$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa File: c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa (raw, json) Hash identifier: I69wTjRwutBgHeSK2MMWPvqubrnFv/mH95AazcBcv1g= Subject key identifier: 4C:42:D4:36:A4:63:1B:09:B2:34:C6:8B:2E:2F:72:6E:93:4C:66:95 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1CC8D04C341EEE448000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.231.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1c:c8:d0:4c:34:1e:ee:44:80:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7098fcc0-580d-40da-8fe5-0741f26b33fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:db:7f:4c:ee:dc:e7:91:04:e3:88:c9:4c:c9: 25:21:53:46:84:c8:a0:a7:e0:0a:19:51:70:06:31: e4:bc:76:e9:da:9b:8f:69:1d:18:f0:db:70:6c:32: 8a:55:da:9b:6d:2d:21:5f:cc:56:a0:38:bc:88:2f: 99:58:38:e3:5f:54:19:4b:cb:16:a7:23:6f:6e:47: 01:5f:a7:30:03:93:7b:a2:c8:3a:9a:62:50:28:dd: 1b:41:88:de:97:d8:07:b6:23:76:01:f8:f9:61:84: 94:d4:3d:27:a4:d2:00:3a:0e:b5:2d:99:60:b9:3c: ac:27:a4:55:98:09:6e:f8:30:6b:bc:d9:22:e7:ae: a2:df:1e:e5:8e:31:87:22:07:ef:2e:37:a0:d2:69: 03:c1:42:62:f7:14:46:73:d2:61:05:dc:15:b8:3d: 4d:dd:5f:47:4e:fd:6c:c4:25:22:2d:5e:bf:19:e9: e8:96:2a:2d:67:cf:99:21:2e:b5:17:4d:3e:82:78: 5c:4b:eb:eb:92:62:53:31:a1:a6:24:2d:d1:ac:c4: 20:b9:f1:f5:92:fb:c7:bd:35:c4:cf:b0:eb:59:df: 83:40:23:b9:b3:7b:df:3f:44:64:ce:92:ff:12:76: dc:03:58:85:52:5c:05:e5:41:a9:86:8e:c1:1b:80: 81:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:42:D4:36:A4:63:1B:09:B2:34:C6:8B:2E:2F:72:6E:93:4C:66:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c3845c6f-52d4-34e5-a6a6-7dd888a4d232.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.231.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:a9:a4:99:0a:b3:9c:37:f1:ec:f6:25:a7:e7:93:68:b8:83: 66:da:ff:1d:db:03:a3:b4:31:74:1f:ce:00:9b:68:af:7b:bd: 70:ea:ac:33:6b:34:9f:6a:cb:a7:76:1f:fd:7b:8f:1c:09:67: 23:d7:9d:9d:65:53:97:13:2d:eb:76:18:50:b6:6d:9b:62:5f: f4:29:53:c0:82:6d:cb:7b:4f:35:c2:96:60:09:9b:99:93:26: 30:67:ec:c3:c6:06:af:d4:6e:2d:a2:3b:7f:e1:01:ee:cd:8a: b5:6b:b5:ac:af:2f:98:fe:10:08:fa:94:cc:c3:95:fa:d9:c2: 92:4a:de:de:9c:d6:c3:bb:87:e2:df:7d:80:62:a4:27:32:63: 12:30:93:d1:33:89:7f:c3:21:96:f5:b3:c9:6f:f4:4d:52:6a: 2f:79:8e:23:4d:d6:cc:65:6e:01:09:f1:30:f4:cd:50:69:25: 4e:ba:d8:c7:8b:b3:ce:fc:68:31:43:fa:fa:9a:61:64:a8:52: b2:13:da:1e:b1:4d:64:c2:9a:65:9a:c5:af:09:48:53:9e:3e: 0e:9a:ca:6a:0c:98:5e:f8:a5:4c:24:9c:5e:22:e7:48:18:67: 67:5c:8d:4d:ea:db:e8:87:c1:f7:f8:c0:8c:f5:b9:4b:61:07: c6:b4:b4:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRzI0Ew0Hu5EgAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzA5OGZjYzAtNTgwZC00MGRhLThmZTUtMDc0MWYyNmIzM2ZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArNt/TO7c55EE44jJTMklIVNGhMigp+AKGVFw BjHkvHbp2puPaR0Y8NtwbDKKVdqbbS0hX8xWoDi8iC+ZWDjjX1QZS8sWpyNvbkcB X6cwA5N7osg6mmJQKN0bQYjel9gHtiN2Afj5YYSU1D0npNIAOg61LZlguTysJ6RV mAlu+DBrvNki566i3x7ljjGHIgfvLjeg0mkDwUJi9xRGc9JhBdwVuD1N3V9HTv1s xCUiLV6/GenoliotZ8+ZIS61F00+gnhcS+vrkmJTMaGmJC3RrMQgufH1kvvHvTXE z7DrWd+DQCO5s3vfP0RkzpL/EnbcA1iFUlwF5UGpho7BG4CBBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFExC1DakYxsJsjTGiy4vcm6TTGaVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzM4NDVjNmYtNTJkNC0z NGU1LWE2YTYtN2RkODg4YTRkMjMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACOppJkKs5w38ez2Jafnk2i4g2ba/x3bA6O0MXQfzgCbaK97vXDqrDNr NJ9qy6d2H/17jxwJZyPXnZ1lU5cTLet2GFC2bZtiX/QpU8CCbct7TzXClmAJm5mT JjBn7MPGBq/Ubi2iO3/hAe7NirVrtayvL5j+EAj6lMzDlfrZwpJK3t6c1sO7h+Lf fYBipCcyYxIwk9EziX/DIZb1s8lv9E1Sai95jiNN1sxlbgEJ8TD0zVBpJU662MeL s878aDFD+vqaYWSoUrIT2h6xTWTCmmWaxa8JSFOePg6aymoMmF74pUwknF4i50gY Z2dcjU3q2+iHwff4wIz1uUthB8a0tIs= -----END CERTIFICATE-----Generated at Sun Oct 19 23:41:49 2025 by rpki-client