$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/765d0933-0d2d-3cbd-979f-1479140ccb6f.roa File: 765d0933-0d2d-3cbd-979f-1479140ccb6f.roa (raw, json) Hash identifier: moC9MzgZmfffitvFFAqB5ZYOJDrPHXr5aoC1MWmrVpc= Subject key identifier: 5A:7B:34:5F:25:BC:D9:E2:E9:71:5D:79:8C:13:16:D9:E7:17:0D:E9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE4397A8C600D7F20B700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/765d0933-0d2d-3cbd-979f-1479140ccb6f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.237.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e4:39:7a:8c:60:0d:7f:20:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bff9d255-9c2e-43d8-8194-897fbcaf4ee7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:c9:f3:d1:2f:02:b5:ab:8f:3d:18:a7:ce:82: 92:45:0b:48:3a:e4:20:a6:1e:c4:23:61:7d:0e:18: 22:3a:a5:89:6c:d8:f3:6d:fc:5c:c3:f3:60:da:5b: 03:0c:44:aa:47:a7:dc:5b:9c:6d:8e:6c:f3:72:ec: 1a:b9:9d:1c:4a:45:82:4f:d6:dc:a0:4c:90:4b:6b: 48:80:26:d8:0c:38:2d:70:a2:65:55:e0:8f:bd:2b: 29:35:5a:2e:b4:19:43:0e:b3:d0:1d:9a:2b:91:38: 08:65:0d:36:24:a3:2a:26:4d:c0:87:cd:ce:76:04: 30:ac:70:1a:3a:b7:08:62:35:2a:4c:6a:d1:a6:cd: 04:6a:45:78:59:70:45:65:5c:48:d7:f8:88:ac:91: 1a:c7:38:09:ed:2b:99:13:0c:92:b7:c5:2c:e4:65: 5e:9c:05:c2:8e:2e:4b:a3:5e:02:4a:26:ea:da:1c: 67:5e:15:22:e3:82:79:e1:a3:a3:18:6a:34:5f:49: 5d:4e:d3:f1:5b:28:6a:30:69:0c:ef:23:02:26:a5: 5e:9b:74:14:f3:a8:38:9b:16:4a:80:53:8a:c9:56: 5c:14:66:dc:05:77:75:90:cf:4e:e8:c1:8f:6b:3d: 54:d1:d1:4d:c6:52:6e:57:10:8a:be:45:43:a3:fc: ee:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7B:34:5F:25:BC:D9:E2:E9:71:5D:79:8C:13:16:D9:E7:17:0D:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/765d0933-0d2d-3cbd-979f-1479140ccb6f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.237.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:e0:66:3f:67:e7:83:62:c6:36:a6:a3:d5:f1:a5:10:3c:2e: c4:51:d7:0b:8f:75:c6:2b:5a:de:1e:ee:d7:7e:6f:5b:75:a7: c2:1d:81:bd:36:9f:37:12:2b:40:9e:dd:e5:d8:11:85:ab:d7: 32:ef:6c:93:1d:75:53:c4:0e:ae:f1:ee:af:44:b2:a9:29:bc: 22:f6:81:28:89:76:99:d2:92:d4:f7:0d:2b:08:99:48:f9:0c: 35:35:2f:ea:ce:5b:bc:6d:51:55:b2:09:01:7a:06:98:34:84: 83:10:df:83:25:ce:12:ee:9e:29:5f:a5:89:49:ca:e0:9c:0e: 7b:d3:25:5a:cd:37:c1:09:c7:fd:d8:e6:ed:0b:41:38:ce:f7: e2:63:b3:5b:fd:7d:5f:57:17:28:91:c7:50:33:f9:11:9e:d6: b2:37:d9:db:0e:26:87:31:49:34:4a:45:33:4f:d4:2b:ca:06: df:ca:d3:41:83:29:f3:b6:e9:a9:44:eb:27:a0:31:3d:cb:99: 6a:5d:d4:2b:1c:2f:53:1a:31:96:33:ab:91:d8:b6:7f:1b:9f: 24:ca:7e:4b:36:65:e3:04:1d:cc:81:77:d2:16:90:dd:bd:29: 4a:8c:26:87:49:cc:fb:35:a6:3f:ac:f9:b6:47:3d:a0:86:63: 7e:d5:88:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeQ5eoxgDX8gtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmZmOWQyNTUtOWMyZS00M2Q4LTgxOTQtODk3ZmJjYWY0ZWU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAicnz0S8CtauPPRinzoKSRQtIOuQgph7EI2F9 DhgiOqWJbNjzbfxcw/Ng2lsDDESqR6fcW5xtjmzzcuwauZ0cSkWCT9bcoEyQS2tI gCbYDDgtcKJlVeCPvSspNVoutBlDDrPQHZorkTgIZQ02JKMqJk3Ah83OdgQwrHAa OrcIYjUqTGrRps0EakV4WXBFZVxI1/iIrJEaxzgJ7SuZEwySt8Us5GVenAXCji5L o14CSibq2hxnXhUi44J54aOjGGo0X0ldTtPxWyhqMGkM7yMCJqVem3QU86g4mxZK gFOKyVZcFGbcBXd1kM9O6MGPaz1U0dFNxlJuVxCKvkVDo/zuFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFp7NF8lvNni6XFdeYwTFtnnFw3pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzY1ZDA5MzMtMGQyZC0z Y2JkLTk3OWYtMTQ3OTE0MGNjYjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIDgZj9n54Nixjamo9XxpRA8LsRR1wuPdcYrWt4e7td+b1t1p8Idgb02 nzcSK0Ce3eXYEYWr1zLvbJMddVPEDq7x7q9EsqkpvCL2gSiJdpnSktT3DSsImUj5 DDU1L+rOW7xtUVWyCQF6Bpg0hIMQ34MlzhLunilfpYlJyuCcDnvTJVrNN8EJx/3Y 5u0LQTjO9+Jjs1v9fV9XFyiRx1Az+RGe1rI32dsOJocxSTRKRTNP1CvKBt/K00GD KfO26alE6yegMT3LmWpd1CscL1MaMZYzq5HYtn8bnyTKfks2ZeMEHcyBd9IWkN29 KUqMJodJzPs1pj+s+bZHPaCGY37ViAI= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:19 2025 by rpki-client