$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa File: 8df81b61-4595-327a-837b-ad4983cb8977.roa (raw, json) Hash identifier: hbNayTTw56xQOnxqmXXS1Rl2cOO37RDomILIljtPRXk= Subject key identifier: 1F:85:89:00:B6:30:F0:70:7F:AF:77:AB:5A:02:ED:90:31:A5:AC:CB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD191B21E4E9484F3975E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:19:1b:21:e4:e9:48:4f:39:75:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2838054e-b9e8-47de-9b96-cfcaa1dee47b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:59:c8:e4:76:f4:70:92:48:42:c1:23:ec:98: a6:71:f8:0f:c4:b2:f9:ab:5a:61:42:41:cb:87:11: ce:f4:6c:df:cd:d3:46:f3:69:1e:e1:bf:a5:13:5b: 25:98:76:08:34:dd:74:76:0d:ba:9f:c0:d1:51:d2: 25:88:45:9a:53:0a:5b:64:28:0b:40:f6:62:77:96: 0c:72:42:08:ab:ed:af:d0:de:1c:15:9e:89:08:fb: 35:d1:ed:aa:2e:63:14:d9:78:6d:85:97:36:bb:8a: f5:8f:f7:61:3a:40:27:d8:fc:a8:48:58:fc:7f:5e: 0f:3a:0a:8c:1f:f2:02:9a:1f:6e:b8:77:09:00:42: ba:9e:bf:34:64:3a:9a:ef:2f:21:9e:57:0c:1e:88: 9f:c6:0c:04:3d:41:73:22:39:f6:2b:c6:e3:be:3c: 93:59:8a:49:cb:5a:66:35:19:8e:d0:51:ad:7c:c8: 82:11:67:2e:0d:4f:b3:c1:75:cf:d1:2f:cb:39:8d: 1a:d6:a0:3f:77:87:e8:1e:e4:29:c3:f9:56:d2:51: 77:97:1b:77:58:54:9b:c6:55:5d:a1:75:02:c7:5d: 6a:28:76:3b:8c:f8:1d:c2:b3:53:b5:b5:38:53:ab: 0f:50:fa:d5:f4:68:e8:03:e7:43:7f:f9:65:47:86: 5d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:85:89:00:B6:30:F0:70:7F:AF:77:AB:5A:02:ED:90:31:A5:AC:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8df81b61-4595-327a-837b-ad4983cb8977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:53:1a:4e:c2:bc:cf:e6:87:7b:ef:e8:0a:0d:81:a6:b6:da: 16:04:23:3a:31:45:18:3b:09:84:5b:85:fd:dd:fd:9d:95:fe: 4c:87:e1:63:ca:dc:67:2a:d2:60:2b:36:ad:12:e8:08:76:12: 28:96:f6:ec:c5:44:0b:dd:0e:12:f8:a9:e8:c4:00:b8:5f:bb: e3:c6:48:40:88:38:89:21:fc:65:f8:e9:6f:e1:3e:e5:ca:cc: f7:de:a2:88:0e:d0:6a:b3:01:55:1f:95:3f:8c:d4:f1:38:c5: cd:69:6c:5b:28:04:85:74:49:aa:b5:0b:d3:fd:12:37:7b:d1: 8d:36:58:4e:44:fd:5f:53:1f:ad:29:87:c8:fa:ae:93:d0:7f: 7c:10:48:63:13:4f:d6:da:72:28:65:66:4a:80:04:3b:31:26: 4f:8f:a3:19:96:79:d9:ae:c4:cb:c7:27:b9:80:71:4e:e9:0b: 7b:13:f8:17:04:27:1c:cc:97:76:4f:d3:05:7a:f3:cb:78:02: 3b:f3:91:6d:97:8d:2d:16:6c:65:10:90:83:d0:95:a5:41:24: 85:6f:96:8f:57:00:6f:c8:38:a1:f7:c2:55:18:8c:9d:9c:00: 56:0b:9b:7d:c1:b6:45:39:65:77:a8:43:2b:cb:b5:33:20:33: 4b:30:f3:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRkbIeTpSE85deAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MjgzODA1NGUtYjllOC00N2RlLTliOTYtY2ZjYWExZGVlNDdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApFnI5Hb0cJJIQsEj7JimcfgPxLL5q1phQkHL hxHO9GzfzdNG82ke4b+lE1slmHYINN10dg26n8DRUdIliEWaUwpbZCgLQPZid5YM ckIIq+2v0N4cFZ6JCPs10e2qLmMU2XhthZc2u4r1j/dhOkAn2PyoSFj8f14POgqM H/ICmh9uuHcJAEK6nr80ZDqa7y8hnlcMHoifxgwEPUFzIjn2K8bjvjyTWYpJy1pm NRmO0FGtfMiCEWcuDU+zwXXP0S/LOY0a1qA/d4foHuQpw/lW0lF3lxt3WFSbxlVd oXUCx11qKHY7jPgdwrNTtbU4U6sPUPrV9GjoA+dDf/llR4ZdiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB+FiQC2MPBwf693q1oC7ZAxpazLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGRmODFiNjEtNDU5NS0z MjdhLTgzN2ItYWQ0OTgzY2I4OTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJTGk7CvM/mh3vv6AoNgaa22hYEIzoxRRg7CYRbhf3d/Z2V/kyH4WPK 3Gcq0mArNq0S6Ah2EiiW9uzFRAvdDhL4qejEALhfu+PGSECIOIkh/GX46W/hPuXK zPfeoogO0GqzAVUflT+M1PE4xc1pbFsoBIV0Saq1C9P9Ejd70Y02WE5E/V9TH60p h8j6rpPQf3wQSGMTT9bacihlZkqABDsxJk+PoxmWedmuxMvHJ7mAcU7pC3sT+BcE JxzMl3ZP0wV688t4AjvzkW2XjS0WbGUQkIPQlaVBJIVvlo9XAG/IOKH3wlUYjJ2c AFYLm33BtkU5ZXeoQyvLtTMgM0sw82A= -----END CERTIFICATE-----Generated at Mon Oct 20 10:34:50 2025 by rpki-client