$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6613fa68-a3df-3c91-8321-8c0237b45e9b.roa File: 6613fa68-a3df-3c91-8321-8c0237b45e9b.roa (raw, json) Hash identifier: uX5NVjtA3H9hqozSVkERkUdWtrsW2KdBjF4DY5uuqMw= Subject key identifier: 84:ED:6D:E4:03:60:A7:F1:1D:9C:DF:26:86:AA:2F:1A:64:E5:FB:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDB2C08065E472215F480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6613fa68-a3df-3c91-8321-8c0237b45e9b.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:db:2c:08:06:5e:47:22:15:f4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f0e00bc9-4dcd-4577-a6e3-9f88a206c2e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:48:f2:c3:e1:b5:32:74:cf:02:9b:ff:1a:18: f8:3b:6d:82:e3:a1:3f:cb:ad:8f:aa:48:25:aa:0f: 9a:fb:e4:5a:aa:ca:e4:93:13:47:75:74:9c:95:f4: 2b:79:15:cb:94:fb:85:b8:d2:06:2f:bc:54:2b:15: 74:b0:a2:06:fb:9a:a6:a4:d2:9c:01:84:8b:4e:59: 2e:de:e7:09:90:b4:60:a0:94:18:b9:11:98:0e:aa: 1e:3e:ca:ca:2f:3e:83:d5:a9:bd:dd:8f:9d:97:14: 0d:7d:57:0d:d4:e3:4e:0e:e9:7c:89:50:14:7c:2d: a0:df:5b:c0:bb:83:70:41:ef:25:9a:4c:aa:a3:22: 88:32:68:5b:a9:29:ff:a7:74:a4:38:34:d1:fc:54: f6:7b:e5:52:db:d4:0b:d0:4a:d7:45:e6:f7:61:e9: ec:0f:15:71:b7:3c:1e:0e:06:ae:63:c0:2a:ac:20: 33:49:7d:41:06:40:99:66:6d:bc:57:a6:f1:27:dd: 5e:dd:4b:ff:4b:fe:34:22:0a:0a:ce:53:99:22:4b: 6e:c2:1a:6e:b4:cb:c6:82:35:9d:42:41:d4:6e:74: 99:80:c4:55:f4:52:26:12:4a:e3:f7:e5:05:f6:1d: 93:6a:87:8a:e0:46:83:a5:9a:eb:be:71:31:95:29: 07:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:ED:6D:E4:03:60:A7:F1:1D:9C:DF:26:86:AA:2F:1A:64:E5:FB:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6613fa68-a3df-3c91-8321-8c0237b45e9b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:d9:cc:ba:d8:7e:1e:5a:b9:0d:13:01:c3:48:ff:ee:dd:fb: 2f:b1:03:dc:a6:02:ac:48:3d:ce:39:06:95:0f:1a:4c:6d:24: 21:7b:70:95:06:95:cc:cd:b3:ac:7e:b1:0f:51:32:d8:35:47: e7:d9:f4:86:fa:67:d4:15:b3:e0:e4:16:66:b8:5f:01:82:40: 21:84:7e:93:48:48:fc:59:e8:2d:e4:aa:34:3c:0a:ac:09:3a: cf:03:8b:f0:6e:39:3b:3e:09:a4:90:9d:83:94:6c:fd:44:a9: 1f:3d:89:75:19:38:b4:b5:db:a4:a3:5f:27:29:f1:51:fd:07: 85:ed:b4:88:a9:67:ba:e7:6f:b7:3b:39:b9:55:8d:e7:92:65: 1c:c1:36:f9:91:a6:65:ec:0d:ee:b3:4b:d4:ea:e9:a6:62:3d: 15:30:56:22:d6:53:76:22:f9:4e:54:23:a1:d0:98:68:32:43: b1:b6:63:bf:4b:b3:c7:c6:47:00:0a:1a:b0:3a:c3:2d:b5:78: 32:70:ca:bd:8e:0a:c8:87:b2:3c:4f:c9:68:89:f0:e3:1b:24: 0b:ab:e3:9c:e7:73:31:b2:84:30:42:ed:9d:f5:fb:55:63:48: f1:60:37:cc:5e:1c:c6:f9:f5:d9:3c:85:ed:9c:1b:6b:f1:dd: b5:a5:a2:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdssCAZeRyIV9IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjBlMDBiYzktNGRjZC00NTc3LWE2ZTMtOWY4OGEyMDZjMmU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5kjyw+G1MnTPApv/Ghj4O22C46E/y62Pqkgl qg+a++RaqsrkkxNHdXSclfQreRXLlPuFuNIGL7xUKxV0sKIG+5qmpNKcAYSLTlku 3ucJkLRgoJQYuRGYDqoePsrKLz6D1am93Y+dlxQNfVcN1ONODul8iVAUfC2g31vA u4NwQe8lmkyqoyKIMmhbqSn/p3SkODTR/FT2e+VS29QL0ErXReb3YensDxVxtzwe DgauY8AqrCAzSX1BBkCZZm28V6bxJ91e3Uv/S/40IgoKzlOZIktuwhputMvGgjWd QkHUbnSZgMRV9FImEkrj9+UF9h2TaoeK4EaDpZrrvnExlSkH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFITtbeQDYKfxHZzfJoaqLxpk5fvYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjYxM2ZhNjgtYTNkZi0z YzkxLTgzMjEtOGMwMjM3YjQ1ZTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIvZzLrYfh5auQ0TAcNI/+7d+y+xA9ymAqxIPc45BpUPGkxtJCF7cJUG lczNs6x+sQ9RMtg1R+fZ9Ib6Z9QVs+DkFma4XwGCQCGEfpNISPxZ6C3kqjQ8CqwJ Os8Di/BuOTs+CaSQnYOUbP1EqR89iXUZOLS126SjXycp8VH9B4XttIipZ7rnb7c7 OblVjeeSZRzBNvmRpmXsDe6zS9Tq6aZiPRUwViLWU3Yi+U5UI6HQmGgyQ7G2Y79L s8fGRwAKGrA6wy21eDJwyr2OCsiHsjxPyWiJ8OMbJAur45znczGyhDBC7Z31+1Vj SPFgN8xeHMb59dk8he2cG2vx3bWlosU= -----END CERTIFICATE-----Generated at Tue Oct 21 03:57:06 2025 by rpki-client