$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa File: ad760d84-9ad6-391c-8399-873dafb9d352.roa (raw, json) Hash identifier: lJSMG8oL4AX2aJN3CGlYuN9ahztBXAclVCyC94LdM8o= Subject key identifier: BA:7F:7E:D5:FA:15:D6:D4:E6:38:98:38:4E:A2:0C:1B:FB:31:E8:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD19FD3346C116F011CFC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:19:fd:33:46:c1:16:f0:11:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=a45e61d7-2fe0-4016-ad1d-a2dedc413054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:73:cf:b9:f9:c1:43:9c:56:a7:ca:cb:d1:87: fb:37:47:48:0f:49:4b:33:51:80:37:59:9c:06:04: b1:b0:66:52:aa:9a:99:61:f0:79:25:17:72:06:25: 6c:18:b7:23:ec:1d:99:17:18:3c:dc:2d:c3:5a:32: bd:86:bb:7d:b4:03:7c:d1:ca:78:30:75:9d:ba:bc: a8:26:43:c6:44:f2:0c:e8:7b:35:cb:bc:46:e0:90: d5:fd:e4:47:1a:59:d4:f6:90:01:e0:c2:ce:14:c0: 78:e8:04:c7:35:84:ad:7d:44:a2:ff:05:a4:73:2b: b8:33:c7:cc:4d:32:44:14:2e:53:1e:2a:1a:bc:29: 8e:f9:93:fa:60:03:4a:09:43:d9:76:20:b4:2e:96: c1:83:6b:06:2c:bc:55:49:b4:6a:94:73:50:84:b4: 6f:51:98:1b:d1:d0:9c:97:4c:e5:e3:32:3b:fb:e8: 89:e4:61:46:40:d0:50:c0:90:26:c4:25:ec:6d:c6: c1:5c:75:e6:c3:ea:e4:d5:50:66:b0:a9:ca:0c:82: 13:58:15:d8:94:d5:1b:08:77:53:ee:70:14:a3:f3: 67:11:c5:3d:e1:2c:e7:ee:8b:e6:e7:d4:ce:2b:34: 38:17:d8:aa:45:35:fe:a1:5a:10:7d:e5:18:76:e7: 09:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7F:7E:D5:FA:15:D6:D4:E6:38:98:38:4E:A2:0C:1B:FB:31:E8:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad760d84-9ad6-391c-8399-873dafb9d352.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b8:5e:6e:b7:a9:9a:a7:b5:02:46:11:b2:25:05:21:4c:a3:14: d1:a9:5f:c2:80:d4:c4:fe:37:d3:66:3d:5e:0f:3e:d2:90:86: 9f:b1:2d:28:48:6c:35:6f:ee:73:ab:19:0a:be:95:4a:11:9b: 2c:a4:c4:af:c8:31:9b:c8:45:c9:8f:c0:6c:49:d6:ec:66:4e: 50:c5:34:af:ad:72:c0:6a:cf:ff:32:42:93:d2:11:28:d1:8f: 31:3b:9f:79:c8:a2:ac:65:26:d2:49:f0:e3:27:f4:f3:95:67: d9:2e:a4:27:12:90:da:96:bd:32:31:76:46:a4:63:f5:bb:83: 08:a4:71:d6:d3:af:59:1e:85:2d:50:94:58:1e:ae:7b:b6:df: 6b:7e:62:0f:82:d2:94:89:87:f4:bf:aa:22:93:73:1e:a7:ac: 32:7f:d8:76:ef:e1:6f:ef:2e:9e:f3:26:59:d0:32:45:3a:f9: 92:aa:85:b9:f8:58:09:f1:9e:4b:ff:f3:14:83:b6:cc:ae:78: 6f:49:c8:a7:70:60:9d:84:7c:47:dc:53:a2:57:ce:2f:df:57: b1:b6:c5:5b:d8:9d:31:e0:f6:b2:05:29:0d:ed:d8:39:de:33: 7d:fc:de:12:da:b4:4f:86:45:f0:1e:a8:ca:14:77:22:e7:c1: a2:b1:e5:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRn9M0bBFvARz8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YTQ1ZTYxZDctMmZlMC00MDE2LWFkMWQtYTJkZWRjNDEzMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nPPufnBQ5xWp8rL0Yf7N0dID0lLM1GAN1mc BgSxsGZSqpqZYfB5JRdyBiVsGLcj7B2ZFxg83C3DWjK9hrt9tAN80cp4MHWduryo JkPGRPIM6Hs1y7xG4JDV/eRHGlnU9pAB4MLOFMB46ATHNYStfUSi/wWkcyu4M8fM TTJEFC5THioavCmO+ZP6YANKCUPZdiC0LpbBg2sGLLxVSbRqlHNQhLRvUZgb0dCc l0zl4zI7++iJ5GFGQNBQwJAmxCXsbcbBXHXmw+rk1VBmsKnKDIITWBXYlNUbCHdT 7nAUo/NnEcU94Szn7ovm59TOKzQ4F9iqRTX+oVoQfeUYducJQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLp/ftX6FdbU5jiYOE6iDBv7MehdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWQ3NjBkODQtOWFkNi0z OTFjLTgzOTktODczZGFmYjlkMzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALhebrepmqe1AkYRsiUFIUyjFNGpX8KA1MT+N9NmPV4PPtKQhp+xLShI bDVv7nOrGQq+lUoRmyykxK/IMZvIRcmPwGxJ1uxmTlDFNK+tcsBqz/8yQpPSESjR jzE7n3nIoqxlJtJJ8OMn9POVZ9kupCcSkNqWvTIxdkakY/W7gwikcdbTr1kehS1Q lFgernu232t+Yg+C0pSJh/S/qiKTcx6nrDJ/2Hbv4W/vLp7zJlnQMkU6+ZKqhbn4 WAnxnkv/8xSDtsyueG9JyKdwYJ2EfEfcU6JXzi/fV7G2xVvYnTHg9rIFKQ3t2Dne M3383hLatE+GRfAeqMoUdyLnwaKx5WY= -----END CERTIFICATE-----Generated at Mon Oct 20 05:06:05 2025 by rpki-client