$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa File: 321d34a2-ba6d-30ec-8987-e388030f57a3.roa (raw, json) Hash identifier: qP61m4P+1wcm2DtUiyFH5qQopIAWh+JLgXoFL5z/yIQ= Subject key identifier: 5E:EF:76:C3:FE:D5:CE:B5:04:16:27:B8:21:D9:A2:08:C8:5B:A3:8F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD24D89048B08D136DACC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:24:d8:90:48:b0:8d:13:6d:ac:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dca6effd-e135-4afe-ba33-4543bdd1161d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:81:4e:30:28:ff:2a:c3:5b:c3:57:57:9a:85: 2e:76:06:08:05:73:17:87:74:e3:01:06:a4:75:73: 53:5e:4b:de:a3:3d:4d:b1:3a:ba:14:68:f8:c3:e4: 0e:58:d6:93:cb:56:bf:3e:b3:10:1f:04:92:5c:a2: 88:3e:86:f0:42:6f:f7:7c:30:9f:88:1d:e1:d1:a8: d4:49:83:f0:1d:fb:c9:60:ff:d4:03:70:79:bc:e3: 5a:bb:51:d3:61:4f:b0:14:96:73:dc:1e:c7:51:2c: ed:03:c6:27:fe:93:65:9e:95:b6:17:ba:6c:d1:94: d1:89:0f:12:15:77:8f:19:0b:c2:a4:34:d9:32:74: db:d9:c3:a5:4b:53:f5:24:da:47:55:c1:a3:b1:f7: fd:12:d5:60:47:f3:dd:c1:37:02:9c:8d:c0:20:3d: 34:82:8e:60:6a:38:6d:52:a9:15:04:59:7a:5a:1a: 04:ab:cd:04:33:31:f5:1d:b5:1f:32:a3:ac:41:e7: b8:0f:e7:91:ea:39:98:84:ec:d4:de:49:9d:bc:2c: 7e:bb:c2:8f:f2:57:1d:2b:5c:77:94:29:b4:2c:b5: 50:d9:5a:b5:06:6e:3f:8d:e3:6d:70:e9:1f:4c:15: 5f:49:8c:2f:4f:bf:c5:96:d8:a1:7f:10:5d:0b:41: b0:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:EF:76:C3:FE:D5:CE:B5:04:16:27:B8:21:D9:A2:08:C8:5B:A3:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/321d34a2-ba6d-30ec-8987-e388030f57a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:68:3a:72:5c:49:e8:cf:82:fb:35:db:bd:5f:8c:a7:43:e1: 65:f5:4d:12:40:a4:49:f3:b6:08:86:50:e1:3b:26:b8:b0:ea: f4:ae:9f:68:75:ea:19:dd:1a:a5:4e:7c:17:f1:a6:2d:bb:be: b4:59:ba:1c:b3:37:45:c9:6e:5c:31:a0:c5:c2:5e:c2:ab:c9: ae:19:a9:57:44:c7:9c:5b:ec:15:b2:58:8e:9f:68:15:81:4c: f7:46:59:76:09:a6:83:12:37:36:ce:b5:f4:dd:3f:8f:86:77: e0:88:2e:e2:fd:52:8f:a2:16:2b:c3:31:61:c7:03:0d:c7:1a: d0:15:3e:85:61:8f:c4:e4:0e:f0:ff:4e:a9:5c:26:4c:a5:a1: d3:33:14:45:16:90:f9:ae:4d:45:ea:c9:af:6a:ca:93:09:69: 8b:46:57:99:17:3e:15:dd:ad:8f:dd:fc:11:fe:98:7d:82:65: e0:3f:a3:34:39:54:bd:45:da:60:ce:2c:98:ab:98:d7:1d:f6: 55:79:c1:2a:a6:89:32:cb:ac:98:f0:14:28:d0:77:63:c2:b4: 5c:d1:88:aa:51:4d:2e:36:e9:c8:e2:63:e0:6b:49:17:05:8c: e4:01:2e:c5:fb:5c:bf:7f:8e:6b:79:83:19:67:97:bd:0b:e8: 4c:91:9a:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSTYkEiwjRNtrMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGNhNmVmZmQtZTEzNS00YWZlLWJhMzMtNDU0M2JkZDExNjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIFOMCj/KsNbw1dXmoUudgYIBXMXh3TjAQak dXNTXkveoz1NsTq6FGj4w+QOWNaTy1a/PrMQHwSSXKKIPobwQm/3fDCfiB3h0ajU SYPwHfvJYP/UA3B5vONau1HTYU+wFJZz3B7HUSztA8Yn/pNlnpW2F7ps0ZTRiQ8S FXePGQvCpDTZMnTb2cOlS1P1JNpHVcGjsff9EtVgR/PdwTcCnI3AID00go5gajht UqkVBFl6WhoEq80EMzH1HbUfMqOsQee4D+eR6jmYhOzU3kmdvCx+u8KP8lcdK1x3 lCm0LLVQ2Vq1Bm4/jeNtcOkfTBVfSYwvT7/FltihfxBdC0GwcQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7vdsP+1c61BBYnuCHZogjIW6OPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIxZDM0YTItYmE2ZC0z MGVjLTg5ODctZTM4ODAzMGY1N2EzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVoOnJcSejPgvs1271fjKdD4WX1TRJApEnztgiGUOE7Jriw6vSun2h1 6hndGqVOfBfxpi27vrRZuhyzN0XJblwxoMXCXsKrya4ZqVdEx5xb7BWyWI6faBWB TPdGWXYJpoMSNzbOtfTdP4+Gd+CILuL9Uo+iFivDMWHHAw3HGtAVPoVhj8TkDvD/ TqlcJkylodMzFEUWkPmuTUXqya9qypMJaYtGV5kXPhXdrY/d/BH+mH2CZeA/ozQ5 VL1F2mDOLJirmNcd9lV5wSqmiTLLrJjwFCjQd2PCtFzRiKpRTS426cjiY+BrSRcF jOQBLsX7XL9/jmt5gxlnl70L6EyRmp0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:53:22 2025 by rpki-client