$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa File: 32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa (raw, json) Hash identifier: P/hRE7eXoz1NFFGFK990rI5aipbqXSJHk2KryxP1gNc= Subject key identifier: 34:04:56:99:7E:6D:A6:5A:35:42:1E:DC:5A:08:99:78:AC:1E:67:C2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE0E80785CF82E3E7FA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e0:e8:07:85:cf:82:e3:e7:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0268f214-1173-4726-b703-d32addf8e4d9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ce:5c:92:71:ee:b1:fa:04:38:f6:ef:99:11: 2a:6e:e4:4f:75:8d:36:45:21:c5:ba:28:13:5a:4c: 4d:0b:fd:64:6c:1c:e3:7c:37:36:54:88:5d:f0:13: 20:ce:bb:2d:40:74:ce:c5:ef:32:df:1c:bb:e0:7e: 6e:4e:be:5a:a5:27:9e:b9:73:66:83:65:e6:9b:4a: 34:3d:66:c2:ae:95:24:90:69:3d:ab:81:a7:ff:ff: 75:3e:25:e4:80:7e:f4:f6:71:d7:fa:6f:35:2b:1d: 71:db:5a:0c:bd:23:b9:3e:b6:1a:ad:56:2a:e1:4c: 89:0d:83:4b:2c:4b:8e:50:88:c3:7f:be:57:a3:1b: 66:ef:46:e7:b5:5f:b3:8d:2d:f3:bf:0e:ae:13:5d: d6:59:09:d9:94:5b:3d:8f:e9:ab:64:5d:74:ba:fd: 47:ba:7c:7d:d8:9d:91:67:5b:7a:fc:11:53:fd:dc: 2c:9f:33:6d:db:7e:86:87:ac:ce:b6:01:d3:af:8d: 8b:bf:9c:ae:2e:4e:e6:e5:6b:63:7f:cb:25:07:32: ef:e1:ed:80:5f:ab:50:16:85:05:8c:68:0b:a5:03: 18:0a:b2:fb:0d:89:48:3e:4d:9d:46:8e:04:af:f6: b2:2a:c9:ae:f1:b9:8c:90:b2:3b:c2:4f:a7:da:34: 57:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:04:56:99:7E:6D:A6:5A:35:42:1E:DC:5A:08:99:78:AC:1E:67:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/32335ecd-ed34-3aae-9e26-f35d4d2202b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:70:46:e1:25:52:28:88:2f:2a:b5:94:64:58:07:7c:4b:91: 9f:6e:c0:bf:6f:7b:dc:a0:f8:a1:bf:ab:da:8b:9b:39:93:ab: 6b:35:7d:7e:c4:3e:d9:92:55:a4:1b:17:35:ec:fd:40:7d:0a: 0c:bd:7e:3d:0f:7f:18:91:c4:2e:f6:f5:d2:c6:3b:21:ec:79: 37:8e:c7:85:d8:8d:fa:05:d0:25:31:42:57:6a:0d:09:7e:15: 2a:1a:65:26:56:01:bf:bb:06:0b:af:b1:29:ae:5a:64:8a:30: 5c:32:1e:f3:8e:00:35:6b:3e:8e:00:8c:50:06:13:f9:27:10: b5:11:be:f9:0a:1f:53:47:e8:c4:0e:d1:54:be:91:9d:e3:94: e1:c9:b3:dd:9f:d1:e8:22:61:0e:48:d8:d3:a5:b3:db:53:51: e5:ee:f8:1c:47:2a:f9:16:0a:77:53:7d:81:0a:e5:c5:65:8c: 7d:5c:24:53:8a:47:29:58:4a:26:bf:2f:07:d4:05:7c:f1:39: 06:70:e2:86:26:53:35:7f:70:2f:43:b0:b4:95:8c:d2:da:55: 69:d4:79:3e:e0:87:a4:35:99:bd:70:97:02:04:a6:bd:d2:e6: 6c:98:c6:1e:4e:b0:d0:20:d2:11:44:bc:29:60:fe:9f:3b:e4: 7b:fa:e1:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeDoB4XPguPn+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MDI2OGYyMTQtMTE3My00NzI2LWI3MDMtZDMyYWRkZjhlNGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAis5cknHusfoEOPbvmREqbuRPdY02RSHFuigT WkxNC/1kbBzjfDc2VIhd8BMgzrstQHTOxe8y3xy74H5uTr5apSeeuXNmg2Xmm0o0 PWbCrpUkkGk9q4Gn//91PiXkgH709nHX+m81Kx1x21oMvSO5PrYarVYq4UyJDYNL LEuOUIjDf75Xoxtm70bntV+zjS3zvw6uE13WWQnZlFs9j+mrZF10uv1Hunx92J2R Z1t6/BFT/dwsnzNt236Gh6zOtgHTr42Lv5yuLk7m5Wtjf8slBzLv4e2AX6tQFoUF jGgLpQMYCrL7DYlIPk2dRo4Er/ayKsmu8bmMkLI7wk+n2jRXSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQEVpl+baZaNUIe3FoImXisHmfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzIzMzVlY2QtZWQzNC0z YWFlLTllMjYtZjM1ZDRkMjIwMmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJFwRuElUiiILyq1lGRYB3xLkZ9uwL9ve9yg+KG/q9qLmzmTq2s1fX7E PtmSVaQbFzXs/UB9Cgy9fj0PfxiRxC729dLGOyHseTeOx4XYjfoF0CUxQldqDQl+ FSoaZSZWAb+7BguvsSmuWmSKMFwyHvOOADVrPo4AjFAGE/knELURvvkKH1NH6MQO 0VS+kZ3jlOHJs92f0egiYQ5I2NOls9tTUeXu+BxHKvkWCndTfYEK5cVljH1cJFOK RylYSia/LwfUBXzxOQZw4oYmUzV/cC9DsLSVjNLaVWnUeT7gh6Q1mb1wlwIEpr3S 5myYxh5OsNAg0hFEvClg/p875Hv64Yc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:58:06 2025 by rpki-client