$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa File: 767325d8-0651-3a4a-9c01-3c9451c12937.roa (raw, json) Hash identifier: uw+4cPW+NwDgmCAYfYNCXzDRP/NwUrIsXwi8wR4tQqM= Subject key identifier: B5:7B:8F:88:F7:C4:53:0B:BB:47:64:C9:5E:93:88:98:C7:68:B4:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD2065A202CF367DB4D280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.61.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:20:65:a2:02:cf:36:7d:b4:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=efb200b6-4e73-4fdc-8637-8bfca825abca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:c4:6b:ad:25:ff:5f:33:97:36:ea:32:90:da: 14:b9:de:ab:65:22:1b:5e:97:ba:1f:91:d8:fe:e7: 29:4c:ba:7c:21:45:96:7e:df:f3:40:c3:9a:24:38: 55:b7:03:4e:71:27:c2:7f:e1:fc:79:f1:44:bf:3c: 64:74:fb:a7:66:e5:f1:75:49:fc:79:0e:82:49:e0: ca:0f:8f:1f:f5:6e:50:7e:51:62:b6:f6:92:e6:6e: e6:e3:6d:d7:4f:34:b0:ae:7a:00:f6:2f:99:f3:66: aa:2f:da:17:4e:be:60:2c:8d:4b:6a:f2:9b:4a:ea: a9:96:b8:f8:3a:bf:d5:f7:46:0c:9c:c1:c5:60:fb: fb:2f:b8:5b:7a:60:88:71:f4:54:31:23:b1:1a:98: ce:2b:0f:b0:f3:67:fb:4a:27:3c:c9:ce:4d:22:f3: 1f:bb:ce:55:60:95:f9:52:59:c9:cc:08:b4:55:3c: de:45:54:3a:b6:10:ec:4b:f6:be:41:b6:91:1b:e5: 0e:d2:31:80:d5:0c:5d:90:9c:a5:49:ff:23:c4:60: 9a:a9:aa:c5:26:93:6c:67:b4:d8:63:37:00:11:9e: 2d:e1:f0:29:28:de:ef:73:09:cb:75:95:da:6f:d1: 9f:18:11:e8:a8:0d:0a:84:d7:c2:84:a6:f8:18:fd: bd:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7B:8F:88:F7:C4:53:0B:BB:47:64:C9:5E:93:88:98:C7:68:B4:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/767325d8-0651-3a4a-9c01-3c9451c12937.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.61.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:3a:04:b2:c7:14:eb:f1:c9:dc:47:ef:56:fd:90:f3:ed:d3: 34:94:14:3d:58:85:e1:f1:9e:40:5c:e7:e4:38:73:5d:b3:04: a8:6b:4f:44:be:92:9c:46:c4:54:a4:ca:d5:2a:39:af:e1:d6: 15:44:e1:04:f2:33:89:f0:27:88:f0:1a:53:c0:97:f7:4c:64: e4:07:3f:2e:c8:f6:bf:60:7d:aa:84:58:e6:ae:f2:5a:0e:07: 9b:38:eb:9a:fa:4d:ca:b0:cf:81:1a:ff:0b:f4:0f:c1:45:8d: 30:ba:e4:58:67:c1:3d:a9:ff:db:63:71:93:9d:10:b0:d9:d3: bb:40:9c:40:74:41:f6:96:1e:af:f1:df:ed:ac:70:73:80:93: ab:62:cd:cb:dd:a2:f9:bd:94:2e:b5:53:68:c0:54:ba:96:2e: f7:59:a8:48:f7:09:b1:0f:a3:8c:a3:78:c4:2d:7b:c9:0a:a3: 81:77:6b:2c:f3:27:d5:b6:52:5b:7c:4e:fb:21:73:17:fb:5e: 16:e7:0a:48:2a:fc:90:7f:67:f4:8a:9d:f6:5b:3b:f9:5a:ef: 5b:9f:0a:af:9c:aa:47:07:12:f6:9b:6a:a5:71:8d:94:bc:62: 3e:e3:d2:30:71:f2:65:27:c4:a9:f3:02:b6:62:18:93:14:3e: 03:26:97:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSBlogLPNn200oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZWZiMjAwYjYtNGU3My00ZmRjLTg2MzctOGJmY2E4MjVhYmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsRrrSX/XzOXNuoykNoUud6rZSIbXpe6H5HY /ucpTLp8IUWWft/zQMOaJDhVtwNOcSfCf+H8efFEvzxkdPunZuXxdUn8eQ6CSeDK D48f9W5QflFitvaS5m7m423XTzSwrnoA9i+Z82aqL9oXTr5gLI1LavKbSuqplrj4 Or/V90YMnMHFYPv7L7hbemCIcfRUMSOxGpjOKw+w82f7Sic8yc5NIvMfu85VYJX5 UlnJzAi0VTzeRVQ6thDsS/a+QbaRG+UO0jGA1QxdkJylSf8jxGCaqarFJpNsZ7TY YzcAEZ4t4fApKN7vcwnLdZXab9GfGBHoqA0KhNfChKb4GP29pwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLV7j4j3xFMLu0dkyV6TiJjHaLQYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzY3MzI1ZDgtMDY1MS0z YTRhLTljMDEtM2M5NDUxYzEyOTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEY6BLLHFOvxydxH71b9kPPt0zSUFD1YheHxnkBc5+Q4c12zBKhrT0S+ kpxGxFSkytUqOa/h1hVE4QTyM4nwJ4jwGlPAl/dMZOQHPy7I9r9gfaqEWOau8loO B5s465r6Tcqwz4Ea/wv0D8FFjTC65FhnwT2p/9tjcZOdELDZ07tAnEB0QfaWHq/x 3+2scHOAk6tizcvdovm9lC61U2jAVLqWLvdZqEj3CbEPo4yjeMQte8kKo4F3ayzz J9W2Ult8Tvshcxf7XhbnCkgq/JB/Z/SKnfZbO/la71ufCq+cqkcHEvabaqVxjZS8 Yj7j0jBx8mUnxKnzArZiGJMUPgMml0Q= -----END CERTIFICATE-----Generated at Sun Oct 19 23:56:37 2025 by rpki-client