$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cd9cf5-d989-3804-9103-8120efff60e9.roa File: a6cd9cf5-d989-3804-9103-8120efff60e9.roa (raw, json) Hash identifier: hH6gPk79fnqDFgxA42w5ZaW76HT/MBqv68r5vKWmhic= Subject key identifier: EA:F3:78:D8:10:05:84:FF:DF:71:38:C4:F8:EA:A8:E1:01:73:D1:97 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD66FE098E83648EDB300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cd9cf5-d989-3804-9103-8120efff60e9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d6:6f:e0:98:e8:36:48:ed:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a4742bb1-5cfe-4dbd-8fee-951b261bbb37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ad:1e:f3:04:16:7a:dd:c2:b0:ad:e7:5b:fa: 7d:c0:65:ad:d6:df:f4:04:a7:92:14:41:3e:f5:a5: ef:e6:05:41:30:bb:6c:d9:55:23:f9:29:60:e7:6c: 3e:1a:f1:ca:0d:15:a3:16:d2:6d:ff:28:60:29:6a: 58:86:ff:25:13:32:c7:84:c9:30:e1:21:3b:bf:f4: e0:34:f9:73:18:82:fb:87:3e:72:ed:d3:a4:ae:d1: 05:88:96:ba:58:a8:ea:57:f3:a3:a8:19:c0:13:12: 18:8a:85:76:6f:47:bd:0d:b2:7e:6b:c8:d1:b5:de: a8:0c:f1:03:82:24:4f:53:47:e1:da:b5:16:54:17: 01:27:55:fa:80:a4:9c:a5:7f:e9:4b:e1:f8:e1:17: bf:a7:b9:f8:75:f3:43:49:4b:2b:81:6d:c7:2e:f8: 6c:73:7d:89:7a:24:13:35:2a:81:2f:dc:67:31:c4: 0a:a6:41:e2:d0:5b:ab:76:78:4a:ba:88:e2:0c:61: f8:70:66:e8:5f:07:39:32:40:3a:66:d4:f8:e0:15: 8d:5e:0f:b8:37:ba:fc:b5:e6:8c:2c:9a:5e:17:79: a1:e6:5f:17:e1:4f:20:6f:c8:08:4e:ee:a1:60:38: d1:6b:1b:9e:a4:27:c5:dc:c8:74:d4:ec:88:e9:7d: 7d:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F3:78:D8:10:05:84:FF:DF:71:38:C4:F8:EA:A8:E1:01:73:D1:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a6cd9cf5-d989-3804-9103-8120efff60e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:c3:20:21:7e:9b:bf:03:c9:e1:0c:a0:e1:4a:a8:c4:3a:7c: a3:da:ea:40:42:b2:47:ca:e8:d0:70:35:01:0f:54:b2:35:d1: 59:e1:4b:57:d1:5d:ce:cd:a8:c8:b8:10:a4:08:dd:b6:8c:5b: 04:52:1e:dc:c2:16:83:bb:e2:cd:00:e0:39:25:b9:a9:6c:4a: f3:3d:bb:80:4c:4f:ac:84:ce:9c:3b:11:ec:08:e4:17:00:29: 6b:b1:ed:fb:a7:5f:45:1c:74:7d:72:6c:be:cc:e8:b8:78:5c: d7:f5:a3:63:37:9b:95:7e:5b:01:89:ff:bb:e5:cd:71:6d:04: 97:56:ad:b2:30:7c:19:9f:eb:08:19:21:3a:59:3c:6d:0f:ee: 43:91:2c:39:f9:1a:dc:2a:a2:37:a6:35:91:1b:73:d5:90:9b: fa:97:12:a9:23:6d:dc:6c:9f:a4:99:c4:f3:56:36:63:9f:38: ce:c2:21:e5:d3:e3:d9:00:af:04:9f:f7:34:ee:cd:c4:67:00: 4b:2e:6b:c2:34:99:fa:ab:98:da:69:6b:91:30:e4:83:73:a9: 6c:73:12:5c:a8:8e:ce:49:9c:08:49:55:c7:c8:7f:9c:ce:9d: 1c:d0:1b:a9:da:4a:f3:da:c8:20:11:af:f6:a3:f8:fe:27:3e: 7b:9e:32:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdZv4JjoNkjtswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTQ3NDJiYjEtNWNmZS00ZGJkLThmZWUtOTUxYjI2MWJiYjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlq0e8wQWet3CsK3nW/p9wGWt1t/0BKeSFEE+ 9aXv5gVBMLts2VUj+Slg52w+GvHKDRWjFtJt/yhgKWpYhv8lEzLHhMkw4SE7v/Tg NPlzGIL7hz5y7dOkrtEFiJa6WKjqV/OjqBnAExIYioV2b0e9DbJ+a8jRtd6oDPED giRPU0fh2rUWVBcBJ1X6gKScpX/pS+H44Re/p7n4dfNDSUsrgW3HLvhsc32JeiQT NSqBL9xnMcQKpkHi0FurdnhKuojiDGH4cGboXwc5MkA6ZtT44BWNXg+4N7r8teaM LJpeF3mh5l8X4U8gb8gITu6hYDjRaxuepCfF3Mh01OyI6X19HQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOrzeNgQBYT/33E4xPjqqOEBc9GXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTZjZDljZjUtZDk4OS0z ODA0LTkxMDMtODEyMGVmZmY2MGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/DICF+m78DyeEMoOFKqMQ6fKPa6kBCskfK6NBwNQEPVLI10VnhS1fR Xc7NqMi4EKQI3baMWwRSHtzCFoO74s0A4DklualsSvM9u4BMT6yEzpw7EewI5BcA KWux7funX0UcdH1ybL7M6Lh4XNf1o2M3m5V+WwGJ/7vlzXFtBJdWrbIwfBmf6wgZ ITpZPG0P7kORLDn5GtwqojemNZEbc9WQm/qXEqkjbdxsn6SZxPNWNmOfOM7CIeXT 49kArwSf9zTuzcRnAEsua8I0mfqrmNppa5Ew5INzqWxzElyojs5JnAhJVcfIf5zO nRzQG6naSvPayCARr/aj+P4nPnueMsw= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:35 2025 by rpki-client