$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa File: 3bcd4283-22e8-3ca4-9237-d770ad701405.roa (raw, json) Hash identifier: q5tFyqgBSEr5SryVyQWYc8CsAGBDVfCWPYY1V/AsEow= Subject key identifier: 01:65:CB:F9:5A:52:23:29:B6:14:07:A0:24:ED:14:45:B6:66:E6:29 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1636A8A95D9FFA04F480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:16:36:a8:a9:5d:9f:fa:04:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4056ae21-29a3-448d-a08e-63e362ba2fa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:26:48:3d:25:5c:7c:ba:b0:3b:2b:26:64:4a: af:28:82:a9:a2:88:35:0d:70:47:e9:f3:28:02:26: 10:de:9b:28:75:31:7f:74:fe:cb:67:d6:6a:39:9c: 39:1c:d8:83:2e:a1:02:5d:4c:2c:8e:fd:4d:fd:1f: 5c:5e:cf:56:80:c9:2c:e8:78:ea:5c:5d:f2:a4:76: ac:77:10:f8:c8:98:cb:23:c9:c0:7b:14:54:bb:bd: 6b:98:07:99:b1:f1:72:ae:1e:b9:2e:e2:14:5f:4c: 3c:1f:6e:50:a8:46:c1:b5:8f:9d:97:f0:02:06:b6: 05:ff:e7:cb:c7:3f:9e:20:0b:8e:d9:cf:83:37:8e: 11:dd:2d:f8:f8:3d:24:c9:ca:21:50:e3:91:86:c5: d7:27:72:38:04:f1:c7:b2:b9:68:9a:9f:78:56:46: 3b:df:62:a7:c4:3f:de:a1:0b:15:ce:29:2a:35:fe: cb:34:93:e4:ea:20:1b:b1:b3:9d:4f:6d:ec:a3:8a: 41:bf:4e:f6:dc:bb:25:d3:5d:3e:0b:e1:d1:0b:80: 58:f4:e2:95:01:c0:2f:5e:16:44:59:10:47:f4:df: 06:97:98:f1:40:9b:fe:c0:e3:9b:5b:fc:5e:24:d8: 6c:2d:71:ae:af:54:7a:7a:50:15:10:82:71:df:a6: c2:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:65:CB:F9:5A:52:23:29:B6:14:07:A0:24:ED:14:45:B6:66:E6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3bcd4283-22e8-3ca4-9237-d770ad701405.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:60:61:27:73:11:da:8a:ae:e0:7a:15:36:d5:5b:53:b7:cf: 34:21:98:82:ff:bd:29:2e:c1:e7:9e:c3:35:a1:7b:01:a4:1d: 6d:bc:ce:e1:27:08:de:02:06:be:45:b0:1e:d1:ad:bf:fb:c6: 84:8f:60:c1:5d:1a:f4:ef:39:24:37:5b:60:bc:cf:a0:97:24: 33:ab:e9:3a:89:ad:f7:62:b7:ec:10:e4:cc:a5:1c:e4:1e:35: a2:14:a3:93:7b:99:97:36:a5:19:e3:8d:34:2c:48:6e:ee:27: 4d:5a:c8:53:3c:5d:3b:68:a1:45:fb:49:68:16:ea:64:fa:77: b9:aa:28:66:42:86:40:71:3d:33:b2:67:15:67:ea:ff:98:09: 64:af:7b:25:5c:6b:57:82:ec:9d:fe:82:b9:d3:96:83:70:8b: 66:26:28:2f:6e:c3:3d:32:da:6e:40:b7:b1:8a:12:6b:fd:ed: 54:a5:dc:7e:e3:29:ad:d8:6e:84:52:44:32:0c:5e:37:d0:99: d9:8a:51:e8:c9:a0:aa:60:a4:6a:31:76:0d:ff:bf:2d:a1:a1: 75:95:b3:45:bb:fa:91:24:35:ec:cc:d0:43:33:f5:40:87:c3: f6:c5:02:ee:37:54:d4:5f:a1:38:ea:12:0f:8b:0c:e9:01:ed: 89:be:d6:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRY2qKldn/oE9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDA1NmFlMjEtMjlhMy00NDhkLWEwOGUtNjNlMzYyYmEyZmE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiZIPSVcfLqwOysmZEqvKIKpoog1DXBH6fMo AiYQ3psodTF/dP7LZ9ZqOZw5HNiDLqECXUwsjv1N/R9cXs9WgMks6HjqXF3ypHas dxD4yJjLI8nAexRUu71rmAeZsfFyrh65LuIUX0w8H25QqEbBtY+dl/ACBrYF/+fL xz+eIAuO2c+DN44R3S34+D0kycohUOORhsXXJ3I4BPHHsrlomp94VkY732KnxD/e oQsVzikqNf7LNJPk6iAbsbOdT23so4pBv0723Lsl010+C+HRC4BY9OKVAcAvXhZE WRBH9N8Gl5jxQJv+wOObW/xeJNhsLXGur1R6elAVEIJx36bCowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFly/laUiMpthQHoCTtFEW2ZuYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2JjZDQyODMtMjJlOC0z Y2E0LTkyMzctZDc3MGFkNzAxNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEJgYSdzEdqKruB6FTbVW1O3zzQhmIL/vSkuweeewzWhewGkHW28zuEn CN4CBr5FsB7Rrb/7xoSPYMFdGvTvOSQ3W2C8z6CXJDOr6TqJrfdit+wQ5MylHOQe NaIUo5N7mZc2pRnjjTQsSG7uJ01ayFM8XTtooUX7SWgW6mT6d7mqKGZChkBxPTOy ZxVn6v+YCWSveyVca1eC7J3+grnTloNwi2YmKC9uwz0y2m5At7GKEmv97VSl3H7j Ka3YboRSRDIMXjfQmdmKUejJoKpgpGoxdg3/vy2hoXWVs0W7+pEkNezM0EMz9UCH w/bFAu43VNRfoTjqEg+LDOkB7Ym+1l4= -----END CERTIFICATE-----Generated at Sun Oct 19 23:57:35 2025 by rpki-client