$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa File: 4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa (raw, json) Hash identifier: fGBQzWf3G6fFwl/a1I/9TgLk253nQmN6fyn/ne6ovCE= Subject key identifier: 0C:E9:E4:14:F1:37:B7:CB:96:13:89:78:87:73:F9:9A:DD:B5:3D:55 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE3C4EE60E223ECF5BD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e3:c4:ee:60:e2:23:ec:f5:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7efd7e64-c455-4998-b1f1-e4f4a08b6b03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:c1:0e:a4:a2:92:65:36:65:24:ab:40:ae:ce: de:79:20:d8:50:34:81:11:06:a8:69:dc:13:22:69: 8e:5e:83:fe:9f:d2:7b:80:d0:68:60:61:4a:26:1b: 95:57:c3:e5:80:f9:ef:6d:7c:28:d9:60:7c:83:44: 55:5b:18:7a:54:1f:d1:bc:01:1a:18:cb:8f:b0:64: 88:e9:30:d6:93:94:e4:5d:87:df:0f:ac:e3:31:ef: 97:d9:5a:6e:76:ee:77:eb:d5:d1:5f:b1:33:33:aa: 6e:1f:e2:8a:30:10:09:38:73:35:19:5b:24:71:cd: 15:14:10:e3:2f:33:f6:bb:4b:11:35:2c:c6:f7:a9: 86:18:84:7e:5d:a6:b9:0e:51:76:70:4a:65:e3:94: 6e:b5:4e:59:cc:1b:a4:0e:bd:95:66:84:65:d1:16: 1c:e0:e0:90:27:40:89:aa:20:2b:af:1c:ff:13:9a: a1:7d:f7:f8:c1:46:75:d6:c4:0e:53:11:f5:94:91: 8f:7c:c0:e3:fd:69:60:2c:0c:3c:f7:8b:c0:c7:1a: 3f:bc:d6:59:a8:3b:87:a3:e1:b0:42:c8:a7:8a:6f: f7:49:51:b3:a6:64:61:21:3c:84:b3:e8:70:85:d5: 0a:32:86:e0:2a:7f:d5:5b:fe:40:66:03:a1:f8:ee: 57:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E9:E4:14:F1:37:B7:CB:96:13:89:78:87:73:F9:9A:DD:B5:3D:55 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4492ab0a-9c78-3dbe-85ed-db981ca2e781.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:c9:c1:a1:c3:6b:43:fc:88:99:88:f6:05:d7:5e:8a:be:48: 08:39:34:1a:2b:a0:1f:98:3d:1f:73:b2:69:f7:95:53:b8:0a: 36:b8:c1:cc:c0:de:76:78:03:66:49:ef:e2:f3:0b:e0:a1:e1: 06:0e:5c:4d:d8:36:7e:da:70:a8:33:d9:49:f0:dc:19:1a:47: a8:c9:11:fb:92:35:fb:10:a8:be:b6:f6:0c:ba:e2:47:9a:7c: fa:b4:ef:1d:0c:49:45:70:a3:6a:ec:e7:b7:a7:ff:e8:c9:7e: c9:a2:49:1f:68:ff:54:21:c0:87:c5:e1:27:9f:47:af:67:76: 49:a0:d9:fd:a9:da:c5:4a:96:99:1b:ef:94:d7:a8:ec:c8:50: fd:20:fd:b4:ee:65:11:c8:88:c2:71:5b:84:61:77:c0:6c:67: ed:13:32:41:27:ec:5d:f4:3a:2c:ed:43:b6:f4:2c:42:7e:f3: cd:b3:03:d0:0c:6d:93:33:3e:9b:a2:86:8e:fe:36:0f:80:08: 4f:dc:33:12:69:12:02:2f:ff:bf:fe:04:bc:37:a0:83:f1:5d: 77:f4:d7:51:5d:e1:f4:7b:33:e9:df:8b:8f:cc:9b:d7:3a:b1: 91:1e:d2:14:5e:60:19:61:20:92:04:4d:c9:c7:b1:bb:66:5a: b2:48:0d:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzePE7mDiI+z1vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2VmZDdlNjQtYzQ1NS00OTk4LWIxZjEtZTRmNGEwOGI2YjAzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5sEOpKKSZTZlJKtArs7eeSDYUDSBEQaoadwT ImmOXoP+n9J7gNBoYGFKJhuVV8PlgPnvbXwo2WB8g0RVWxh6VB/RvAEaGMuPsGSI 6TDWk5TkXYffD6zjMe+X2Vpudu5369XRX7EzM6puH+KKMBAJOHM1GVskcc0VFBDj LzP2u0sRNSzG96mGGIR+Xaa5DlF2cEpl45RutU5ZzBukDr2VZoRl0RYc4OCQJ0CJ qiArrxz/E5qhfff4wUZ11sQOUxH1lJGPfMDj/WlgLAw894vAxxo/vNZZqDuHo+Gw Qsinim/3SVGzpmRhITyEs+hwhdUKMobgKn/VW/5AZgOh+O5XDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzp5BTxN7fLlhOJeIdz+ZrdtT1VMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDQ5MmFiMGEtOWM3OC0z ZGJlLTg1ZWQtZGI5ODFjYTJlNzgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEPJwaHDa0P8iJmI9gXXXoq+SAg5NBoroB+YPR9zsmn3lVO4Cja4wczA 3nZ4A2ZJ7+LzC+Ch4QYOXE3YNn7acKgz2Unw3BkaR6jJEfuSNfsQqL629gy64kea fPq07x0MSUVwo2rs57en/+jJfsmiSR9o/1QhwIfF4SefR69ndkmg2f2p2sVKlpkb 75TXqOzIUP0g/bTuZRHIiMJxW4Rhd8BsZ+0TMkEn7F30OiztQ7b0LEJ+882zA9AM bZMzPpuiho7+Ng+ACE/cMxJpEgIv/7/+BLw3oIPxXXf011Fd4fR7M+nfi4/Mm9c6 sZEe0hReYBlhIJIETcnHsbtmWrJIDaI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:01:11 2025 by rpki-client