$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa File: aa39a6ce-2914-30d6-8ada-a97f77613312.roa (raw, json) Hash identifier: 0Ez2Rsb9XrS6kuvTctcL3fzY3Z56orVhNfpjW67Oib0= Subject key identifier: A5:D7:64:70:BF:54:55:6B:E5:01:B9:4B:67:AE:24:CC:87:65:E9:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD159CB4872BF28161CE00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:15:9c:b4:87:2b:f2:81:61:ce:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=b8340ebc-5050-4a49-a3e0-1ea818984fac Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:22:3b:86:ae:06:c6:6d:8a:6d:a5:ac:59:8b: f8:32:10:49:c0:c1:f2:5b:f4:b0:3a:86:db:13:fe: d5:57:cc:be:75:f8:43:8b:99:40:65:8a:58:f1:1d: 16:b3:ea:ac:6d:fa:0e:62:a1:da:29:d8:aa:7e:51: 5e:3f:1e:37:bc:45:85:e0:73:b0:bb:e0:ee:69:fa: 76:80:d5:8d:d7:af:32:d5:d4:83:83:29:08:13:93: 89:e9:50:62:0f:18:fb:bd:4f:51:7a:ec:81:74:5b: fc:a7:0d:a7:91:22:6f:b2:6c:6d:37:fd:e6:37:b5: 3c:31:5d:16:c1:f2:9c:d3:ea:e6:e8:48:1e:0f:a5: b0:84:5f:c0:61:fb:2f:8d:f4:cc:f4:75:de:38:b9: 0a:9e:07:b2:65:74:13:34:05:04:53:f7:25:31:fe: 0e:95:fb:af:01:26:f7:00:dd:4f:dd:e8:a0:d1:0a: 9c:34:f0:9d:38:cf:fc:58:5b:5d:8e:1a:eb:ba:f4: 2d:6f:91:a2:18:16:b2:91:3d:b7:04:43:80:fb:8a: be:c1:77:92:81:5a:67:fc:3b:1c:a5:31:3d:05:dd: 7c:8c:4e:ed:98:f2:fc:f6:e1:13:eb:84:7c:5f:61: 00:64:5f:8e:67:60:03:bb:bb:87:9c:bd:0d:55:3a: db:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:D7:64:70:BF:54:55:6B:E5:01:B9:4B:67:AE:24:CC:87:65:E9:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aa39a6ce-2914-30d6-8ada-a97f77613312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:39:ad:05:1e:3a:e1:71:8f:0c:e3:c1:7e:54:39:9e:79:d8: cf:f1:92:2d:f8:9a:0c:a9:5f:c0:b8:dd:4a:d5:e3:77:ea:ec: b1:7f:cb:eb:59:3b:a6:84:43:88:06:08:72:34:40:44:51:7b: d5:12:6c:c6:d1:74:2c:c7:c4:39:fb:34:9d:e4:3d:dd:b5:7a: 31:83:e8:5e:78:a4:37:f6:85:b8:5b:64:da:e2:67:02:e1:93: 74:17:4d:1c:43:c5:fb:05:22:5f:84:f8:c0:98:ea:c9:03:41: dc:79:d5:74:c9:f9:46:fb:d8:2e:76:fc:38:cd:84:6e:3a:dd: 30:ca:b2:57:fa:7c:2f:db:8f:6b:e1:30:32:d5:e0:0f:3e:90: 58:fb:f8:1b:54:84:18:a7:3d:7d:99:3c:4c:08:2d:92:fb:70: ea:2d:da:70:17:6f:e1:60:07:00:b5:7f:a4:05:6e:bb:4d:49: 27:f4:d0:c5:d6:3f:94:6d:ca:7a:d1:d9:34:02:5b:d1:f5:e5: 0e:4c:4a:c2:1d:85:8b:28:79:fe:5b:b8:3d:ef:c5:2c:eb:00: e6:52:ce:84:0e:55:9c:29:56:61:31:6f:c7:8e:88:4b:f9:38: 47:2c:14:19:04:95:f4:41:97:b8:51:fa:18:36:5e:81:0d:4d: 68:9a:ff:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRWctIcr8oFhzgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YjgzNDBlYmMtNTA1MC00YTQ5LWEzZTAtMWVhODE4OTg0ZmFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSI7hq4Gxm2KbaWsWYv4MhBJwMHyW/SwOobb E/7VV8y+dfhDi5lAZYpY8R0Ws+qsbfoOYqHaKdiqflFePx43vEWF4HOwu+Duafp2 gNWN168y1dSDgykIE5OJ6VBiDxj7vU9ReuyBdFv8pw2nkSJvsmxtN/3mN7U8MV0W wfKc0+rm6EgeD6WwhF/AYfsvjfTM9HXeOLkKngeyZXQTNAUEU/clMf4OlfuvASb3 AN1P3eig0QqcNPCdOM/8WFtdjhrruvQtb5GiGBaykT23BEOA+4q+wXeSgVpn/Dsc pTE9Bd18jE7tmPL89uET64R8X2EAZF+OZ2ADu7uHnL0NVTrbWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKXXZHC/VFVr5QG5S2euJMyHZem2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWEzOWE2Y2UtMjkxNC0z MGQ2LThhZGEtYTk3Zjc3NjEzMzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJw5rQUeOuFxjwzjwX5UOZ552M/xki34mgypX8C43UrV43fq7LF/y+tZ O6aEQ4gGCHI0QERRe9USbMbRdCzHxDn7NJ3kPd21ejGD6F54pDf2hbhbZNriZwLh k3QXTRxDxfsFIl+E+MCY6skDQdx51XTJ+Ub72C52/DjNhG463TDKslf6fC/bj2vh MDLV4A8+kFj7+BtUhBinPX2ZPEwILZL7cOot2nAXb+FgBwC1f6QFbrtNSSf00MXW P5RtynrR2TQCW9H15Q5MSsIdhYsoef5buD3vxSzrAOZSzoQOVZwpVmExb8eOiEv5 OEcsFBkElfRBl7hR+hg2XoENTWia/5A= -----END CERTIFICATE-----Generated at Sun Oct 19 23:52:13 2025 by rpki-client