$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/242c4531-c02d-3704-aa85-cb65a6258b43.roa File: 242c4531-c02d-3704-aa85-cb65a6258b43.roa (raw, json) Hash identifier: aUgJPhTvCglhZ3JQKA9ebMdO7x1kwEvUspk9dcveZIE= Subject key identifier: 0D:C8:1F:8A:B7:5D:52:1D:F9:CD:39:49:B7:9A:70:AA:5D:47:33:B8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD230DF6EA062EFAFF3300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/242c4531-c02d-3704-aa85-cb65a6258b43.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:23:0d:f6:ea:06:2e:fa:ff:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8032d9c3-5b6f-4c21-acc3-3acd21e6101a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:36:54:ec:be:f1:00:d5:b0:23:87:47:ba:2e: ed:90:4d:db:58:b6:12:8c:6a:ea:a9:5b:6d:32:6b: d5:a8:10:a1:23:02:b6:e1:9d:e2:7f:b1:ac:a8:07: 78:a5:81:70:3c:db:08:a7:19:1c:55:83:ee:d3:9b: f3:a0:fc:1d:c9:b6:f5:16:a5:18:17:2f:5e:79:b1: 10:05:a5:38:14:1f:04:4d:d2:25:af:6e:3e:52:2d: a0:c6:37:d7:57:20:a7:cd:7f:c3:d4:8c:50:97:21: a3:8d:f7:13:ae:46:d0:cf:70:bd:a6:fa:b1:cc:83: 8a:4a:2f:84:63:40:ad:50:c0:94:cb:b9:18:55:bc: 5e:39:1c:91:6a:c9:65:26:af:91:48:98:b6:14:fb: ec:4a:1d:f3:60:38:10:0c:1c:e5:c6:2b:24:f4:a5: 72:ee:98:6e:ab:4c:2c:71:ad:b2:1a:38:a0:8c:ef: bb:44:05:43:7c:60:7c:bd:58:d1:71:53:d1:22:37: db:5d:1e:a5:7e:ba:8f:ee:fe:8e:b3:14:fa:c7:e4: 8c:8b:35:c8:03:57:0a:99:e6:32:a6:91:52:e2:e5: 48:dd:aa:eb:c2:90:ae:c7:03:39:d7:1e:5b:7b:3e: 00:7b:32:06:46:cf:98:8a:78:f3:2a:66:a7:3c:1b: 9e:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:C8:1F:8A:B7:5D:52:1D:F9:CD:39:49:B7:9A:70:AA:5D:47:33:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/242c4531-c02d-3704-aa85-cb65a6258b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:b0:99:e7:ab:b6:e2:24:2e:92:a7:0f:cf:04:40:aa:e9:32: e5:7a:c0:16:a9:ae:bb:31:35:ba:b4:e1:e6:7a:74:7d:3a:43: 9d:69:72:42:14:e6:18:fe:8e:53:4d:8f:fb:95:c7:56:a6:60: 26:1d:0a:3c:8c:c1:5d:d7:b7:44:02:77:35:8e:e4:e4:30:55: 4c:89:2b:bc:a4:1d:3a:5b:50:9e:0d:fc:50:61:b6:23:b0:23: 3d:c4:af:c5:42:ab:4d:37:95:ea:70:8d:fd:3f:7e:2c:d9:fb: a3:d2:cb:55:00:0c:0c:28:aa:55:04:93:15:33:3b:7b:7e:df: a9:e1:12:e3:52:34:12:ad:c8:af:46:6f:eb:72:48:ac:c0:23: 1f:c5:b8:16:86:4d:7a:68:10:40:03:a8:39:40:24:f7:21:a1: 23:33:72:9e:83:ab:96:fa:d9:43:bf:1e:f8:3c:ef:fa:00:06: f7:61:82:05:85:ed:ac:c9:e3:fc:cc:d5:ac:a8:40:7e:3d:68: ce:9d:ea:43:2e:1c:73:ec:86:9d:03:43:d2:f9:01:39:95:bd: 77:69:2d:ab:77:de:39:e8:10:0a:96:3c:38:dd:21:4a:af:02: 7d:a8:6b:f2:87:46:6e:40:9d:00:90:ea:b3:76:85:d3:06:0a: 61:32:ca:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSMN9uoGLvr/MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODAzMmQ5YzMtNWI2Zi00YzIxLWFjYzMtM2FjZDIxZTYxMDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTZU7L7xANWwI4dHui7tkE3bWLYSjGrqqVtt MmvVqBChIwK24Z3if7GsqAd4pYFwPNsIpxkcVYPu05vzoPwdybb1FqUYFy9eebEQ BaU4FB8ETdIlr24+Ui2gxjfXVyCnzX/D1IxQlyGjjfcTrkbQz3C9pvqxzIOKSi+E Y0CtUMCUy7kYVbxeORyRasllJq+RSJi2FPvsSh3zYDgQDBzlxisk9KVy7phuq0ws ca2yGjigjO+7RAVDfGB8vVjRcVPRIjfbXR6lfrqP7v6OsxT6x+SMizXIA1cKmeYy ppFS4uVI3arrwpCuxwM51x5bez4AezIGRs+YinjzKmanPBueSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA3IH4q3XVId+c05SbeacKpdRzO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjQyYzQ1MzEtYzAyZC0z NzA0LWFhODUtY2I2NWE2MjU4YjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACuwmeertuIkLpKnD88EQKrpMuV6wBaprrsxNbq04eZ6dH06Q51pckIU 5hj+jlNNj/uVx1amYCYdCjyMwV3Xt0QCdzWO5OQwVUyJK7ykHTpbUJ4N/FBhtiOw Iz3Er8VCq003lepwjf0/fizZ+6PSy1UADAwoqlUEkxUzO3t+36nhEuNSNBKtyK9G b+tySKzAIx/FuBaGTXpoEEADqDlAJPchoSMzcp6Dq5b62UO/Hvg87/oABvdhggWF 7azJ4/zM1ayoQH49aM6d6kMuHHPshp0DQ9L5ATmVvXdpLat33jnoEAqWPDjdIUqv An2oa/KHRm5AnQCQ6rN2hdMGCmEyym0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:52:08 2025 by rpki-client