$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a601ab69-8012-3cd2-b3c8-d3ee32421604.roa File: a601ab69-8012-3cd2-b3c8-d3ee32421604.roa (raw, json) Hash identifier: gOx74dQbA+Btt8wNvEgE5SLaSRbHyrWm++5SJryyM7c= Subject key identifier: EA:7F:67:7A:73:06:2E:2B:EC:A7:D5:B0:37:9B:BF:37:5D:73:25:21 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1BD22189B0B308F075C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a601ab69-8012-3cd2-b3c8-d3ee32421604.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1b:d2:21:89:b0:b3:08:f0:75:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c5494ae6-ffcc-408d-9be8-16d332fda1f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:72:a3:6e:b2:99:6e:73:6b:6a:63:c9:7d: e3:d1:b6:d0:3a:f6:05:86:6a:81:ac:d1:c6:01:67: cb:fb:71:5c:00:a0:f6:d3:ed:77:a0:b3:11:61:f4: b3:ea:40:9f:fe:d2:63:1d:df:07:66:6d:70:27:0e: ab:0b:99:e8:8c:b4:76:17:79:e0:25:b8:dc:f0:d9: e9:57:a1:3e:f2:24:46:59:68:25:d8:6f:30:39:29: bf:60:58:b6:ab:14:09:8f:96:ad:5a:c5:41:90:ac: cb:91:b8:f3:98:5a:4a:35:26:27:63:ac:31:67:72: 37:09:b3:74:06:90:f2:3e:d7:4c:ef:16:4d:56:41: e2:0b:cf:58:6d:9d:26:e2:6c:4e:5f:ba:86:16:3d: df:78:6e:84:92:f8:5c:0a:be:50:3b:cf:19:0f:80: 00:b2:2d:a1:0f:bd:1c:bd:3b:1f:30:d7:e3:64:14: dd:14:d2:45:83:43:dc:fc:b2:4d:5e:f6:7b:e3:8c: 17:33:ec:91:15:0a:b9:68:99:61:4e:4b:eb:af:ea: c8:70:40:6f:27:18:5e:e4:c9:10:46:12:24:2c:0f: 1b:35:8b:cd:48:ad:7b:ad:34:e4:08:90:f4:53:8a: e1:80:83:c0:0a:3e:37:8b:87:fb:60:c3:e8:a1:46: e8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:7F:67:7A:73:06:2E:2B:EC:A7:D5:B0:37:9B:BF:37:5D:73:25:21 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a601ab69-8012-3cd2-b3c8-d3ee32421604.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:24:d0:cc:a8:b3:f1:72:22:df:bc:1c:06:f3:d5:39:c1:74: 7d:e3:83:af:9f:fa:d1:1c:73:b5:69:9d:f1:36:01:c4:18:58: d9:3b:93:fc:7e:0b:09:be:eb:1c:ff:a5:fc:29:69:f9:ba:81: b6:6d:15:0e:63:23:b4:c8:14:dc:20:35:cb:27:ec:e2:fe:d5: 83:71:77:69:ec:3b:25:e4:d0:1e:64:c9:34:35:d8:df:5e:20: 61:75:d9:17:ae:9c:89:42:62:f8:2a:e1:45:aa:51:91:01:ed: 06:02:00:b6:84:99:c0:ef:3c:3d:10:28:f3:d1:0d:8f:40:aa: ff:05:fa:d0:82:94:71:82:a6:ee:7e:bc:84:3f:35:e8:47:56: 95:1e:06:db:b2:98:c2:a2:3f:e3:fa:d8:06:40:ec:54:56:db: e4:7c:31:e7:80:56:d6:53:18:3b:10:5e:47:08:3d:5e:b6:df: d7:42:1e:3e:10:d7:ec:d7:bd:82:76:4e:c7:1d:e9:0f:3c:90: 20:8f:b7:50:14:6c:80:4a:0d:c8:af:5f:fd:ef:d8:32:f7:7f: e4:fb:c0:7f:c7:be:21:24:9d:11:75:41:45:95:ad:af:ac:b4: 3a:db:4a:8d:6c:93:07:1e:96:fa:a0:ab:1b:98:c0:86:c0:48: ff:47:a4:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRvSIYmwswjwdcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzU0OTRhZTYtZmZjYy00MDhkLTliZTgtMTZkMzMyZmRhMWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYhyo26ymW5za2pjyX3j0bbQOvYFhmqBrNHG AWfL+3FcAKD20+13oLMRYfSz6kCf/tJjHd8HZm1wJw6rC5nojLR2F3ngJbjc8Nnp V6E+8iRGWWgl2G8wOSm/YFi2qxQJj5atWsVBkKzLkbjzmFpKNSYnY6wxZ3I3CbN0 BpDyPtdM7xZNVkHiC89YbZ0m4mxOX7qGFj3feG6EkvhcCr5QO88ZD4AAsi2hD70c vTsfMNfjZBTdFNJFg0Pc/LJNXvZ744wXM+yRFQq5aJlhTkvrr+rIcEBvJxhe5MkQ RhIkLA8bNYvNSK17rTTkCJD0U4rhgIPACj43i4f7YMPooUboewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOp/Z3pzBi4r7KfVsDebvzddcyUhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTYwMWFiNjktODAxMi0z Y2QyLWIzYzgtZDNlZTMyNDIxNjA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYk0Myos/FyIt+8HAbz1TnBdH3jg6+f+tEcc7VpnfE2AcQYWNk7k/x+ Cwm+6xz/pfwpafm6gbZtFQ5jI7TIFNwgNcsn7OL+1YNxd2nsOyXk0B5kyTQ12N9e IGF12ReunIlCYvgq4UWqUZEB7QYCALaEmcDvPD0QKPPRDY9Aqv8F+tCClHGCpu5+ vIQ/NehHVpUeBtuymMKiP+P62AZA7FRW2+R8MeeAVtZTGDsQXkcIPV6239dCHj4Q 1+zXvYJ2Tscd6Q88kCCPt1AUbIBKDcivX/3v2DL3f+T7wH/HviEknRF1QUWVra+s tDrbSo1skwcelvqgqxuYwIbASP9HpFg= -----END CERTIFICATE-----Generated at Mon Oct 20 18:45:52 2025 by rpki-client