$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa File: 1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa (raw, json) Hash identifier: vR9GjPrQ8BhwfkRDvUCi/LiBbEXENYpuBRZRXytDxWc= Subject key identifier: 32:EF:76:38:BA:A4:AB:5F:ED:39:71:2A:58:0B:23:E2:3C:F0:14:20 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD20EE374E643DB7021000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:20:ee:37:4e:64:3d:b7:02:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=13a86823-339a-4722-912f-da5eb78450e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:7e:2f:10:7a:fd:f8:91:c2:0a:9a:b7:0c: 0c:d0:88:eb:5c:e3:76:66:29:aa:df:00:30:93:56: 48:3d:f6:bb:1d:97:e0:40:2a:da:ef:fc:dd:68:f5: b2:8f:32:12:7c:e1:98:92:39:3d:13:24:72:a0:42: b4:29:14:23:33:c3:d5:28:28:54:79:bd:17:c6:28: bf:33:63:e8:64:80:2c:ca:97:d4:01:a6:74:da:07: 2b:01:e6:d7:ce:db:0f:1b:c7:5a:9a:84:dd:ca:95: bd:fb:b9:35:ae:41:67:48:96:55:28:6d:64:43:2a: d4:8e:94:7d:fa:34:db:be:58:9c:05:d5:21:e5:08: 2e:2e:bb:37:2b:ae:01:7a:9d:38:55:1f:31:8f:91: 56:a4:2f:c3:f2:62:0b:b7:8d:eb:3d:fc:0d:de:4c: 14:92:fe:ff:dc:70:42:6a:aa:c1:c0:f2:05:72:c4: d9:02:66:50:02:64:9e:bb:eb:4b:a0:f9:d9:0f:41: 02:9d:e2:dc:89:d4:ff:8b:54:e4:a6:0f:10:79:6c: a9:79:16:7b:5d:bb:fc:42:68:77:b3:17:23:11:af: 4d:40:82:5e:13:da:31:e0:57:79:a5:61:66:d8:0c: e1:e7:01:2f:2c:d2:f6:82:91:c3:66:9e:88:ba:84: 27:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:EF:76:38:BA:A4:AB:5F:ED:39:71:2A:58:0B:23:E2:3C:F0:14:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1cfc839e-d6cc-3ab3-8f40-9156f4f97a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:fa:d9:84:d5:f6:2d:20:55:83:08:12:b9:a0:a9:ed:69:6e: 67:1e:cd:5b:96:e7:2b:ad:e9:c2:f4:1e:30:52:79:8c:4b:e6: 46:5f:23:d3:65:ad:8b:fa:3e:90:52:2f:d7:f4:ab:27:83:58: 90:47:56:e6:70:11:b0:fc:8f:f9:c5:45:65:63:cd:7a:bd:86: b3:f5:7e:bf:d9:f8:85:bd:38:8c:18:b5:3c:f5:05:66:91:d9: c4:2b:30:71:2f:de:6e:4b:c5:7f:c3:e0:ae:7f:9f:de:98:03: 15:ca:8e:f5:f2:6f:88:fe:4a:76:c9:94:f8:bb:b7:07:7d:b8: 3c:8e:b5:a6:d3:b8:a5:fb:1d:e9:dd:1c:d7:49:c2:f2:28:a8: bc:39:b0:4c:ae:db:97:dc:9c:80:56:0c:d5:91:78:b2:aa:7e: c8:1d:3d:12:7b:da:c0:53:93:cc:47:7d:33:f3:46:b4:76:c5: 4b:2e:3c:3c:09:cb:7d:4a:4d:24:cc:78:31:df:ed:cb:4a:64: 99:85:04:ba:0b:e4:31:62:1d:54:47:3b:84:91:df:81:4a:39: eb:09:78:b7:99:89:6c:c2:33:d2:0c:be:94:33:60:80:8a:d6: 9e:22:30:b0:5e:71:55:64:21:dc:04:4c:fe:4f:28:e4:c7:cb: cf:92:0e:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSDuN05kPbcCEAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTNhODY4MjMtMzM5YS00NzIyLTkxMmYtZGE1ZWI3ODQ1MGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT9+LxB6/fiRwgqatwwM0IjrXON2Zimq3wAw k1ZIPfa7HZfgQCra7/zdaPWyjzISfOGYkjk9EyRyoEK0KRQjM8PVKChUeb0Xxii/ M2PoZIAsypfUAaZ02gcrAebXztsPG8damoTdypW9+7k1rkFnSJZVKG1kQyrUjpR9 +jTbvlicBdUh5QguLrs3K64Bep04VR8xj5FWpC/D8mILt43rPfwN3kwUkv7/3HBC aqrBwPIFcsTZAmZQAmSeu+tLoPnZD0ECneLcidT/i1Tkpg8QeWypeRZ7Xbv8Qmh3 sxcjEa9NQIJeE9ox4Fd5pWFm2Azh5wEvLNL2gpHDZp6IuoQniQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLvdji6pKtf7TlxKlgLI+I88BQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWNmYzgzOWUtZDZjYy0z YWIzLThmNDAtOTE1NmY0Zjk3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEH62YTV9i0gVYMIErmgqe1pbmcezVuW5yut6cL0HjBSeYxL5kZfI9Nl rYv6PpBSL9f0qyeDWJBHVuZwEbD8j/nFRWVjzXq9hrP1fr/Z+IW9OIwYtTz1BWaR 2cQrMHEv3m5LxX/D4K5/n96YAxXKjvXyb4j+SnbJlPi7twd9uDyOtabTuKX7Hend HNdJwvIoqLw5sEyu25fcnIBWDNWReLKqfsgdPRJ72sBTk8xHfTPzRrR2xUsuPDwJ y31KTSTMeDHf7ctKZJmFBLoL5DFiHVRHO4SR34FKOesJeLeZiWzCM9IMvpQzYICK 1p4iMLBecVVkIdwETP5PKOTHy8+SDj0= -----END CERTIFICATE-----Generated at Mon Oct 20 02:21:39 2025 by rpki-client