$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa File: 5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa (raw, json) Hash identifier: KnubeJXdlcM0zE+PogG7YfnCCAINW6CnRGSdQpEENNk= Subject key identifier: F7:B7:F9:73:F3:86:EB:FD:9C:D1:26:96:9D:B7:B5:30:F4:54:80:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD2362831BCECFBB8A9200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:23:62:83:1b:ce:cf:bb:8a:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f8d7a6a7-e1ed-4d63-90a5-16349b0a1b32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8c:f2:94:e8:c5:09:b8:c2:5f:63:df:b1:70: 1e:4a:bb:5b:b9:99:c3:c4:1b:28:59:2e:08:c8:5d: e0:e4:cd:a1:a6:9c:43:23:72:04:21:96:04:37:8a: 50:4a:c4:55:de:e6:f1:ce:f3:6a:83:86:59:c4:b7: 7c:16:8b:c6:f5:70:19:79:cd:60:b1:13:41:89:ab: 5e:61:48:c3:3b:31:70:5a:1d:57:96:6c:6c:4f:04: 46:c9:83:80:72:9d:2c:84:b0:52:8e:22:d4:f5:37: a9:ee:ee:28:9d:97:70:1d:27:04:e3:51:85:8a:da: 11:22:e9:6b:0d:db:83:3d:b3:62:0d:81:de:8b:6b: a5:8b:ae:54:f9:21:38:bb:72:03:0e:2b:d7:74:b3: e6:57:e7:19:96:d2:29:fe:ec:53:2b:3d:43:d6:c1: 50:19:05:89:0b:97:76:72:04:de:87:93:1a:33:5c: fd:b3:56:29:24:1f:f1:db:15:e0:10:33:9e:32:76: a1:fc:1a:db:b2:1f:19:d4:d6:d5:38:19:48:2e:c8: 25:e6:07:84:4c:1a:6d:e9:ac:b4:02:19:49:e6:98: 38:39:ce:27:9d:54:41:4d:b4:88:e5:f9:ba:d7:ae: 3b:de:30:42:1d:22:22:c3:b6:e8:ea:a1:87:03:71: db:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:B7:F9:73:F3:86:EB:FD:9C:D1:26:96:9D:B7:B5:30:F4:54:80:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5243ddb1-4730-37b2-a1b2-b2ac21c7fa6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:9b:18:d8:e1:17:49:d2:02:28:0e:a6:96:8f:8c:f7:e7:27: d2:10:4d:4e:4c:42:b0:71:b7:d0:96:89:2e:3c:7c:f1:86:a7: 3a:19:57:ee:86:8d:21:7a:3e:6a:52:b6:e9:c8:2c:f1:33:95: c5:29:04:81:7a:1d:49:f9:00:b4:ef:73:6e:95:fe:5f:9b:77: 3c:23:21:1d:7e:1e:6c:e0:b6:59:95:07:8f:eb:6b:8a:ce:27: d1:a7:dc:dc:00:47:8a:9a:4f:4e:96:3d:ca:ef:74:ca:56:86: 60:87:77:0a:40:62:e5:66:69:14:29:f8:f1:8e:97:91:18:7e: f5:5c:71:ce:4e:7e:81:42:d7:fd:a4:92:de:d4:7c:f1:c5:1f: 5b:8f:02:90:46:d1:07:46:a5:3b:8d:25:f7:ac:68:30:76:4e: 6f:1b:70:59:ca:d9:10:20:ac:9e:17:ad:50:3d:4f:ec:60:0d: a5:97:64:55:3e:e3:c2:75:b9:55:7b:d6:47:ea:91:7b:39:61: 33:85:fa:b7:0f:06:91:11:87:df:c0:11:cf:b6:38:bc:80:51: e0:1c:42:44:48:fe:7b:0e:d0:84:56:5f:b3:2b:e4:ab:52:ca: 97:48:3f:92:fd:e8:2f:3e:5a:5c:12:b0:2b:f7:ad:c7:99:7b: 30:1c:cb:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSNigxvOz7uKkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjhkN2E2YTctZTFlZC00ZDYzLTkwYTUtMTYzNDliMGExYjMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4zylOjFCbjCX2PfsXAeSrtbuZnDxBsoWS4I yF3g5M2hppxDI3IEIZYEN4pQSsRV3ubxzvNqg4ZZxLd8FovG9XAZec1gsRNBiate YUjDOzFwWh1XlmxsTwRGyYOAcp0shLBSjiLU9Tep7u4onZdwHScE41GFitoRIulr DduDPbNiDYHei2uli65U+SE4u3IDDivXdLPmV+cZltIp/uxTKz1D1sFQGQWJC5d2 cgTeh5MaM1z9s1YpJB/x2xXgEDOeMnah/Brbsh8Z1NbVOBlILsgl5geETBpt6ay0 AhlJ5pg4Oc4nnVRBTbSI5fm616473jBCHSIiw7bo6qGHA3HbCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPe3+XPzhuv9nNEmlp23tTD0VIDKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTI0M2RkYjEtNDczMC0z N2IyLWExYjItYjJhYzIxYzdmYTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAmbGNjhF0nSAigOppaPjPfnJ9IQTU5MQrBxt9CWiS48fPGGpzoZV+6G jSF6PmpStunILPEzlcUpBIF6HUn5ALTvc26V/l+bdzwjIR1+HmzgtlmVB4/ra4rO J9Gn3NwAR4qaT06WPcrvdMpWhmCHdwpAYuVmaRQp+PGOl5EYfvVccc5OfoFC1/2k kt7UfPHFH1uPApBG0QdGpTuNJfesaDB2Tm8bcFnK2RAgrJ4XrVA9T+xgDaWXZFU+ 48J1uVV71kfqkXs5YTOF+rcPBpERh9/AEc+2OLyAUeAcQkRI/nsO0IRWX7Mr5KtS ypdIP5L96C8+WlwSsCv3rceZezAcywk= -----END CERTIFICATE-----Generated at Mon Oct 20 05:05:41 2025 by rpki-client