$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa File: cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa (raw, json) Hash identifier: Njd0t3SdT1nyh3XHqVnnLl5zOpJi1ku0N6li2bSHE2s= Subject key identifier: 3D:AF:74:CF:E9:B3:7D:A7:40:3A:67:50:D8:DF:DD:68:1F:48:03:51 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1C3F172691B3C6378380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1c:3f:17:26:91:b3:c6:37:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=14eb948f-f8c6-45ee-bdab-836804c42f50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:9c:d7:36:7f:a4:08:3b:8e:61:b7:8a:bb:08: 52:bd:54:92:bf:f5:a2:aa:3d:f3:f6:d4:f6:37:e4: 50:3b:fa:04:96:4b:b9:e1:4a:b5:c9:80:62:31:18: fc:13:16:09:65:9d:21:7d:0c:ee:df:ee:22:4a:0f: d2:d2:96:99:92:36:fb:2b:99:90:10:60:b9:02:43: 00:79:27:60:e3:bb:10:1b:a7:58:4d:42:06:8b:33: 38:02:5d:e1:0d:5f:1d:e8:4b:c3:57:d9:a6:45:4b: ca:51:9c:6f:66:ef:fc:4d:7e:0d:51:ab:b1:2a:f1: d3:ec:be:14:ac:53:14:31:bf:f0:79:72:9c:44:51: a4:65:d6:01:9e:43:7b:3b:8d:4c:cf:42:93:fb:2a: 38:8d:bc:49:3c:4c:e6:50:fd:80:1c:53:d6:1c:c9: 3d:6a:9c:90:be:8d:bb:09:3c:d2:7d:68:2d:39:6f: e6:f1:e5:2b:ee:cc:62:65:2e:46:84:4f:c5:62:08: 6d:d9:79:ea:de:50:46:7a:6e:ed:4c:27:73:73:9a: a9:7f:9c:da:8f:2f:c6:03:cc:ac:d9:1b:56:b5:92: ec:3a:b0:e3:44:66:c1:89:6d:ac:1e:8c:87:c4:4e: 81:1d:4b:55:72:2d:b6:ba:c2:17:e9:9c:ac:39:cc: 35:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:AF:74:CF:E9:B3:7D:A7:40:3A:67:50:D8:DF:DD:68:1F:48:03:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cfec58b4-8167-37e2-bef1-c7b40ae1e92f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:80:6f:62:f4:da:e5:af:1c:af:5e:e1:6e:0b:33:66:d6:4d: 68:7e:d3:25:46:56:e1:e0:70:e6:aa:76:d2:42:55:1a:97:2c: f8:56:28:7a:27:5a:64:bc:0d:5f:fd:a2:a9:fe:16:66:9e:65: 08:b9:ac:01:4a:43:27:a9:b1:fa:01:9f:5c:16:e8:eb:d7:f7: d0:31:0b:0f:b6:84:8c:45:4e:6d:bd:06:be:68:8f:7b:bd:81: 02:62:42:06:56:26:e3:5a:f7:97:06:e2:93:8d:07:72:66:2d: 0a:70:b6:6b:cb:d1:e0:93:c6:55:cc:ee:81:34:e1:7c:e9:f9: 10:a1:19:95:bb:1b:41:07:2d:07:34:cd:fb:22:78:c9:88:99: 64:c1:6e:74:0c:a4:f6:72:9b:02:22:29:75:18:ec:1c:e7:d0: 3b:a0:c3:5a:e7:f3:06:0f:0c:8b:e6:77:fc:91:d5:d4:fd:33: b6:e5:35:5a:63:2f:24:c7:c5:34:26:a2:4a:54:e4:3d:c5:e9: 55:b5:4a:41:f3:fc:62:58:9f:05:86:c5:73:9a:92:23:71:5a: c0:0a:38:1a:fe:08:10:84:42:c9:62:ac:16:22:66:5a:ef:c4: 38:d2:6a:66:e0:e7:8a:46:83:73:bf:7c:01:12:67:47:38:8b: d4:2f:b9:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRw/FyaRs8Y3g4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTRlYjk0OGYtZjhjNi00NWVlLWJkYWItODM2ODA0YzQyZjUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJzXNn+kCDuOYbeKuwhSvVSSv/Wiqj3z9tT2 N+RQO/oElku54Uq1yYBiMRj8ExYJZZ0hfQzu3+4iSg/S0paZkjb7K5mQEGC5AkMA eSdg47sQG6dYTUIGizM4Al3hDV8d6EvDV9mmRUvKUZxvZu/8TX4NUauxKvHT7L4U rFMUMb/weXKcRFGkZdYBnkN7O41Mz0KT+yo4jbxJPEzmUP2AHFPWHMk9apyQvo27 CTzSfWgtOW/m8eUr7sxiZS5GhE/FYght2Xnq3lBGem7tTCdzc5qpf5zajy/GA8ys 2RtWtZLsOrDjRGbBiW2sHoyHxE6BHUtVci22usIX6ZysOcw1cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD2vdM/ps32nQDpnUNjf3WgfSANRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2ZlYzU4YjQtODE2Ny0z N2UyLWJlZjEtYzdiNDBhZTFlOTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSAb2L02uWvHK9e4W4LM2bWTWh+0yVGVuHgcOaqdtJCVRqXLPhWKHon WmS8DV/9oqn+FmaeZQi5rAFKQyepsfoBn1wW6OvX99AxCw+2hIxFTm29Br5oj3u9 gQJiQgZWJuNa95cG4pONB3JmLQpwtmvL0eCTxlXM7oE04Xzp+RChGZW7G0EHLQc0 zfsieMmImWTBbnQMpPZymwIiKXUY7Bzn0Dugw1rn8wYPDIvmd/yR1dT9M7blNVpj LyTHxTQmokpU5D3F6VW1SkHz/GJYnwWGxXOakiNxWsAKOBr+CBCEQslirBYiZlrv xDjSambg54pGg3O/fAESZ0c4i9QvuRU= -----END CERTIFICATE-----Generated at Mon Oct 20 02:22:26 2025 by rpki-client