$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa File: 1a329a07-dce6-37d6-abc4-69f4c755efc4.roa (raw, json) Hash identifier: 57Yy744XutGJrIOzshhOhCZybHUHB1ulTeU1PdRl1h8= Subject key identifier: 3F:E9:28:90:87:76:50:61:02:ED:14:79:BC:F9:0F:4F:78:F8:2B:A9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1EF69CBC451062441640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1e:f6:9c:bc:45:10:62:44:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a030268b-b9f2-4154-b4f4-642b0234bcb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:79:74:c3:f1:19:45:81:74:a6:78:fb:f0:8b: df:52:0e:64:59:a6:d7:0e:a8:f1:d3:7e:dd:2e:f1: 25:e1:a2:8b:a6:e0:98:7c:24:04:52:9a:bb:5c:3f: 9c:b4:ba:43:c3:75:6e:56:20:51:d2:fd:49:59:b2: c8:d5:9a:31:38:b6:c8:f4:fa:2b:90:ed:93:91:76: 94:8a:05:6c:3a:ff:7d:4e:c9:14:4e:d7:ed:78:19: e1:47:0a:4d:56:22:3b:12:29:6e:f8:b5:eb:6f:24: 3c:14:88:c3:98:2c:81:cd:49:51:da:f9:98:0c:66: ae:e4:98:35:8e:37:e6:12:8a:80:f3:2e:a0:3a:d7: 97:cd:ac:74:2b:7a:87:ae:e2:5e:f9:0e:68:f6:dd: 86:f6:f1:66:dc:ed:00:fd:36:b8:d3:be:b4:61:94: 39:3c:43:0b:ea:33:b5:ef:07:3b:05:12:6c:f5:c4: d4:54:65:53:7f:33:8c:3c:83:48:82:4e:7a:de:df: a7:44:13:32:82:fc:9c:59:62:7c:74:36:d9:8c:9b: 00:07:35:b9:85:62:6f:49:66:83:5c:ea:0e:ec:cc: 11:12:70:7d:9e:cc:8e:46:16:94:7e:23:33:39:37: 95:b3:6a:62:17:c7:52:93:60:96:64:26:95:00:25: b7:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:E9:28:90:87:76:50:61:02:ED:14:79:BC:F9:0F:4F:78:F8:2B:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1a329a07-dce6-37d6-abc4-69f4c755efc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:46:d6:26:c3:8a:f1:87:24:76:d6:e4:06:61:d4:56:be:c7: 8d:04:19:2b:c4:84:41:29:3f:6d:d8:0b:c2:82:09:1b:23:7c: 46:c7:03:71:27:aa:99:38:a3:62:41:ee:e4:fb:24:f7:6b:a6: 41:7e:ee:12:60:79:00:44:a1:e7:42:20:ec:43:00:06:f2:d3: a9:2d:74:29:c5:85:f4:2f:c0:46:a3:1e:aa:db:4a:74:f8:a0: 32:bb:10:51:ca:44:da:f9:12:30:0b:e9:e8:fd:61:30:e0:0c: 28:5e:78:9f:31:62:01:f5:2e:6f:3b:8b:c6:78:47:34:64:95: 77:c4:78:82:2a:73:fd:d2:12:39:5b:33:c2:51:50:bb:9d:1c: 89:ba:eb:5e:f3:fb:02:71:42:21:da:53:7d:ef:cf:5f:d8:ae: 7b:6d:55:f7:0a:92:62:71:ce:c3:5b:fa:24:dc:9c:a2:62:20: b8:7c:73:8b:ac:f0:de:f2:4e:f2:33:84:73:23:6b:c5:24:4b: 5f:83:a5:a2:4a:08:69:a2:a0:d9:21:b8:46:63:67:80:e5:d1: 41:84:97:6a:81:ed:9c:2f:c2:22:fd:f9:56:7f:4e:ff:34:b4: 6f:e2:5b:aa:73:ea:48:ad:7c:d9:e2:b1:c6:fd:03:f1:c4:b2: 97:d4:82:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzR72nLxFEGJEFkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTAzMDI2OGItYjlmMi00MTU0LWI0ZjQtNjQyYjAyMzRiY2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nl0w/EZRYF0pnj78IvfUg5kWabXDqjx037d LvEl4aKLpuCYfCQEUpq7XD+ctLpDw3VuViBR0v1JWbLI1ZoxOLbI9PorkO2TkXaU igVsOv99TskUTtfteBnhRwpNViI7Eilu+LXrbyQ8FIjDmCyBzUlR2vmYDGau5Jg1 jjfmEoqA8y6gOteXzax0K3qHruJe+Q5o9t2G9vFm3O0A/Ta40760YZQ5PEML6jO1 7wc7BRJs9cTUVGVTfzOMPINIgk563t+nRBMygvycWWJ8dDbZjJsABzW5hWJvSWaD XOoO7MwREnB9nsyORhaUfiMzOTeVs2piF8dSk2CWZCaVACW3fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD/pKJCHdlBhAu0Uebz5D094+CupMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWEzMjlhMDctZGNlNi0z N2Q2LWFiYzQtNjlmNGM3NTVlZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1G1ibDivGHJHbW5AZh1Fa+x40EGSvEhEEpP23YC8KCCRsjfEbHA3En qpk4o2JB7uT7JPdrpkF+7hJgeQBEoedCIOxDAAby06ktdCnFhfQvwEajHqrbSnT4 oDK7EFHKRNr5EjAL6ej9YTDgDCheeJ8xYgH1Lm87i8Z4RzRklXfEeIIqc/3SEjlb M8JRULudHIm6617z+wJxQiHaU33vz1/YrnttVfcKkmJxzsNb+iTcnKJiILh8c4us 8N7yTvIzhHMja8UkS1+DpaJKCGmioNkhuEZjZ4Dl0UGEl2qB7ZwvwiL9+VZ/Tv80 tG/iW6pz6kitfNniscb9A/HEspfUggQ= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:33 2025 by rpki-client