$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6de6e7-44d6-3bef-b969-172ce9cee022.roa File: 8f6de6e7-44d6-3bef-b969-172ce9cee022.roa (raw, json) Hash identifier: Mty/9wiCWyc2fTCYxA4199a2v0tatGBRzS8tTL/GUfM= Subject key identifier: 56:40:A0:A9:99:B5:2C:42:0A:53:E3:63:19:AA:AA:5F:73:15:07:C2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CE06526A2334082C8ECC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6de6e7-44d6-3bef-b969-172ce9cee022.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:06:52:6a:23:34:08:2c:8e:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2f5f2a86-15a2-4901-b516-bcdacd31fa32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:6d:5b:8f:c5:3a:ec:04:a9:2d:62:f9:8c:dd: 16:78:36:92:a2:25:1a:59:a8:29:d2:09:c1:a0:28: ea:83:50:2c:35:0f:cf:3a:95:a4:06:f9:0c:05:82: 27:05:ba:00:ae:31:7a:b8:68:44:a0:ec:6f:7f:9b: 06:2b:9f:62:52:1e:0d:38:3e:e5:b5:c9:4a:a5:8e: d0:38:15:a1:4c:4b:8e:ad:91:c6:34:67:4d:e9:7e: 3a:1f:df:c4:52:2a:5e:08:63:88:06:b9:3f:5f:1f: 9a:f0:09:5d:2c:09:bd:7a:79:f1:e5:a2:9a:cd:9c: 4f:34:1d:15:8b:a1:c6:58:a1:c2:f0:93:ae:54:ed: 66:ae:36:ce:1b:cc:6a:4d:a6:95:a8:ee:b9:c5:e4: dc:ac:1d:99:4b:ce:cb:89:e1:ad:2b:16:be:05:96: 60:f7:29:cb:c0:21:b2:12:b9:5a:de:7b:2c:fd:c1: d5:89:8d:50:c0:cc:47:3a:8b:70:20:d9:55:ce:3e: b8:71:00:b1:ef:6d:e0:be:f7:e0:30:ed:b9:02:33: e6:96:e6:6f:45:fc:f4:0b:7f:e4:ab:ee:05:47:65: f6:e5:d1:df:be:b1:30:ca:89:e2:da:56:c3:16:9b: 81:61:ae:05:f0:b8:ad:89:b6:dc:d3:9c:19:1f:c7: 88:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:40:A0:A9:99:B5:2C:42:0A:53:E3:63:19:AA:AA:5F:73:15:07:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f6de6e7-44d6-3bef-b969-172ce9cee022.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:49:14:5b:cf:b0:7f:a5:ec:bd:4a:bd:7f:b2:76:70:3c:d4: 17:1c:85:01:99:8d:47:f2:82:83:67:1d:ca:1e:11:cf:9d:48: 88:bb:b8:88:53:75:62:ab:dd:e5:ff:7a:27:aa:25:e8:f6:b9: 7f:84:a9:98:56:d1:d7:30:f5:ea:38:7f:39:c9:c9:87:ed:5e: 9b:05:6e:0d:8f:7a:9e:95:19:33:11:d2:c3:54:e6:9f:4a:e6: e4:00:db:30:f7:ca:c8:69:7f:6f:27:be:c1:91:c4:59:8b:7d: 5a:8c:54:aa:ee:03:c2:52:06:0c:17:62:38:e9:3e:a0:aa:0e: 3d:85:f2:8c:ce:f9:10:89:12:c6:62:64:39:ab:31:d9:40:2a: 63:3d:5a:22:14:69:e6:ec:45:47:be:6f:81:b2:0b:43:ee:e6: 9f:34:fa:48:8d:bf:98:3a:a6:bc:49:0a:d5:80:44:b4:8e:59: e9:29:49:6a:24:80:24:bc:44:0c:21:81:f1:77:37:6c:8d:c5: 84:48:ea:92:6e:47:ae:72:9a:a2:2d:ac:85:2d:15:18:3a:c8: 19:01:49:4e:98:6d:90:93:e0:34:0a:b0:df:3c:53:7e:ba:71: a6:bb:21:00:4f:7d:16:b1:f9:fc:78:d9:15:3d:1e:ee:f3:2a: 1f:91:93:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgZSaiM0CCyOzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmY1ZjJhODYtMTVhMi00OTAxLWI1MTYtYmNkYWNkMzFmYTMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkG1bj8U67ASpLWL5jN0WeDaSoiUaWagp0gnB oCjqg1AsNQ/POpWkBvkMBYInBboArjF6uGhEoOxvf5sGK59iUh4NOD7ltclKpY7Q OBWhTEuOrZHGNGdN6X46H9/EUipeCGOIBrk/Xx+a8AldLAm9ennx5aKazZxPNB0V i6HGWKHC8JOuVO1mrjbOG8xqTaaVqO65xeTcrB2ZS87LieGtKxa+BZZg9ynLwCGy Erla3nss/cHViY1QwMxHOotwINlVzj64cQCx723gvvfgMO25AjPmluZvRfz0C3/k q+4FR2X25dHfvrEwyoni2lbDFpuBYa4F8Litibbc05wZH8eIbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZAoKmZtSxCClPjYxmqql9zFQfCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGY2ZGU2ZTctNDRkNi0z YmVmLWI5NjktMTcyY2U5Y2VlMDIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALJJFFvPsH+l7L1KvX+ydnA81BcchQGZjUfygoNnHcoeEc+dSIi7uIhT dWKr3eX/eieqJej2uX+EqZhW0dcw9eo4fznJyYftXpsFbg2Pep6VGTMR0sNU5p9K 5uQA2zD3yshpf28nvsGRxFmLfVqMVKruA8JSBgwXYjjpPqCqDj2F8ozO+RCJEsZi ZDmrMdlAKmM9WiIUaebsRUe+b4GyC0Pu5p80+kiNv5g6prxJCtWARLSOWekpSWok gCS8RAwhgfF3N2yNxYRI6pJuR65ymqItrIUtFRg6yBkBSU6YbZCT4DQKsN88U366 caa7IQBPfRax+fx42RU9Hu7zKh+Rk7o= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:07 2025 by rpki-client