aL5mO9rUGCsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGRiYTE4ZGQtMmRlZi00ODlmLTk0ZWEtNzgzMWJjODA0MDQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkB3lPu7LyIlNFK1CJz8A3RZkFbw2N1TChtxC DIJEtosP4vu+zJchBpDnubKbBLtPScRoWxj7Xu1JjHmrunmN9VG9nszSECi7TiR1 H5femtLI0oLcIjYo96ayfgA+KPb1YpYOxw/JLEr9S8ruhfr5PYTbnyUbbO0R07Dn oDXAhZqH6IOBDgxl6drgMmcPdYr8oPp9uWZ2Gl18lduvvLfyLWvadMvSEgOwA2vq hVisYcE+eNotzUS6bZXvfb4JwSco1fBAcA+n2mPGgndW1/yt9Kjrwucbpbr6kiww ZVBMSgWCUdbWtE/oDZUCCdIwS09+eMr3nVeSNLFHE6etUXEnIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIJUp6o/Vb6Uj7cv8S5yMKluZRf6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTZkMDM3NWUtYjExYS0z NWYyLTk4ZmYtMGRhNzQ4ZTk0OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHrVOluvgyULCuS+OzVBumyJCe7LNBJQ2nX5JnvZbTeGa+JAHD+DSSIG C0XWmTEk9hBgoe/r9gjXH/bJy1qU6Svj4Uan/aDtkIu+37Pf0eReCfB+zfyZABGB We2V8g4lSVUQ3R08+1n2pPK4V+tL+rQVyAc1SwfS4reMHyzrXKQRchs2LHFBfyqr +WnTgSGLBeu2XO59BeNRmZc7lCBfnDQGpt7g+zjAXnY1AP0NJ95GioGj9jgO2twe 3/0WGs13nDOogzG34DB4C6+DL2gFLvTd7eaPOg63CWAuvrQKWAmXjg8RzbYSZ6rT 8O5LkxYE23NE5RkSx9cCvPeED8WZOWs= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:49 2025 by rpki-client