$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa File: 65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa (raw, json) Hash identifier: f7cQ0F60qUdho07yksUp4opLKDrLazsNJ6Dn0diiJ+w= Subject key identifier: 00:CF:AE:4A:1C:CC:84:5E:C5:8E:8C:D2:91:DA:AC:41:B1:65:7A:06 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDA7776F5A9A33D867A3F Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:da:77:76:f5:a9:a3:3d:86:7a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ab9e4d14-19fc-43cc-a20f-d9921e05be86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:f8:7a:37:3d:0b:17:48:51:d8:76:21:07:99: bb:16:6e:af:50:87:48:fd:ec:c1:c1:c8:19:80:e1: 7d:b4:1d:50:a4:2d:55:5f:b1:24:c4:11:b1:f0:d1: 52:a2:26:5f:55:1c:12:63:f2:45:60:a4:66:77:98: 06:1c:3a:43:e2:e4:c2:d4:c1:ac:8e:ef:77:17:db: ed:cc:d8:50:d0:21:7c:f1:65:2d:bb:b1:81:68:55: ae:1e:ae:a4:21:0c:42:34:56:c4:f5:fd:1e:f4:6c: 49:94:8c:70:ea:6d:4e:60:6f:76:aa:97:e4:c3:ef: 3c:dc:fc:82:cb:87:ca:34:f3:4f:d7:99:e8:d4:fd: d2:35:bf:b3:45:4f:3e:27:99:5d:95:90:28:9c:b9: 2b:b2:da:2d:05:2a:31:21:48:14:d7:c8:ce:d8:48: eb:f9:8c:28:a7:6c:fe:f4:e8:d3:7c:31:a6:07:38: a6:44:0d:37:6a:8d:cf:d8:17:c4:ed:77:3c:29:1f: 3e:e7:2f:7e:d2:69:01:1f:e7:b8:25:84:de:af:cb: 1c:8a:75:46:c6:72:25:69:74:90:88:07:79:c6:8d: 23:07:ce:f1:df:89:0b:53:68:ca:8c:e0:2a:ed:dc: fd:96:19:83:85:57:a4:12:32:86:de:f9:2b:4a:01: b5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:CF:AE:4A:1C:CC:84:5E:C5:8E:8C:D2:91:DA:AC:41:B1:65:7A:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65d9dcd2-13fd-3e84-a5a7-b9cd2d8a7060.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:73:8d:5b:6b:2d:44:3a:cf:f8:31:03:75:ab:ad:73:9a:d1: b0:13:dd:17:f8:06:10:da:bf:a1:ae:8c:4c:0c:65:f0:fe:48: 2c:0e:80:7f:a7:8e:96:ee:56:ac:9a:bd:fb:63:4b:ec:08:b1: 6f:f9:41:7e:32:0c:46:ae:8f:fb:34:0d:41:cd:5a:06:47:36: f4:66:6b:d8:21:c6:95:dd:68:f4:b7:64:3a:1c:a0:33:50:32: 55:84:33:1b:1c:48:03:2c:e5:a7:61:61:5b:ae:a7:06:43:10: 85:0d:f9:c5:b2:0c:7f:06:22:2f:49:c1:8c:c4:29:5c:1b:01: f0:4a:36:26:0c:13:7c:51:80:90:0f:51:b1:03:6c:5b:43:1c: ea:b2:81:a8:60:64:b2:60:00:9d:8b:34:d1:d0:52:23:74:13: 9b:b7:52:59:e6:4e:a4:9b:14:6d:11:1a:c0:0b:77:d0:b5:09: 8e:c3:1b:07:af:ae:fa:f7:ea:7b:84:a2:6d:6b:5c:0c:d0:4f: a3:7f:87:8d:f9:98:bb:70:dc:1b:7c:72:d2:af:a4:24:4a:ae: f1:4e:3a:6c:a5:2f:58:c4:b3:59:9c:56:5e:49:00:c3:52:17: 29:80:2c:1c:53:b0:c1:e3:98:53:2b:3b:66:5a:a7:cf:e0:7e: 6a:e0:a8:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdp3dvWpoz2Gej8wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWI5ZTRkMTQtMTlmYy00M2NjLWEyMGYtZDk5MjFlMDViZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtvh6Nz0LF0hR2HYhB5m7Fm6vUIdI/ezBwcgZ gOF9tB1QpC1VX7EkxBGx8NFSoiZfVRwSY/JFYKRmd5gGHDpD4uTC1MGsju93F9vt zNhQ0CF88WUtu7GBaFWuHq6kIQxCNFbE9f0e9GxJlIxw6m1OYG92qpfkw+883PyC y4fKNPNP15no1P3SNb+zRU8+J5ldlZAonLkrstotBSoxIUgU18jO2Ejr+Ywop2z+ 9OjTfDGmBzimRA03ao3P2BfE7Xc8KR8+5y9+0mkBH+e4JYTer8scinVGxnIlaXSQ iAd5xo0jB87x34kLU2jKjOAq7dz9lhmDhVekEjKG3vkrSgG15QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFADPrkoczIRexY6M0pHarEGxZXoGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjVkOWRjZDItMTNmZC0z ZTg0LWE1YTctYjljZDJkOGE3MDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGZzjVtrLUQ6z/gxA3WrrXOa0bAT3Rf4BhDav6GujEwMZfD+SCwOgH+n jpbuVqyavftjS+wIsW/5QX4yDEauj/s0DUHNWgZHNvRma9ghxpXdaPS3ZDocoDNQ MlWEMxscSAMs5adhYVuupwZDEIUN+cWyDH8GIi9JwYzEKVwbAfBKNiYME3xRgJAP UbEDbFtDHOqygahgZLJgAJ2LNNHQUiN0E5u3UlnmTqSbFG0RGsALd9C1CY7DGwev rvr36nuEom1rXAzQT6N/h435mLtw3Bt8ctKvpCRKrvFOOmylL1jEs1mcVl5JAMNS FymALBxTsMHjmFMrO2Zap8/gfmrgqMY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:39 2025 by rpki-client