$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa File: 431c2044-6c0f-3303-9c68-047ad228e587.roa (raw, json) Hash identifier: 9oiTFhUqxevL+sHA0TrDv6aMEdxirAVl/Qv8EeBIfPI= Subject key identifier: 8F:2C:90:B6:30:EC:D4:11:64:71:44:2D:7B:AB:56:D1:3D:BA:63:68 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD497240BAFC7139A9B700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:49:72:40:ba:fc:71:39:a9:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=821b0e26-f2b5-4ce9-b486-d83a72f064e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:bb:3d:45:f2:29:f0:a4:4b:85:cc:39:57: 3d:7b:0e:ee:92:bd:c5:35:25:9b:15:5b:43:5c:d5: c9:8f:1b:79:20:47:bf:82:e7:fb:99:3f:9c:87:88: e5:73:61:7d:f5:08:3d:ac:ff:e9:98:12:5f:a6:df: 0a:7d:76:af:3a:1c:09:4d:cd:5e:21:fb:04:ca:97: 17:43:e1:e5:46:2d:f8:30:6c:50:f4:35:3a:ba:40: 42:e9:a5:6c:ce:91:22:83:97:3f:fb:cd:f1:43:5a: 1f:e6:e5:fa:d3:31:e8:87:a4:9c:dd:58:bc:71:47: 0c:3e:5a:d5:fd:d0:62:ab:87:93:e9:68:2c:b6:9f: 3b:d1:56:35:c5:b1:2b:71:1a:e5:37:7f:e6:60:0e: 3d:2c:60:39:d9:1d:06:e1:12:0a:42:ce:0e:7d:80: 2b:b3:b2:ab:de:52:6c:18:73:f2:f5:0e:fb:c3:48: 1a:74:66:76:d8:61:00:18:d1:1d:59:e7:95:ec:ba: c7:03:87:13:59:74:fb:8b:8a:37:28:ee:f7:b7:52: 30:39:54:83:73:e9:41:4a:75:82:3a:37:3d:1d:c0: dc:8e:8b:a8:a9:49:c4:55:ac:61:bb:5c:32:1c:1a: fd:0e:35:94:f3:bf:1c:14:22:29:0d:31:0e:1f:d3: 46:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:2C:90:B6:30:EC:D4:11:64:71:44:2D:7B:AB:56:D1:3D:BA:63:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/431c2044-6c0f-3303-9c68-047ad228e587.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ba:7b:0c:04:82:79:2f:c2:63:19:1d:62:f9:8a:7d:88:b8: c3:e7:a8:f1:05:a5:1c:88:92:18:b3:8b:e0:c0:f9:53:b0:69: 5d:ca:ca:ce:61:2d:d1:78:11:0f:04:3e:10:0b:9e:f1:08:cc: cc:d7:a3:d8:05:a4:c9:13:56:5a:17:1c:94:9f:12:44:aa:6e: d1:d7:c2:e8:2c:14:74:43:c1:5a:61:2e:ae:68:23:d1:92:ac: da:a0:cc:72:c3:74:4b:12:b0:14:39:59:01:b0:94:34:24:19: 65:61:37:c4:73:d8:d3:56:27:d9:ce:a2:ac:aa:ed:16:6c:e8: b7:88:14:e7:f2:73:df:5c:dc:be:30:e4:b9:77:5f:97:74:60: ab:63:cc:30:4d:f9:8b:ef:f8:09:ae:34:7e:47:54:af:99:d9: c5:44:2b:32:fd:c7:71:37:62:99:73:ff:2f:5d:05:1c:3d:94: 91:55:4e:61:29:28:8c:3b:f2:cc:8f:a1:32:5e:49:df:c4:1f: ba:df:98:d6:f8:8b:e3:85:9a:5c:d1:4e:83:3e:ba:f6:cc:12: 76:59:72:9e:eb:f3:11:cb:07:fd:bc:66:b8:1a:a8:0d:22:ee: 94:60:85:81:aa:66:37:64:89:ca:1c:12:42:20:df:0c:cf:07: 61:2f:5f:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUlyQLr8cTmptwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODIxYjBlMjYtZjJiNS00Y2U5LWI0ODYtZDgzYTcyZjA2NGU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxe27PUXyKfCkS4XMOVc9ew7ukr3FNSWbFVtD XNXJjxt5IEe/guf7mT+ch4jlc2F99Qg9rP/pmBJfpt8KfXavOhwJTc1eIfsEypcX Q+HlRi34MGxQ9DU6ukBC6aVszpEig5c/+83xQ1of5uX60zHoh6Sc3Vi8cUcMPlrV /dBiq4eT6Wgstp870VY1xbErcRrlN3/mYA49LGA52R0G4RIKQs4OfYArs7Kr3lJs GHPy9Q77w0gadGZ22GEAGNEdWeeV7LrHA4cTWXT7i4o3KO73t1IwOVSDc+lBSnWC Ojc9HcDcjouoqUnEVaxhu1wyHBr9DjWU878cFCIpDTEOH9NGDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI8skLYw7NQRZHFELXurVtE9umNoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDMxYzIwNDQtNmMwZi0z MzAzLTljNjgtMDQ3YWQyMjhlNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIS6ewwEgnkvwmMZHWL5in2IuMPnqPEFpRyIkhizi+DA+VOwaV3Kys5h LdF4EQ8EPhALnvEIzMzXo9gFpMkTVloXHJSfEkSqbtHXwugsFHRDwVphLq5oI9GS rNqgzHLDdEsSsBQ5WQGwlDQkGWVhN8Rz2NNWJ9nOoqyq7RZs6LeIFOfyc99c3L4w 5Ll3X5d0YKtjzDBN+Yvv+AmuNH5HVK+Z2cVEKzL9x3E3Yplz/y9dBRw9lJFVTmEp KIw78syPoTJeSd/EH7rfmNb4i+OFmlzRToM+uvbMEnZZcp7r8xHLB/28ZrgaqA0i 7pRghYGqZjdkicocEkIg3wzPB2EvX0k= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:16 2025 by rpki-client