$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa File: d12c5bca-e1ca-3d00-afc0-e005b203b536.roa (raw, json) Hash identifier: cVVVmeHkW3zt6elKVGJ62NnFdkCB90MXZnUOLUnzTW4= Subject key identifier: 61:39:08:00:E7:AF:25:2A:F7:84:5B:B0:A9:80:32:47:04:27:CF:F3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD8F1BD148081D4221400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d8:f1:bd:14:80:81:d4:22:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d4a96a83-4279-4f0c-a2c6-341c69cf1df4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:95:cf:03:aa:fb:95:36:b7:8e:cb:e8:26:d5: 6a:ea:5c:a9:70:1e:7c:49:dc:ec:94:83:2d:ad:28: ec:8b:2b:65:fa:94:30:5a:2f:5d:68:c9:42:ec:60: 62:54:9d:a5:54:6d:2a:7f:89:5c:89:a0:f0:3d:c3: 1b:6d:d2:05:93:6d:91:34:e1:cc:f4:0d:ea:1f:60: a4:07:7a:07:0d:25:64:2c:7a:2c:c7:0f:80:35:ae: 16:1e:1a:4c:6b:7c:de:a2:57:d6:16:18:db:96:29: 7a:fd:3c:52:49:97:8e:5d:a8:07:d4:e3:60:45:01: 6d:c3:bd:ea:3f:29:85:e0:8d:8d:8c:20:de:e2:ef: 53:46:ec:20:c9:e6:16:f7:a5:6e:ce:18:53:2c:4d: 09:37:2a:d9:c9:8e:aa:ab:a6:85:5f:f0:69:a4:fd: 51:0d:59:9f:1d:0e:17:d6:80:dc:db:2f:9f:0d:1f: b0:4f:f9:c3:cb:8c:2c:ea:16:fa:0a:f0:01:ce:e3: fb:81:cf:a0:56:8f:ba:fc:e9:63:51:7e:84:79:d3: 31:62:06:f9:c1:27:28:7b:1c:e7:46:30:95:b4:70: 7a:cf:32:16:60:e8:db:0b:3d:3e:b6:23:49:cd:2d: a5:93:f1:aa:c3:c9:91:05:0f:5d:e8:85:a5:b5:a6: ea:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:39:08:00:E7:AF:25:2A:F7:84:5B:B0:A9:80:32:47:04:27:CF:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d12c5bca-e1ca-3d00-afc0-e005b203b536.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:b8:2d:74:7e:21:87:d9:42:a7:b9:a2:47:a8:35:13:e8:69: 0f:60:d8:c7:69:18:1d:c2:d8:6e:31:2f:1d:94:18:62:43:e3: 15:23:4c:c8:d1:6e:56:2b:a0:88:bb:57:1c:6e:6e:d9:14:94: 05:e9:ef:a5:8f:95:69:78:af:2d:13:3f:45:12:cd:21:bb:d2: 6e:2b:75:82:f4:03:40:32:2c:9f:00:2c:af:f9:75:7a:1a:68: ee:8d:2e:ad:e9:35:8f:ef:5e:97:92:43:5c:16:f0:07:35:38: 2b:1e:e0:31:61:c4:e5:f4:b9:60:54:f7:99:5e:f9:be:ad:91: 09:7b:cd:65:2a:ab:ea:34:86:04:dd:8c:91:c4:a5:16:76:75: c6:36:c4:7c:11:0a:9c:ca:a5:55:0e:50:69:c3:c7:a3:9c:3a: 37:22:3d:99:2f:da:81:22:18:48:c8:ad:05:6b:7a:4a:5d:64: 91:fd:fe:82:74:9d:78:e8:43:e6:94:e0:bb:77:56:0a:e0:64: 0b:af:b4:67:fa:00:57:0b:1c:be:44:00:0e:0f:b0:3e:84:00: 97:00:76:14:2e:14:8d:33:b1:be:4d:99:cc:91:49:e5:c1:68: f9:a4:81:b8:b7:0a:bb:dd:ce:d0:f2:44:8c:4e:2f:3f:c4:64: e3:f0:7e:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdjxvRSAgdQiFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDRhOTZhODMtNDI3OS00ZjBjLWEyYzYtMzQxYzY5Y2YxZGY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJXPA6r7lTa3jsvoJtVq6lypcB58SdzslIMt rSjsiytl+pQwWi9daMlC7GBiVJ2lVG0qf4lciaDwPcMbbdIFk22RNOHM9A3qH2Ck B3oHDSVkLHosxw+ANa4WHhpMa3zeolfWFhjblil6/TxSSZeOXagH1ONgRQFtw73q PymF4I2NjCDe4u9TRuwgyeYW96VuzhhTLE0JNyrZyY6qq6aFX/BppP1RDVmfHQ4X 1oDc2y+fDR+wT/nDy4ws6hb6CvABzuP7gc+gVo+6/OljUX6EedMxYgb5wScoexzn RjCVtHB6zzIWYOjbCz0+tiNJzS2lk/Gqw8mRBQ9d6IWltabqRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGE5CADnryUq94RbsKmAMkcEJ8/zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEyYzViY2EtZTFjYS0z ZDAwLWFmYzAtZTAwNWIyMDNiNTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu4LXR+IYfZQqe5okeoNRPoaQ9g2MdpGB3C2G4xLx2UGGJD4xUjTMjR blYroIi7VxxubtkUlAXp76WPlWl4ry0TP0USzSG70m4rdYL0A0AyLJ8ALK/5dXoa aO6NLq3pNY/vXpeSQ1wW8Ac1OCse4DFhxOX0uWBU95le+b6tkQl7zWUqq+o0hgTd jJHEpRZ2dcY2xHwRCpzKpVUOUGnDx6OcOjciPZkv2oEiGEjIrQVrekpdZJH9/oJ0 nXjoQ+aU4Lt3VgrgZAuvtGf6AFcLHL5EAA4PsD6EAJcAdhQuFI0zsb5NmcyRSeXB aPmkgbi3CrvdztDyRIxOLz/EZOPwfp0= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:38 2025 by rpki-client