$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/850e397a-cf34-3e4a-8479-300ab4c961bd.roa File: 850e397a-cf34-3e4a-8479-300ab4c961bd.roa (raw, json) Hash identifier: GrrbymeqxQSEn8dhwyie8sd59F9Ie6ZAiJ8HVGHQE5E= Subject key identifier: 4F:B9:A5:DC:E7:02:BC:06:08:70:5F:06:97:80:BE:26:CE:59:3F:F2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD644867413C170875080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/850e397a-cf34-3e4a-8479-300ab4c961bd.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d6:44:86:74:13:c1:70:87:50:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=aea8b5b7-8e9f-466d-a2df-e570202ee686 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:a5:22:9f:0b:e9:55:55:68:ba:04:27:d6:df: bd:5c:9b:72:cb:9e:24:ba:e3:74:e0:3a:7b:4c:50: 3f:1a:13:de:df:ac:1a:a8:f2:7d:c0:b9:d6:cf:10: 93:18:a3:86:b5:a5:9e:3d:1c:b8:ca:06:b0:57:f1: 36:5b:d6:33:95:b6:12:d6:49:a0:fe:e0:36:d1:a5: a5:b0:e5:65:c5:63:c0:6c:61:34:b4:d7:e8:e8:0a: 50:ce:d6:d3:26:f2:11:da:6c:33:a7:ef:46:3e:9f: 0e:e2:b9:53:13:fa:3d:6a:e2:a8:80:03:cf:60:db: 46:0b:a8:89:09:a2:67:06:48:c3:0f:bc:e1:53:ea: 2e:24:05:15:38:1d:fb:48:70:8a:0c:c2:82:d2:61: 6b:df:3c:ac:4d:bb:96:2f:51:92:47:03:d1:8e:09: 2d:c8:0b:5a:3b:41:db:cb:34:aa:74:f7:b2:35:78: b4:c4:8c:42:fa:8b:4d:53:f2:67:83:aa:f9:bc:79: fa:53:98:48:80:e5:31:81:16:e1:bf:a4:70:1f:1f: b8:76:2f:5e:cf:8d:57:77:fd:92:57:c9:4e:87:b2: 7d:86:3d:18:2b:01:dc:31:26:3f:16:19:f3:f2:3c: a3:40:09:6f:70:31:9d:80:85:46:f8:5b:21:54:99: 0d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:B9:A5:DC:E7:02:BC:06:08:70:5F:06:97:80:BE:26:CE:59:3F:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/850e397a-cf34-3e4a-8479-300ab4c961bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:f4:06:68:06:19:a4:28:54:10:93:42:26:b8:05:e5:43:49: 31:75:6f:e6:4a:2e:d6:aa:c8:2c:bd:2b:b7:14:c6:45:6d:a1: 3b:b0:43:3f:fb:13:70:32:d8:3d:c6:e6:6f:4c:7d:1c:92:d3: ac:d4:97:35:81:e6:5f:69:4a:55:6f:2d:3e:26:86:ec:ef:9e: 02:9a:d0:66:36:1f:5c:a6:1b:a6:41:9b:cd:e1:67:c3:ed:7a: f9:d7:33:92:f4:e0:3e:6a:95:2f:33:04:55:7c:48:c9:0f:9c: 22:eb:dc:5a:3f:eb:90:ec:6c:b4:5b:c8:46:46:f3:0d:55:77: 88:47:9d:39:2f:d5:0d:73:12:d8:05:84:9f:c3:1a:71:e8:81: 1b:0d:c1:c8:67:28:e2:14:b6:3c:df:38:40:f9:6d:42:3c:0c: 9b:d6:69:a1:5d:48:53:c1:5e:a3:d0:ed:b8:91:a2:7e:5f:9e: 45:1d:aa:1e:a9:0b:24:b8:6b:1b:cf:2f:1a:e7:a2:75:16:ce: b6:9a:26:bb:c7:7e:16:c1:6f:31:b7:97:3c:c0:09:a7:71:99: 4c:d9:ae:29:db:2a:6b:b8:3a:dd:65:99:62:81:e2:e4:32:cd: c3:4b:5a:36:8a:10:18:e5:78:14:ee:b9:b1:b2:5c:37:7c:a4: 4b:c3:5f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdZEhnQTwXCHUIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWVhOGI1YjctOGU5Zi00NjZkLWEyZGYtZTU3MDIwMmVlNjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqUinwvpVVVougQn1t+9XJtyy54kuuN04Dp7 TFA/GhPe36waqPJ9wLnWzxCTGKOGtaWePRy4ygawV/E2W9YzlbYS1kmg/uA20aWl sOVlxWPAbGE0tNfo6ApQztbTJvIR2mwzp+9GPp8O4rlTE/o9auKogAPPYNtGC6iJ CaJnBkjDD7zhU+ouJAUVOB37SHCKDMKC0mFr3zysTbuWL1GSRwPRjgktyAtaO0Hb yzSqdPeyNXi0xIxC+otNU/Jng6r5vHn6U5hIgOUxgRbhv6RwHx+4di9ez41Xd/2S V8lOh7J9hj0YKwHcMSY/Fhnz8jyjQAlvcDGdgIVG+FshVJkNuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE+5pdznArwGCHBfBpeAvibOWT/yMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODUwZTM5N2EtY2YzNC0z ZTRhLTg0NzktMzAwYWI0Yzk2MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL0BmgGGaQoVBCTQia4BeVDSTF1b+ZKLtaqyCy9K7cUxkVtoTuwQz/7 E3Ay2D3G5m9MfRyS06zUlzWB5l9pSlVvLT4mhuzvngKa0GY2H1ymG6ZBm83hZ8Pt evnXM5L04D5qlS8zBFV8SMkPnCLr3Fo/65DsbLRbyEZG8w1Vd4hHnTkv1Q1zEtgF hJ/DGnHogRsNwchnKOIUtjzfOED5bUI8DJvWaaFdSFPBXqPQ7biRon5fnkUdqh6p CyS4axvPLxrnonUWzraaJrvHfhbBbzG3lzzACadxmUzZrinbKmu4Ot1lmWKB4uQy zcNLWjaKEBjleBTuubGyXDd8pEvDX/Y= -----END CERTIFICATE-----Generated at Mon Oct 20 03:57:46 2025 by rpki-client