$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41cb8abc-f780-3d19-b7d4-34310b93e17e.roa File: 41cb8abc-f780-3d19-b7d4-34310b93e17e.roa (raw, json) Hash identifier: /ooavt6gzOkgeIqBJBzud6BGAs87v50Edet/JihjmOM= Subject key identifier: 4A:9E:B2:D4:93:6B:90:A8:C2:27:4B:ED:7C:3A:34:FD:20:C4:1D:CF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDDFEA611D46A45DC6500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41cb8abc-f780-3d19-b7d4-34310b93e17e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:dd:fe:a6:11:d4:6a:45:dc:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dc25b09c-f06f-4c89-999e-86fb4aeac1bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:16:9c:c3:cc:db:d5:49:06:49:82:88:17:be: f5:5e:ea:54:1e:97:3d:77:14:34:7a:86:cd:c3:97: 86:b3:b2:3b:0b:45:a3:2c:b9:1f:e8:be:9f:d6:d1: e6:c5:44:da:48:fe:a7:aa:88:72:39:c6:ed:f4:c2: 53:fd:5d:14:06:83:e1:b6:ef:4a:95:c6:37:17:ea: a3:27:9b:1e:49:a9:f4:90:9f:0a:e8:16:3c:a8:a0: 63:7a:1d:95:c8:75:19:da:ef:c6:26:08:32:8b:00: 46:a8:f6:af:60:5c:7c:c0:db:c0:52:7e:38:6e:6b: 48:63:c6:1f:4d:fe:5b:e5:44:92:8b:28:32:a9:30: 2c:59:d5:54:bf:8d:f4:79:65:78:4d:be:4f:67:9a: f8:57:1e:34:30:56:a7:5c:11:df:6d:65:3d:45:c4: 18:8b:4e:41:b0:eb:ca:57:c3:86:3f:ed:3c:73:0b: b6:6c:89:63:cd:e3:e5:22:fd:f0:a6:df:5a:eb:95: cd:32:7b:fd:3d:09:d5:d5:30:08:11:97:bd:7b:b3: ed:e4:43:f4:ba:ed:dc:81:4f:b9:8c:97:cc:c2:fe: df:93:fc:90:93:52:67:cf:b8:68:42:80:c4:74:d2: 54:b6:59:77:c4:06:a5:de:20:8d:e5:fd:08:24:59: 2b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:9E:B2:D4:93:6B:90:A8:C2:27:4B:ED:7C:3A:34:FD:20:C4:1D:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/41cb8abc-f780-3d19-b7d4-34310b93e17e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:fc:60:51:6b:24:fe:3c:8d:ff:15:c5:7f:96:a7:be:52:0a: 3e:6e:78:4b:80:e7:72:67:fb:59:ea:b5:92:78:2c:43:ba:30: 91:07:b1:ab:08:32:e7:b6:91:2e:90:c6:17:a4:36:12:b0:33: 09:05:82:0a:7c:c1:18:29:4c:69:97:16:dc:92:7b:29:6e:fc: e7:39:67:9e:6e:37:24:2f:c5:b9:7c:4b:8e:f4:55:a2:16:11: 3e:df:8c:8f:4f:75:48:e5:d9:c5:82:8f:f7:18:58:14:85:e0: 76:92:fc:be:e3:69:f0:53:92:36:ad:5d:8d:34:ca:1a:68:ee: 2d:57:88:32:72:47:9b:0a:ee:8e:bb:2a:bd:07:75:11:48:b1: 89:81:55:85:4c:b4:d3:b3:4f:41:83:a8:bd:75:b6:29:b7:cc: 4f:57:06:e9:a4:51:50:d7:93:61:df:32:24:82:e1:ec:98:2b: 5c:0d:4d:46:20:82:c5:22:18:97:bb:de:53:c5:4e:02:ee:8a: 50:07:0b:cb:10:3f:c5:0d:1b:40:17:bb:76:be:2e:9f:db:35: 31:61:4e:28:67:1f:42:25:1c:4b:b9:20:47:f1:55:51:67:fc: 80:69:17:3b:9b:e3:1e:54:39:74:50:61:6a:4e:6e:79:11:e4: 2a:17:8a:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzd3+phHUakXcZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGMyNWIwOWMtZjA2Zi00Yzg5LTk5OWUtODZmYjRhZWFjMWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRacw8zb1UkGSYKIF771XupUHpc9dxQ0eobN w5eGs7I7C0WjLLkf6L6f1tHmxUTaSP6nqohyOcbt9MJT/V0UBoPhtu9KlcY3F+qj J5seSan0kJ8K6BY8qKBjeh2VyHUZ2u/GJggyiwBGqPavYFx8wNvAUn44bmtIY8Yf Tf5b5USSiygyqTAsWdVUv430eWV4Tb5PZ5r4Vx40MFanXBHfbWU9RcQYi05BsOvK V8OGP+08cwu2bIljzePlIv3wpt9a65XNMnv9PQnV1TAIEZe9e7Pt5EP0uu3cgU+5 jJfMwv7fk/yQk1Jnz7hoQoDEdNJUtll3xAal3iCN5f0IJFkrewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqestSTa5CowidL7Xw6NP0gxB3PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDFjYjhhYmMtZjc4MC0z ZDE5LWI3ZDQtMzQzMTBiOTNlMTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJH8YFFrJP48jf8VxX+Wp75SCj5ueEuA53Jn+1nqtZJ4LEO6MJEHsasI Mue2kS6QxhekNhKwMwkFggp8wRgpTGmXFtySeylu/Oc5Z55uNyQvxbl8S470VaIW ET7fjI9PdUjl2cWCj/cYWBSF4HaS/L7jafBTkjatXY00yhpo7i1XiDJyR5sK7o67 Kr0HdRFIsYmBVYVMtNOzT0GDqL11tim3zE9XBumkUVDXk2HfMiSC4eyYK1wNTUYg gsUiGJe73lPFTgLuilAHC8sQP8UNG0AXu3a+Lp/bNTFhTihnH0IlHEu5IEfxVVFn /IBpFzub4x5UOXRQYWpObnkR5CoXilE= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:50 2025 by rpki-client