$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8d02737-acc0-300f-be42-c044903b0e25.roa File: b8d02737-acc0-300f-be42-c044903b0e25.roa (raw, json) Hash identifier: Oi6YGqDQFYDhIUMCpkR8j3oslyyDvEBK5xTUSwcMUPU= Subject key identifier: 55:19:5D:87:E2:01:DE:95:4F:B9:C5:99:75:C4:92:F4:26:94:91:83 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1701EE220419DF141C40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8d02737-acc0-300f-be42-c044903b0e25.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.55.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:17:01:ee:22:04:19:df:14:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2ad22479-443d-42e9-9777-1a4ad2573ec5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:35:68:ee:14:38:91:27:6a:7b:9c:0d:ae:fd: 84:d6:eb:2e:3d:f5:f7:40:8b:db:98:f6:0b:64:46: 31:aa:e4:36:5d:8d:73:d1:93:ea:80:1b:6b:2c:be: 62:b6:a5:99:83:ca:e7:fe:cd:2f:f2:3e:1b:60:ad: 2e:90:8c:5c:0e:60:d5:fb:34:83:2b:a5:84:15:ed: d9:ab:58:3f:e3:e5:ff:83:d2:6d:0e:40:46:ce:6c: 34:44:f0:5c:ab:58:1e:7f:e0:ef:fe:9d:80:fc:f1: 70:a2:4d:9e:17:56:ea:f7:20:ad:c0:7d:13:11:2e: 68:99:77:59:93:66:72:d9:71:92:a2:6f:0f:c2:09: e9:9a:6d:03:0c:8c:3c:1c:ec:56:78:ab:6c:48:de: f4:04:a1:c0:c7:02:3b:2d:6c:1a:1f:90:a4:dc:ae: a7:8a:7d:ca:fa:05:bc:2a:78:5d:a5:fa:87:d5:72: af:e6:e2:71:6e:17:9a:05:ac:21:88:c6:df:56:1e: a8:65:57:89:0b:4a:c0:16:ff:41:88:0b:cf:95:4b: 89:98:43:7c:ba:d5:19:87:52:a0:15:91:72:37:b7: 67:11:47:a7:bc:e9:51:ed:3b:70:08:c6:4e:f2:2c: ec:e1:9b:2c:e2:e1:f1:47:40:56:aa:5f:cb:6b:24: 58:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:19:5D:87:E2:01:DE:95:4F:B9:C5:99:75:C4:92:F4:26:94:91:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8d02737-acc0-300f-be42-c044903b0e25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.55.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:79:4b:4c:ef:22:19:5d:d7:a2:2c:1f:ca:7e:29:24:26:6e: fd:26:1f:0e:60:59:ba:11:34:0e:31:f0:2d:35:a0:23:23:1e: fd:ca:19:bf:f4:11:1a:af:5b:d6:74:af:c5:5d:0c:de:ca:e9: c1:f7:c5:e1:76:9b:40:65:67:87:08:78:60:a2:e6:5b:1e:11: 47:6d:7c:17:f6:9a:2c:d0:27:aa:08:9c:b2:a1:b3:38:87:60: 9c:b0:90:90:f6:5f:c4:0a:c4:d3:d4:d3:80:be:38:1c:e5:f6: 43:1e:7c:f8:5e:21:67:3b:cf:3d:81:6f:a0:4a:be:f1:87:13: 8a:8d:3a:a8:aa:e3:0f:84:4a:de:f3:ae:fa:9d:af:1b:a2:c3: 87:cc:d0:e1:4b:f9:cf:55:eb:cb:07:56:6a:d9:f7:62:b0:73: 24:e0:89:d8:39:38:7c:ab:52:ce:f2:68:18:a9:3e:d7:88:a7: 03:6e:9b:83:9a:8f:a1:2a:31:75:60:67:d8:b2:19:0f:0c:4f: ec:ef:9b:00:93:58:1a:43:f6:41:4a:5e:68:96:65:a4:9a:9a: 9f:e4:5f:d6:e6:a1:13:07:a2:d5:42:59:f7:24:34:4e:8b:32: 41:af:89:91:6f:8b:a0:f0:c2:17:e2:67:4a:5a:5d:ad:bc:96: 26:bb:ef:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRcB7iIEGd8UHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmFkMjI0NzktNDQzZC00MmU5LTk3NzctMWE0YWQyNTczZWM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArzVo7hQ4kSdqe5wNrv2E1usuPfX3QIvbmPYL ZEYxquQ2XY1z0ZPqgBtrLL5itqWZg8rn/s0v8j4bYK0ukIxcDmDV+zSDK6WEFe3Z q1g/4+X/g9JtDkBGzmw0RPBcq1gef+Dv/p2A/PFwok2eF1bq9yCtwH0TES5omXdZ k2Zy2XGSom8Pwgnpmm0DDIw8HOxWeKtsSN70BKHAxwI7LWwaH5Ck3K6nin3K+gW8 KnhdpfqH1XKv5uJxbheaBawhiMbfVh6oZVeJC0rAFv9BiAvPlUuJmEN8utUZh1Kg FZFyN7dnEUenvOlR7TtwCMZO8izs4Zss4uHxR0BWql/LayRYcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFUZXYfiAd6VT7nFmXXEkvQmlJGDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhkMDI3MzctYWNjMC0z MDBmLWJlNDItYzA0NDkwM2IwZTI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIh5S0zvIhld16IsH8p+KSQmbv0mHw5gWboRNA4x8C01oCMjHv3KGb/0 ERqvW9Z0r8VdDN7K6cH3xeF2m0BlZ4cIeGCi5lseEUdtfBf2mizQJ6oInLKhsziH YJywkJD2X8QKxNPU04C+OBzl9kMefPheIWc7zz2Bb6BKvvGHE4qNOqiq4w+ESt7z rvqdrxuiw4fM0OFL+c9V68sHVmrZ92KwcyTgidg5OHyrUs7yaBipPteIpwNum4Oa j6EqMXVgZ9iyGQ8MT+zvmwCTWBpD9kFKXmiWZaSamp/kX9bmoRMHotVCWfckNE6L MkGviZFvi6DwwhfiZ0paXa28lia77wk= -----END CERTIFICATE-----Generated at Mon Oct 20 10:35:25 2025 by rpki-client