$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa File: 5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa (raw, json) Hash identifier: TqwzKJdWoa6trBxWd4KkNO/U9neUlHudX72O8NNscDE= Subject key identifier: A1:52:88:EF:08:AE:8E:C4:0B:A6:8C:5A:42:68:3A:91:02:03:0D:5A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1863602281CE9C305640 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:18:63:60:22:81:ce:9c:30:56:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=9fce3021-5969-46e0-a06a-0387070a2ee8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4a:cf:a9:86:fd:b7:cb:5d:da:c7:c1:5d:14: 4b:3a:5f:78:de:b6:f6:fb:1d:31:7d:79:ac:c8:50: 0b:c8:33:55:cc:fa:50:18:e1:f4:34:55:25:8f:47: e2:a0:70:de:49:7a:9d:13:af:f8:f5:b4:63:00:f7: 83:5c:68:cb:1a:00:86:04:52:d9:34:34:76:ae:be: 73:a5:0b:7a:c4:26:83:ca:fc:4a:92:1f:eb:be:1e: 8d:44:2e:7e:90:24:a7:2e:1e:f6:90:48:d0:66:b4: e0:0c:ee:b6:6b:f0:39:50:ba:5d:62:ad:40:2c:5a: 2e:83:db:e9:c0:c3:55:11:a1:11:b4:46:b2:0e:13: aa:27:ce:ff:27:04:3d:61:48:37:72:5f:48:ca:67: 13:05:af:c0:41:c2:4f:cc:75:d6:18:fe:bd:ff:54: b7:11:38:45:25:4c:39:75:72:f6:5a:16:6c:93:8c: 1b:f2:e6:af:cf:dc:95:53:25:4f:cd:5f:44:dc:73: 3a:59:b8:30:73:f3:ef:27:87:82:75:14:8f:0b:41: b8:66:aa:a4:96:38:0b:9d:09:43:cf:33:bb:db:95: b8:e7:fd:d5:be:4b:04:0b:49:6f:a7:a6:14:0d:ec: 46:bc:25:9e:d6:40:b8:84:0b:eb:f4:50:b3:b2:77: d2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:52:88:EF:08:AE:8E:C4:0B:A6:8C:5A:42:68:3A:91:02:03:0D:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:27:9e:e1:c1:23:24:64:f6:9e:29:2e:7d:8e:2f:30:f8:01: 9e:38:cc:af:d8:44:99:c2:d1:7c:c5:11:c1:f8:f8:e0:1c:be: 9f:9a:d2:16:b2:83:0d:f6:1c:71:aa:b4:d4:aa:7f:61:01:10: 0e:1e:89:f3:92:5a:1e:fe:a9:5c:2d:c1:03:03:de:4a:c4:ed: d8:0f:97:07:ad:86:5e:a3:cc:b1:fc:f0:86:1e:bc:e2:ef:60: 60:a0:1e:e5:60:ca:46:38:db:88:f8:14:44:f5:f1:13:93:f9: 7d:3e:a5:54:63:9c:41:23:62:66:5e:90:36:49:dd:cf:3c:e4: 95:3c:06:9a:af:b7:3c:c7:3a:36:52:3b:aa:81:54:c6:98:b2: ed:3c:85:68:6f:55:bf:b6:03:38:df:9a:b8:ab:8a:ce:97:3c: 37:18:a9:5c:ee:12:a2:ee:d8:5c:2d:f8:e6:13:fc:7d:f6:65: 8a:09:34:d4:32:8a:09:b0:16:8f:2c:4d:1d:25:a1:15:18:c1: fb:d3:be:2b:5b:f0:1a:a2:d2:2f:df:2a:dd:7d:9b:62:98:0d: 4c:c8:cf:de:c2:b5:68:31:c8:0d:e6:26:db:ec:d2:0f:b2:0d: 7b:a9:60:95:97:7c:9d:81:79:37:2f:a5:a5:7e:d1:72:dc:f3: 05:7e:48:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRhjYCKBzpwwVkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OWZjZTMwMjEtNTk2OS00NmUwLWEwNmEtMDM4NzA3MGEyZWU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUrPqYb9t8td2sfBXRRLOl943rb2+x0xfXms yFALyDNVzPpQGOH0NFUlj0fioHDeSXqdE6/49bRjAPeDXGjLGgCGBFLZNDR2rr5z pQt6xCaDyvxKkh/rvh6NRC5+kCSnLh72kEjQZrTgDO62a/A5ULpdYq1ALFoug9vp wMNVEaERtEayDhOqJ87/JwQ9YUg3cl9IymcTBa/AQcJPzHXWGP69/1S3EThFJUw5 dXL2WhZsk4wb8uavz9yVUyVPzV9E3HM6Wbgwc/PvJ4eCdRSPC0G4ZqqkljgLnQlD zzO725W45/3VvksEC0lvp6YUDexGvCWe1kC4hAvr9FCzsnfSKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFSiO8Iro7EC6aMWkJoOpECAw1aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWExZDY4YTYtZGVhMS0z YmU5LThiNmItZDBhMGFmMmFiOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAMnnuHBIyRk9p4pLn2OLzD4AZ44zK/YRJnC0XzFEcH4+OAcvp+a0hay gw32HHGqtNSqf2EBEA4eifOSWh7+qVwtwQMD3krE7dgPlwethl6jzLH88IYevOLv YGCgHuVgykY424j4FET18ROT+X0+pVRjnEEjYmZekDZJ3c885JU8BpqvtzzHOjZS O6qBVMaYsu08hWhvVb+2Azjfmriris6XPDcYqVzuEqLu2Fwt+OYT/H32ZYoJNNQy igmwFo8sTR0loRUYwfvTvitb8Bqi0i/fKt19m2KYDUzIz97CtWgxyA3mJtvs0g+y DXupYJWXfJ2BeTcvpaV+0XLc8wV+SC0= -----END CERTIFICATE-----Generated at Mon Oct 20 04:57:47 2025 by rpki-client