$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa File: bf2c5255-de70-319f-8068-1b8a4e39486f.roa (raw, json) Hash identifier: Lkcisq/SSx0C6gWweiPmG0uM6tSS/l8Mpz9ga8mtMeo= Subject key identifier: 01:96:6C:93:23:AC:51:D5:3D:50:CD:4D:E4:78:C8:86:18:59:51:C5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE0D7385BB38F6907DE80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e0:d7:38:5b:b3:8f:69:07:de:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=de1125b7-6b87-4532-839d-36cd9aa7155e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:5d:21:8a:de:58:32:2d:67:22:40:fb:eb:ca: e9:dd:ee:5a:cf:2c:57:17:a4:8e:49:b8:a6:40:ac: 9d:7c:ce:e4:88:70:53:f2:94:74:61:55:32:ef:79: 94:34:f2:cc:13:5d:69:96:b2:71:6d:22:3b:46:c9: 9d:62:85:16:19:4c:ce:60:1e:bc:32:e5:a2:23:1f: 89:e7:a9:28:29:9c:c5:e2:a4:7a:32:b9:f5:4d:7b: 51:d4:ce:91:6d:70:a3:44:94:97:8d:f9:ed:f9:55: 11:4f:42:86:35:5d:1a:d7:d7:79:a7:c9:78:b1:26: e0:cf:4c:f9:44:96:87:88:eb:11:ab:77:28:de:dd: ed:25:2e:5f:a3:e4:83:10:49:d5:9c:bd:78:42:8a: ea:c3:5c:43:f5:3c:93:c9:1d:c0:22:df:d0:73:1b: a0:a8:6f:df:bb:38:11:1e:66:55:9f:e1:56:d6:63: ad:56:38:db:97:0a:9e:b8:0d:61:5e:f3:5c:f1:3a: 69:b3:83:10:97:39:c2:56:1d:bc:c5:63:96:89:9d: 7f:88:f3:12:25:7f:fb:a2:2a:48:d4:30:c2:fd:09: d5:e9:a6:77:73:2a:c8:2d:3d:e5:76:4a:e0:07:a2: 67:25:73:41:72:a3:04:dc:1f:d1:c3:fd:c6:c8:f3: d5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:96:6C:93:23:AC:51:D5:3D:50:CD:4D:E4:78:C8:86:18:59:51:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf2c5255-de70-319f-8068-1b8a4e39486f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:bb:f3:91:df:c7:74:64:07:a6:df:8d:86:05:78:a4:bc:ec: 2a:12:74:45:00:ee:fc:ff:65:cf:1d:59:32:e6:47:57:57:47: 9a:0d:cc:e6:a7:f6:42:99:f9:2b:1d:d5:b7:52:b6:3f:6a:83: a5:c2:b3:fb:28:db:e6:c3:8e:dc:d8:b4:cb:a1:00:8a:f7:fc: 87:2e:4a:aa:98:c6:4f:a4:f6:4b:d3:6b:8e:d8:51:2e:54:d0: f4:05:97:8a:88:7b:75:e5:c4:84:8d:b5:2a:c7:91:12:9e:7d: f1:5f:72:ba:99:eb:a6:82:b7:0a:b8:c3:81:f3:0c:c7:d6:fd: 9f:02:d2:83:af:7a:a9:45:ae:73:38:55:70:75:1c:b1:89:5f: d2:84:83:51:e2:09:e7:7b:62:67:89:1d:d6:11:b1:ac:e6:9d: 07:77:9b:a9:5c:f8:63:91:3d:2f:10:d1:5a:55:34:5a:81:a9: c6:80:08:fa:da:57:5f:91:95:17:89:15:a7:a8:b8:ac:04:62: 3d:c1:a3:25:a8:b2:b3:25:c2:a5:3a:40:f5:c7:7a:47:28:2d: 79:d6:7f:ed:b2:8b:9f:9d:e6:26:c5:f0:6c:23:50:91:58:88: 09:b3:14:36:58:b9:f0:f3:dd:6a:c3:93:96:bd:68:9b:36:68: f1:20:e5:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeDXOFuzj2kH3oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGUxMTI1YjctNmI4Ny00NTMyLTgzOWQtMzZjZDlhYTcxNTVlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo10hit5YMi1nIkD768rp3e5azyxXF6SOSbim QKydfM7kiHBT8pR0YVUy73mUNPLME11plrJxbSI7RsmdYoUWGUzOYB68MuWiIx+J 56koKZzF4qR6Mrn1TXtR1M6RbXCjRJSXjfnt+VURT0KGNV0a19d5p8l4sSbgz0z5 RJaHiOsRq3co3t3tJS5fo+SDEEnVnL14Qorqw1xD9TyTyR3AIt/QcxugqG/fuzgR HmZVn+FW1mOtVjjblwqeuA1hXvNc8Tpps4MQlznCVh28xWOWiZ1/iPMSJX/7oipI 1DDC/QnV6aZ3cyrILT3ldkrgB6JnJXNBcqME3B/Rw/3GyPPVXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGWbJMjrFHVPVDNTeR4yIYYWVHFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmYyYzUyNTUtZGU3MC0z MTlmLTgwNjgtMWI4YTRlMzk0ODZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEy785Hfx3RkB6bfjYYFeKS87CoSdEUA7vz/Zc8dWTLmR1dXR5oNzOan 9kKZ+Ssd1bdStj9qg6XCs/so2+bDjtzYtMuhAIr3/IcuSqqYxk+k9kvTa47YUS5U 0PQFl4qIe3XlxISNtSrHkRKeffFfcrqZ66aCtwq4w4HzDMfW/Z8C0oOveqlFrnM4 VXB1HLGJX9KEg1HiCed7YmeJHdYRsazmnQd3m6lc+GORPS8Q0VpVNFqBqcaACPra V1+RlReJFaeouKwEYj3BoyWosrMlwqU6QPXHekcoLXnWf+2yi5+d5ibF8GwjUJFY iAmzFDZYufDz3WrDk5a9aJs2aPEg5e4= -----END CERTIFICATE-----Generated at Mon Oct 20 10:56:59 2025 by rpki-client