$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3563f4f-e071-363b-aa23-83feff1dcc47.roa File: d3563f4f-e071-363b-aa23-83feff1dcc47.roa (raw, json) Hash identifier: KTm8kDgWMlIc7eYHToHPXiR8+qWyKsNtF7CKBB2d2qs= Subject key identifier: 53:DC:C1:34:DC:A1:2D:CC:4E:26:08:72:6B:6A:7F:4A:16:E4:0F:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDDDF2DE136BD1A3E1980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3563f4f-e071-363b-aa23-83feff1dcc47.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:dd:df:2d:e1:36:bd:1a:3e:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d580127c-e08c-4dbd-bc2b-d35f63e7536a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b1:06:c0:7d:f2:68:9e:96:17:86:21:1a:b4: 6a:d5:3e:d1:18:93:4d:46:e4:4e:23:84:4a:a9:c6: 36:c1:cf:f7:ae:a0:c3:f2:d9:02:d2:49:df:38:d7: 38:4d:74:cd:17:51:86:4c:86:16:1c:44:95:87:6a: 54:ab:b9:18:1f:4b:5a:80:b3:bd:b1:14:de:46:12: c4:37:0e:ef:32:aa:a4:23:b1:75:e3:f7:23:d0:2c: 5f:d2:1e:ea:af:35:22:8d:3c:43:ec:2f:e5:4d:21: 03:43:57:89:f3:38:29:c7:39:c4:66:ed:0e:5f:ce: 1b:37:46:2e:d3:df:ad:9d:3d:2f:49:d5:f2:32:2d: 58:46:54:7c:97:8c:3b:dd:a1:12:43:13:83:5c:6c: b9:a2:65:b7:17:4c:ee:c2:2f:80:5b:ba:a0:d4:2e: 5e:4d:bd:21:5e:71:fb:45:f1:5c:d2:2b:5b:83:57: 63:56:9c:08:f1:4f:1b:e3:95:31:42:5b:2d:c6:0c: 3d:18:1c:35:d9:98:c2:cf:e9:84:5b:0a:8a:cc:67: 33:22:bb:67:2e:a7:4a:36:6f:81:d1:44:6c:8d:21: 8c:be:0c:bf:5f:0c:19:a5:96:54:55:01:17:35:27: 7c:f3:be:58:fd:b5:bf:7d:4a:b3:13:25:9b:4e:bc: 43:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:DC:C1:34:DC:A1:2D:CC:4E:26:08:72:6B:6A:7F:4A:16:E4:0F:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3563f4f-e071-363b-aa23-83feff1dcc47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:74:71:16:64:8a:6b:d3:32:06:1e:63:84:ac:01:2c:21:9c: 00:43:18:79:25:a9:68:49:c9:00:33:b8:c5:48:84:ab:5c:d2: 62:1e:65:7f:aa:9e:97:db:e9:98:2d:f3:40:44:f9:de:4b:60: 1a:d9:8d:e4:23:e6:27:b0:f5:5d:2a:67:2a:8b:bf:33:44:80: 06:2c:e1:59:fc:57:d5:81:fb:bd:e8:39:9c:9b:0c:3f:1c:cb: 44:88:b6:8d:4d:c6:63:7b:b2:64:5d:31:68:4e:f5:77:12:ca: f3:70:f3:98:fc:06:e1:d6:2f:4e:0d:fe:1e:01:70:c2:16:33: 9c:fc:3f:1f:8b:8c:36:35:a5:32:1b:f9:db:7d:6b:52:b3:db: f0:e7:42:c7:f0:f8:8a:eb:66:2a:45:a4:54:2b:fc:b1:b2:fa: 80:0e:dd:8e:26:03:47:9e:b9:56:ce:e0:46:18:87:1a:10:ba: 30:87:25:cc:c0:b7:4f:b3:82:bd:5e:e2:5c:3e:5f:8d:cd:7d: 82:ee:99:d9:55:fa:f1:72:ad:8d:78:ba:e6:49:31:11:d2:5f: 3b:a9:60:81:a7:0e:40:63:d4:b5:17:1b:56:4e:0f:de:59:01: 9a:0b:0c:48:36:34:91:64:d0:ce:79:5f:ea:71:e8:57:e7:d2: 63:c9:50:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzd3fLeE2vRo+GYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDU4MDEyN2MtZTA4Yy00ZGJkLWJjMmItZDM1ZjYzZTc1MzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LEGwH3yaJ6WF4YhGrRq1T7RGJNNRuROI4RK qcY2wc/3rqDD8tkC0knfONc4TXTNF1GGTIYWHESVh2pUq7kYH0tagLO9sRTeRhLE Nw7vMqqkI7F14/cj0Cxf0h7qrzUijTxD7C/lTSEDQ1eJ8zgpxznEZu0OX84bN0Yu 09+tnT0vSdXyMi1YRlR8l4w73aESQxODXGy5omW3F0zuwi+AW7qg1C5eTb0hXnH7 RfFc0itbg1djVpwI8U8b45UxQlstxgw9GBw12ZjCz+mEWwqKzGczIrtnLqdKNm+B 0URsjSGMvgy/XwwZpZZUVQEXNSd8875Y/bW/fUqzEyWbTrxDswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFPcwTTcoS3MTiYIcmtqf0oW5A/gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDM1NjNmNGYtZTA3MS0z NjNiLWFhMjMtODNmZWZmMWRjYzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV0cRZkimvTMgYeY4SsASwhnABDGHklqWhJyQAzuMVIhKtc0mIeZX+q npfb6Zgt80BE+d5LYBrZjeQj5iew9V0qZyqLvzNEgAYs4Vn8V9WB+73oOZybDD8c y0SIto1NxmN7smRdMWhO9XcSyvNw85j8BuHWL04N/h4BcMIWM5z8Px+LjDY1pTIb +dt9a1Kz2/DnQsfw+IrrZipFpFQr/LGy+oAO3Y4mA0eeuVbO4EYYhxoQujCHJczA t0+zgr1e4lw+X43NfYLumdlV+vFyrY14uuZJMRHSXzupYIGnDkBj1LUXG1ZOD95Z AZoLDEg2NJFk0M55X+px6Ffn0mPJUJ0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:40:15 2025 by rpki-client