$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa File: a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa (raw, json) Hash identifier: 9FrC1XL+Y7WNguPFRXI2Yf2MUt/63Ba215cnW9Asf0g= Subject key identifier: 4A:A7:92:4B:8A:D7:84:40:65:A8:A8:2C:32:25:B8:F6:C8:E7:BF:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1B6E6470899D092DF580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1b:6e:64:70:89:9d:09:2d:f5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=0a147464-00c2-4cf5-8da7-b6d47b12ee6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c5:68:e6:14:dc:3a:bb:b5:52:d5:7b:b5:db: b4:b8:27:b1:c3:e8:2b:bd:b6:d3:b9:26:d1:ae:ad: 1f:cb:e3:24:0c:eb:a4:f0:8e:d9:f1:20:9e:57:17: 89:01:a0:17:09:cf:3f:72:a7:f7:5b:5f:e5:7d:64: a8:10:73:17:84:83:d7:88:f8:0a:d4:38:5a:ef:be: e9:2f:67:43:e1:ea:b4:0d:b5:22:52:e0:15:e1:0f: ee:44:1b:4c:d5:5e:52:1b:56:8d:a2:7e:6d:a0:39: 66:45:3a:74:2f:64:a7:e0:ae:ec:a3:da:0e:14:f6: e9:b2:90:7e:3e:e5:18:49:1d:04:05:de:70:89:41: 4a:43:da:42:77:8e:19:fb:61:9a:6a:70:6f:01:ce: 61:44:3f:ca:bc:68:d4:7c:e0:b9:13:af:00:13:17: 0f:cd:76:44:66:d5:8f:0d:84:94:d8:36:fe:ca:67: c7:92:01:1a:9d:db:20:1d:cf:11:d2:ef:70:b9:86: bf:c3:fe:f4:7c:d5:35:e0:99:52:52:8f:45:21:2a: a5:22:de:f9:ea:8d:63:c0:af:c4:08:f8:0f:32:7f: 69:66:22:34:c1:2c:91:6a:3f:27:b6:44:b3:86:ab: c1:fe:a4:7a:dc:3a:df:3d:88:d2:3d:6d:cd:e8:39: 85:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:A7:92:4B:8A:D7:84:40:65:A8:A8:2C:32:25:B8:F6:C8:E7:BF:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a406a8ab-8aed-3d6b-8e0e-9bb029169708.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:b3:db:81:d1:f7:0d:a2:17:fb:f7:36:b9:d7:a5:30:a8:41: 2c:84:09:1b:e7:57:73:72:46:d8:2c:78:d7:76:42:86:6f:ac: 27:6b:e8:fd:a9:19:bf:f6:66:04:0b:62:e8:bc:c8:e1:02:44: 5c:b0:81:77:44:04:56:d2:4c:ed:4d:31:03:1b:b5:6e:a3:10: 51:9d:8d:99:8d:ca:80:24:3a:3b:24:f4:6c:e9:c0:7c:6d:66: 7f:35:60:7b:7f:13:0c:09:e6:c9:98:53:6a:70:eb:72:79:23: e1:d5:a0:87:75:5c:d8:58:5b:35:83:b4:3d:7e:34:54:48:ba: 8a:7b:d3:af:04:86:48:2d:11:a8:4d:3b:43:89:88:5e:bc:4a: e7:c9:ed:a3:7d:3f:fc:a4:79:75:8c:28:f4:f7:2a:0a:90:60: b7:d0:ea:dd:a5:c3:32:90:79:81:5a:d1:c3:df:f8:87:61:0a: e3:ff:d2:a2:e7:71:6c:3b:f3:a7:35:dd:e2:c7:26:c8:f9:13: 14:b4:0a:e7:e4:6a:1a:d2:a9:89:d1:9c:75:79:60:ed:47:5f: cd:ac:1e:cd:8d:ee:49:b9:b0:93:b7:94:fe:3c:0e:a7:f7:d7: 3b:b9:89:39:c5:d9:74:18:1f:3a:dd:83:bc:cd:59:d0:22:0f: a2:8a:e7:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRtuZHCJnQkt9YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MGExNDc0NjQtMDBjMi00Y2Y1LThkYTctYjZkNDdiMTJlZTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsVo5hTcOru1UtV7tdu0uCexw+grvbbTuSbR rq0fy+MkDOuk8I7Z8SCeVxeJAaAXCc8/cqf3W1/lfWSoEHMXhIPXiPgK1Dha777p L2dD4eq0DbUiUuAV4Q/uRBtM1V5SG1aNon5toDlmRTp0L2Sn4K7so9oOFPbpspB+ PuUYSR0EBd5wiUFKQ9pCd44Z+2GaanBvAc5hRD/KvGjUfOC5E68AExcPzXZEZtWP DYSU2Db+ymfHkgEandsgHc8R0u9wuYa/w/70fNU14JlSUo9FISqlIt756o1jwK/E CPgPMn9pZiI0wSyRaj8ntkSzhqvB/qR63DrfPYjSPW3N6DmFKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEqnkkuK14RAZaioLDIluPbI57/0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTQwNmE4YWItOGFlZC0z ZDZiLThlMGUtOWJiMDI5MTY5NzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI2z24HR9w2iF/v3NrnXpTCoQSyECRvnV3NyRtgseNd2QoZvrCdr6P2p Gb/2ZgQLYui8yOECRFywgXdEBFbSTO1NMQMbtW6jEFGdjZmNyoAkOjsk9GzpwHxt Zn81YHt/EwwJ5smYU2pw63J5I+HVoId1XNhYWzWDtD1+NFRIuop7068EhkgtEahN O0OJiF68SufJ7aN9P/ykeXWMKPT3KgqQYLfQ6t2lwzKQeYFa0cPf+IdhCuP/0qLn cWw786c13eLHJsj5ExS0CufkahrSqYnRnHV5YO1HX82sHs2N7km5sJO3lP48Dqf3 1zu5iTnF2XQYHzrdg7zNWdAiD6KK53U= -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:09 2025 by rpki-client