$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa File: 3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa (raw, json) Hash identifier: la1E/AlSm23yPz6F6XiE7wOTirRK5bJrEFEjJ1AWlYU= Subject key identifier: 90:06:57:A8:CD:96:76:34:B5:E4:7B:CB:7F:EF:7B:3F:AA:F6:66:A6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD251C56525C1AE8777480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:25:1c:56:52:5c:1a:e8:77:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3c8dd964-158a-429a-96ed-3a56ca494537 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:bc:6f:04:53:eb:1d:33:1a:d8:ab:87:01:0e: c9:44:56:1b:52:28:13:93:03:99:d8:bf:d0:b2:d9: 75:0b:82:27:4f:39:1d:c7:66:7a:c4:aa:2f:eb:52: 40:cb:ee:d8:9c:84:3d:b3:68:bd:30:07:f9:3c:cd: bb:4d:ca:fc:d6:14:3e:47:f6:5c:b0:d9:0d:56:f7: 12:fb:22:ea:33:12:51:e2:d1:4b:00:4c:66:19:06: 99:f2:73:ef:56:2d:d2:e7:2c:7e:91:8c:ed:61:e7: 55:e3:a7:60:8c:85:ac:84:cb:bd:fe:ff:59:14:3b: 38:54:96:c6:1a:54:0b:f2:70:66:33:a0:17:7a:a9: c8:b6:8b:7b:3d:5d:22:28:ee:ec:17:ce:86:c2:bc: 59:95:33:53:05:60:3d:04:4e:17:c2:08:c7:ee:c4: c5:e3:e0:92:fa:c1:63:9e:5e:21:f6:d4:d7:4f:25: 6b:0b:12:2a:6a:b5:6c:3d:b1:46:9e:16:9b:b0:e4: 4a:81:e1:68:66:60:e9:f9:dc:8e:c6:2c:2c:c4:93: d6:5e:d1:ce:2d:cd:61:c6:f6:ce:fa:4c:43:30:1d: 67:70:9b:74:b8:4e:77:b4:5f:c5:36:fb:58:6f:dc: 34:e0:61:d1:fa:73:ec:da:5f:6f:07:d0:50:df:1d: 4f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:06:57:A8:CD:96:76:34:B5:E4:7B:CB:7F:EF:7B:3F:AA:F6:66:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3e04b607-fda6-3c1c-85fd-a0eafad302ea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:50:8a:1c:1f:ab:15:d2:16:93:77:2e:24:0c:b6:82:b7:b3: 4f:d6:2b:03:60:a7:fe:14:e8:36:ce:79:a7:10:f9:c6:a6:e3: e8:fb:dc:75:a0:4a:69:f2:72:84:bd:2d:14:7e:17:9a:e7:17: b4:e6:24:34:bd:40:87:3d:2b:ef:20:eb:3b:8f:b4:6c:1e:69: c5:6c:90:d7:44:63:8d:0a:b5:74:66:0f:86:b0:81:24:17:5d: 07:ae:9e:79:02:f7:1b:e4:a0:42:2c:94:3e:b6:c3:55:97:4a: 87:38:8f:3e:03:2e:71:87:4e:51:3e:89:51:e2:75:8c:ea:5f: ec:bb:e4:55:d2:8b:c9:6c:04:71:1c:bb:30:58:23:bf:18:a4: b5:30:25:54:1b:b9:3d:62:87:db:5a:a8:4e:74:0c:03:de:e2: cc:38:7f:74:94:c8:05:8b:bc:e3:37:3e:7b:65:bf:a6:7c:8a: 92:c8:74:dd:aa:e2:97:0f:82:8f:0c:3e:9e:9b:32:37:e2:1d: a7:af:b6:cf:02:53:96:5c:7c:14:51:26:e0:82:5c:81:a9:9f: 80:2a:83:5f:86:4a:e8:e5:b5:4d:4b:c4:e9:b5:b9:ef:5b:fb: 50:be:b0:81:9b:89:b2:db:1b:8a:49:e5:b8:7e:6e:9a:31:80: e9:7f:99:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSUcVlJcGuh3dIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2M4ZGQ5NjQtMTU4YS00MjlhLTk2ZWQtM2E1NmNhNDk0NTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLxvBFPrHTMa2KuHAQ7JRFYbUigTkwOZ2L/Q stl1C4InTzkdx2Z6xKov61JAy+7YnIQ9s2i9MAf5PM27Tcr81hQ+R/ZcsNkNVvcS +yLqMxJR4tFLAExmGQaZ8nPvVi3S5yx+kYztYedV46dgjIWshMu9/v9ZFDs4VJbG GlQL8nBmM6AXeqnItot7PV0iKO7sF86GwrxZlTNTBWA9BE4XwgjH7sTF4+CS+sFj nl4h9tTXTyVrCxIqarVsPbFGnhabsORKgeFoZmDp+dyOxiwsxJPWXtHOLc1hxvbO +kxDMB1ncJt0uE53tF/FNvtYb9w04GHR+nPs2l9vB9BQ3x1PiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJAGV6jNlnY0teR7y3/vez+q9mamMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2UwNGI2MDctZmRhNi0z YzFjLTg1ZmQtYTBlYWZhZDMwMmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG9QihwfqxXSFpN3LiQMtoK3s0/WKwNgp/4U6DbOeacQ+cam4+j73HWg SmnycoS9LRR+F5rnF7TmJDS9QIc9K+8g6zuPtGweacVskNdEY40KtXRmD4awgSQX XQeunnkC9xvkoEIslD62w1WXSoc4jz4DLnGHTlE+iVHidYzqX+y75FXSi8lsBHEc uzBYI78YpLUwJVQbuT1ih9taqE50DAPe4sw4f3SUyAWLvOM3Pntlv6Z8ipLIdN2q 4pcPgo8MPp6bMjfiHaevts8CU5ZcfBRRJuCCXIGpn4Aqg1+GSujltU1LxOm1ue9b +1C+sIGbibLbG4pJ5bh+bpoxgOl/mW8= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:53 2025 by rpki-client