$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa File: 8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa (raw, json) Hash identifier: YaV1LNrMIgO4Q8nnnb27KvEKaESLA+2NZ8jHa4D1JyQ= Subject key identifier: D8:74:F3:EA:E6:F3:D4:F6:82:55:75:53:D8:AF:AE:68:D2:2B:0A:2B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1CDA22A67A6C36EEC440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1c:da:22:a6:7a:6c:36:ee:c4:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=379700f6-8e3e-4c4c-a940-36fcc4488655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:39:f2:a4:e3:75:10:72:24:9f:7c:d3:28:0c: 8c:28:51:ef:bf:60:38:49:9d:b9:ba:65:d1:7b:48: 74:e4:27:62:3d:f6:64:8a:2d:bf:80:88:d9:87:a2: e9:f0:42:32:08:c0:ea:fb:a6:ce:ac:c2:34:db:0c: f5:49:24:ff:17:83:74:23:dc:57:26:f0:50:dd:44: 28:61:da:b6:c9:aa:82:be:3b:00:98:b7:93:db:d5: 36:e6:7d:80:b4:56:88:99:6a:04:21:f2:aa:e6:81: 72:ff:ab:20:8e:55:34:c7:76:96:ca:f2:14:b0:05: bb:64:4e:da:c1:78:49:ef:99:6e:4d:f5:8b:93:92: 00:f5:3f:b2:00:29:73:4c:f2:d6:f8:ef:5b:a8:da: 92:a1:08:d7:66:63:52:42:33:ad:2e:73:35:ff:8d: b4:eb:b7:e8:7b:94:d9:a5:24:5e:bc:ab:70:86:f8: ef:77:a9:5f:e0:27:49:56:f4:c1:47:64:9c:83:a0: 83:31:30:14:56:6d:54:d2:f1:5e:d1:8e:55:a6:28: de:fb:96:73:eb:a3:1c:fa:42:4e:86:b6:27:59:9b: 20:3c:7e:b7:47:d6:b3:06:ae:55:02:6d:41:8a:f5: 02:bf:de:59:90:20:d7:63:b6:ce:60:51:a9:c2:1d: 8b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:74:F3:EA:E6:F3:D4:F6:82:55:75:53:D8:AF:AE:68:D2:2B:0A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8cd0314f-b982-38f6-adbc-6cf6631de0f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:24:24:63:b4:7e:36:df:64:10:a1:18:3b:16:00:c8:37:fe: ae:02:f8:ab:1c:a9:11:67:e9:b1:2f:89:db:a3:30:95:cc:bb: 4b:3c:30:eb:f7:60:a5:3b:1e:52:55:92:6b:27:94:dd:1f:f6: 69:ea:ce:f7:2d:2f:4a:ca:da:02:91:8e:5d:df:f2:fa:44:20: 7e:8d:b5:6d:60:55:9e:2d:32:aa:87:41:e3:ed:86:71:ec:8e: 28:5b:6c:64:cc:54:8c:75:59:e6:76:58:4b:df:85:03:11:a9: 21:f7:7f:9a:46:db:ee:36:94:9b:78:5e:c0:16:66:bb:3d:04: 25:ad:b0:20:44:7b:bb:e6:a7:0b:d8:dd:30:bc:68:0a:10:53: 53:3e:ad:68:9b:da:95:df:07:ef:60:c3:4b:0c:22:88:47:17: 70:32:1a:40:45:ab:34:cd:7c:39:3c:60:1c:da:e8:66:07:5b: f9:25:5b:4b:59:64:92:2d:74:57:c9:84:3b:50:78:82:ac:f8: 38:31:8d:af:d7:74:46:33:43:85:2f:1a:6f:4a:66:96:f9:a7: b1:7b:f6:69:e6:87:d0:27:1b:b1:c7:f3:65:4d:d3:01:3f:fc: 36:12:7a:c9:75:45:88:67:89:ed:6c:12:6e:3f:13:f0:a9:be: cb:88:46:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRzaIqZ6bDbuxEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Mzc5NzAwZjYtOGUzZS00YzRjLWE5NDAtMzZmY2M0NDg4NjU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDnypON1EHIkn3zTKAyMKFHvv2A4SZ25umXR e0h05CdiPfZkii2/gIjZh6Lp8EIyCMDq+6bOrMI02wz1SST/F4N0I9xXJvBQ3UQo Ydq2yaqCvjsAmLeT29U25n2AtFaImWoEIfKq5oFy/6sgjlU0x3aWyvIUsAW7ZE7a wXhJ75luTfWLk5IA9T+yAClzTPLW+O9bqNqSoQjXZmNSQjOtLnM1/42067foe5TZ pSRevKtwhvjvd6lf4CdJVvTBR2Scg6CDMTAUVm1U0vFe0Y5Vpije+5Zz66Mc+kJO hrYnWZsgPH63R9azBq5VAm1BivUCv95ZkCDXY7bOYFGpwh2LYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNh08+rm89T2glV1U9ivrmjSKworMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGNkMDMxNGYtYjk4Mi0z OGY2LWFkYmMtNmNmNjYzMWRlMGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYkJGO0fjbfZBChGDsWAMg3/q4C+KscqRFn6bEvidujMJXMu0s8MOv3 YKU7HlJVkmsnlN0f9mnqzvctL0rK2gKRjl3f8vpEIH6NtW1gVZ4tMqqHQePthnHs jihbbGTMVIx1WeZ2WEvfhQMRqSH3f5pG2+42lJt4XsAWZrs9BCWtsCBEe7vmpwvY 3TC8aAoQU1M+rWib2pXfB+9gw0sMIohHF3AyGkBFqzTNfDk8YBza6GYHW/klW0tZ ZJItdFfJhDtQeIKs+Dgxja/XdEYzQ4UvGm9KZpb5p7F79mnmh9AnG7HH82VN0wE/ /DYSesl1RYhnie1sEm4/E/CpvsuIRi0= -----END CERTIFICATE-----Generated at Mon Oct 20 05:23:53 2025 by rpki-client