$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa File: c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa (raw, json) Hash identifier: iqW1e5zd7hfy7rqDueYiH9Qx/0FqBwTlv3BeTAR6u44= Subject key identifier: C9:A6:65:AF:C7:E2:87:99:2D:7A:08:A0:CC:5E:EB:56:F9:E8:61:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CE05939058266D8E5DB1C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:ce:05:93:90:58:26:6d:8e:5d:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=5107cdb0-1959-4b7e-88cb-010823c7a6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:24:2b:73:a5:99:51:bc:0c:d8:a1:54:e8:ef: 13:5a:85:42:9b:e6:cf:1c:11:b1:07:83:2e:9c:42: 31:bf:bd:ac:72:97:c0:3e:46:24:96:b3:33:00:25: 1a:aa:24:b8:d6:f9:e8:29:83:d0:e1:8b:98:95:f1: ed:2f:d0:9c:27:82:78:b4:a3:ae:be:ac:af:10:7b: 80:94:84:91:27:70:e7:9d:ed:94:07:66:8c:44:87: f0:fb:ea:21:d9:c8:f8:7e:2c:3d:17:e7:ea:cc:a1: e2:7e:1c:a9:d3:3b:27:86:62:84:67:cd:0b:88:52: 82:46:d2:5f:8b:75:5b:d0:48:f7:57:9a:06:00:14: 28:31:0b:8c:f7:1a:eb:3f:c8:0c:d1:1c:c7:f4:ee: 0e:b7:4a:3a:84:90:7f:c2:2e:c7:1b:15:3d:d1:32: f3:98:16:7b:83:4e:29:4a:94:b1:5c:7d:d0:35:f2: e4:4c:9e:f5:87:6c:f8:81:ce:30:b5:b7:fb:7f:d6: 0a:6a:14:87:b7:47:86:83:97:19:37:f1:3e:06:96: 81:a5:6d:c1:ff:3c:2c:d8:9c:09:02:b1:60:89:7f: 1a:b3:37:4f:b8:f5:4b:85:97:e6:ba:19:fa:aa:62: 3d:5d:f3:74:bb:52:de:2e:ef:fd:eb:56:f3:7a:f7: 1c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A6:65:AF:C7:E2:87:99:2D:7A:08:A0:CC:5E:EB:56:F9:E8:61:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c25c0ef8-71a4-30c6-af4a-7607f4389d99.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:47:f1:6e:2a:10:ad:01:6e:f6:22:38:e2:32:e1:97:16:2e: 1c:08:8e:88:11:76:40:b4:f5:5c:f1:42:bf:00:43:e7:2d:78: 1f:90:5b:e0:87:1c:fa:c1:30:1a:37:65:79:4b:12:99:f7:ba: 01:de:f4:63:22:41:c7:71:2b:2a:63:b6:ea:c9:25:1f:7c:a3: 83:2e:5b:25:72:3d:dc:c8:87:ab:5f:10:60:f6:85:55:80:71: 6c:e5:7b:4d:c8:c5:a0:19:74:18:75:ea:f1:84:bb:40:7b:22: f4:0a:d9:1e:3f:5b:52:f5:12:55:85:e0:3b:81:74:7e:1b:45: a7:eb:50:58:6f:9e:49:7c:37:a6:60:d0:9e:33:2a:48:9b:fd: 5a:6e:8c:f8:7b:82:71:d2:f2:1f:57:68:f1:05:5c:bb:12:67: 3b:54:9a:a4:3d:8d:01:88:17:10:a7:ac:cd:82:67:f7:d2:b1: be:f3:38:63:5b:65:3d:5d:58:36:73:3e:dd:6a:5d:0b:c5:80: d6:91:5b:64:77:7c:9f:49:88:5c:5f:2e:d7:df:70:0c:ab:4c: 1a:1e:d8:e6:e7:05:d9:b3:5d:51:0b:e7:47:12:33:36:96:ad: 6c:04:ab:ef:a8:b3:5d:54:f7:59:b2:8e:32:b0:15:e3:ef:3e: df:d3:21:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzgWTkFgmbY5dscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NTEwN2NkYjAtMTk1OS00YjdlLTg4Y2ItMDEwODIzYzdhNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyQrc6WZUbwM2KFU6O8TWoVCm+bPHBGxB4Mu nEIxv72scpfAPkYklrMzACUaqiS41vnoKYPQ4YuYlfHtL9CcJ4J4tKOuvqyvEHuA lISRJ3Dnne2UB2aMRIfw++oh2cj4fiw9F+fqzKHifhyp0zsnhmKEZ80LiFKCRtJf i3Vb0Ej3V5oGABQoMQuM9xrrP8gM0RzH9O4Ot0o6hJB/wi7HGxU90TLzmBZ7g04p SpSxXH3QNfLkTJ71h2z4gc4wtbf7f9YKahSHt0eGg5cZN/E+BpaBpW3B/zws2JwJ ArFgiX8aszdPuPVLhZfmuhn6qmI9XfN0u1LeLu/961bzevcc1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMmmZa/H4oeZLXoIoMxe61b56GHeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzI1YzBlZjgtNzFhNC0z MGM2LWFmNGEtNzYwN2Y0Mzg5ZDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACpH8W4qEK0BbvYiOOIy4ZcWLhwIjogRdkC09VzxQr8AQ+cteB+QW+CH HPrBMBo3ZXlLEpn3ugHe9GMiQcdxKypjturJJR98o4MuWyVyPdzIh6tfEGD2hVWA cWzle03IxaAZdBh16vGEu0B7IvQK2R4/W1L1ElWF4DuBdH4bRafrUFhvnkl8N6Zg 0J4zKkib/VpujPh7gnHS8h9XaPEFXLsSZztUmqQ9jQGIFxCnrM2CZ/fSsb7zOGNb ZT1dWDZzPt1qXQvFgNaRW2R3fJ9JiFxfLtffcAyrTBoe2ObnBdmzXVEL50cSMzaW rWwEq++os11U91myjjKwFePvPt/TIVs= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:36 2025 by rpki-client