$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa File: 5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa (raw, json) Hash identifier: DWUepS+ukLK4HO6Y8hmLfVBx7950Q7l0j+akeVTUEmc= Subject key identifier: 38:08:D8:AC:C1:1A:FE:11:12:32:AA:73:8E:17:86:2F:89:DD:0D:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDEA02E71886ED34E0C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:de:a0:2e:71:88:6e:d3:4e:0c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d00b6e7f-4d37-444b-bad4-acb2401d6e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:dd:2a:0e:19:bb:32:c2:cf:e5:46:f4:ff:77: ce:f8:1a:ae:f3:80:a6:99:b8:f1:a7:d4:7e:c6:48: ae:3d:76:84:e5:31:4a:64:18:6d:85:08:5a:5d:8e: 64:c5:88:81:82:85:b8:40:14:3e:98:cc:91:9d:c1: e7:1f:04:cc:a2:45:ef:7b:f2:00:75:64:fa:88:ed: 56:d0:f3:68:8a:77:fb:df:41:de:b1:32:08:d4:73: c8:9b:32:fc:fb:e3:d1:57:43:a9:2b:21:47:2e:35: f0:b3:98:dc:d4:e4:b2:3f:bb:6b:ec:82:ba:4e:a2: 07:6f:14:8b:15:e1:90:5f:66:38:b1:98:7b:bd:b6: 49:d5:92:04:55:16:5a:80:84:c4:33:6c:55:d1:aa: 9c:65:fc:ea:99:2d:bd:6b:71:0d:64:73:3d:88:17: 25:8e:4d:bd:d3:5f:9f:fd:0c:e4:d3:d3:09:b4:5d: 7b:39:cd:09:b8:13:39:91:aa:60:58:e1:60:ce:f8: 3f:6f:6d:7f:c8:e8:48:3e:a5:15:89:eb:54:1d:3c: 8f:83:ed:15:99:c1:a0:64:e7:10:16:04:a6:67:1a: d5:69:33:a7:79:a9:18:05:36:4d:dc:fe:01:04:3f: 15:5f:19:0e:3b:b8:ad:1c:c0:27:46:77:47:ef:7a: 43:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:08:D8:AC:C1:1A:FE:11:12:32:AA:73:8E:17:86:2F:89:DD:0D:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a599b2f-c600-3acd-b885-5ceb3fefd6e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:09:8d:10:da:c4:3d:81:1b:26:ff:69:5a:0a:71:02:b3:2e: ff:47:ae:0e:d1:ee:a6:ba:74:50:f8:b9:55:67:28:5d:b8:2a: d4:47:38:22:41:34:16:9b:29:b9:60:86:66:b9:2a:ba:eb:32: c7:22:c5:5b:d3:98:3e:f0:87:c0:8a:85:35:eb:bf:45:e7:e6: 44:e9:15:2a:22:a9:ef:10:ab:a9:98:ec:f4:ad:00:23:49:cd: fc:d5:49:2c:41:33:a6:df:df:bc:69:15:1b:57:23:22:45:b6: c1:4f:41:a1:73:70:42:1b:3f:fd:8e:53:c9:c6:52:c9:4c:9b: e6:7a:f1:5e:e8:6f:84:07:ad:0d:0f:fe:74:81:c2:85:16:ea: ad:78:1c:70:78:72:a1:74:ec:86:89:4e:82:3c:75:ac:26:1e: 5c:6b:49:e6:c1:b4:5b:2a:3a:e1:cb:2f:f4:a0:df:19:83:74: a1:b8:f6:86:f2:ab:aa:5f:7b:50:b6:00:8b:6b:92:cc:bf:c4: 3a:89:14:35:44:a7:55:f6:fe:91:cc:b4:2b:e2:57:ed:d9:74: 22:d2:31:ab:7f:c1:03:10:a0:13:41:ef:b7:bb:08:07:51:72: 7c:a8:69:9a:01:84:1a:97:81:2d:e1:1c:52:11:52:b8:f7:7d: 7e:b1:ee:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzd6gLnGIbtNODIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDAwYjZlN2YtNGQzNy00NDRiLWJhZDQtYWNiMjQwMWQ2ZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnt0qDhm7MsLP5Ub0/3fO+Bqu84Cmmbjxp9R+ xkiuPXaE5TFKZBhthQhaXY5kxYiBgoW4QBQ+mMyRncHnHwTMokXve/IAdWT6iO1W 0PNoinf730HesTII1HPImzL8++PRV0OpKyFHLjXws5jc1OSyP7tr7IK6TqIHbxSL FeGQX2Y4sZh7vbZJ1ZIEVRZagITEM2xV0aqcZfzqmS29a3ENZHM9iBcljk2901+f /Qzk09MJtF17Oc0JuBM5kapgWOFgzvg/b21/yOhIPqUVietUHTyPg+0VmcGgZOcQ FgSmZxrVaTOneakYBTZN3P4BBD8VXxkOO7itHMAnRndH73pDJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDgI2KzBGv4REjKqc44Xhi+J3Q2vMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWE1OTliMmYtYzYwMC0z YWNkLWI4ODUtNWNlYjNmZWZkNmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwJjRDaxD2BGyb/aVoKcQKzLv9Hrg7R7qa6dFD4uVVnKF24KtRHOCJB NBabKblghma5KrrrMscixVvTmD7wh8CKhTXrv0Xn5kTpFSoiqe8Qq6mY7PStACNJ zfzVSSxBM6bf37xpFRtXIyJFtsFPQaFzcEIbP/2OU8nGUslMm+Z68V7ob4QHrQ0P /nSBwoUW6q14HHB4cqF07IaJToI8dawmHlxrSebBtFsqOuHLL/Sg3xmDdKG49oby q6pfe1C2AItrksy/xDqJFDVEp1X2/pHMtCviV+3ZdCLSMat/wQMQoBNB77e7CAdR cnyoaZoBhBqXgS3hHFIRUrj3fX6x7gU= -----END CERTIFICATE-----Generated at Mon Oct 20 05:22:22 2025 by rpki-client