$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa File: da586d84-433b-3f79-a0e6-17aa74076e21.roa (raw, json) Hash identifier: 52b8IUpN6eAC0538/nEK0RfXeir+9gk3f9dzYroD2tE= Subject key identifier: 8F:F2:92:87:AA:95:CE:4C:27:3F:D3:98:AD:1E:06:89:75:07:D6:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD167C945EFB38FA22A000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:16:7c:94:5e:fb:38:fa:22:a0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f443e42e-0676-468a-93d2-793ea8ce9d6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:57:54:1e:66:8a:3a:8d:41:26:02:cf:7f: 86:dd:8e:d6:65:a7:dc:b0:34:db:56:3c:42:bd:19: 6a:18:1d:7e:9c:7b:7a:74:14:b5:f5:38:ed:d0:ad: b7:14:b0:79:2b:2d:0a:29:36:d1:c6:b1:e5:87:22: 2c:d9:d0:29:b9:9a:69:83:1a:25:5d:25:95:cf:17: 69:63:63:bd:23:0d:f7:49:d1:28:ed:50:c1:98:de: 19:41:e3:8c:72:0f:b6:68:5d:71:e1:c5:a8:6b:5d: d7:3a:27:fb:3e:a4:eb:aa:64:32:d0:79:69:a2:37: fc:5e:5c:03:ba:79:f4:3a:79:72:4c:3b:b6:89:81: 92:0e:19:67:39:bb:7e:21:e6:68:8f:ec:ee:ea:f7: 3c:79:46:73:a0:53:14:7a:30:a8:92:4e:43:d3:62: 44:e5:e1:e2:5a:9d:b6:f3:7d:5c:22:bd:aa:bd:7f: 47:45:6c:bc:84:e4:77:55:8a:e6:b7:7e:67:be:91: 41:2a:29:89:33:37:4c:22:8c:49:42:92:f9:79:a0: 4a:9c:87:39:34:f6:88:f7:df:df:fd:71:5a:7f:bc: ef:a6:eb:53:12:e7:b3:10:68:12:6f:81:21:d2:39: ca:67:84:11:0b:70:a5:3b:a5:f2:e7:7e:48:0f:69: 77:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:F2:92:87:AA:95:CE:4C:27:3F:D3:98:AD:1E:06:89:75:07:D6:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/da586d84-433b-3f79-a0e6-17aa74076e21.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:62:c9:e6:94:49:2a:96:b2:38:77:94:01:5a:da:b2:b7:4c: 56:f9:6e:8a:8e:e9:4f:2d:78:5b:dc:23:60:68:0b:f1:cf:40: 3d:04:64:34:0a:ea:04:50:eb:2e:f5:77:c2:33:74:b2:e4:fb: 31:23:ea:71:e3:49:e2:49:b6:94:a7:8b:14:13:c2:93:e8:f7: b9:aa:25:9a:56:8b:0c:a8:a8:fe:24:c0:b4:6f:72:9d:bc:b3: a6:c9:21:50:a0:3d:14:44:d1:b1:49:ef:36:6b:6a:9e:3f:6b: 8d:84:49:06:34:7c:38:4f:66:65:67:48:f8:bf:1a:87:9d:6e: 9a:40:6a:8b:df:de:3c:cc:47:8d:6c:d2:ba:59:91:d2:41:91: bf:90:89:6a:88:ef:ff:d2:fa:32:aa:2d:08:17:86:55:d0:3c: ca:63:f8:0e:44:cf:43:c4:d4:24:ee:67:db:ad:d8:ea:9a:37: f1:5b:7f:37:81:25:d2:14:01:aa:f8:71:bf:a6:a1:0b:51:ac: 6e:fd:40:c0:32:d2:d7:33:ea:ae:48:7f:c1:85:25:dd:58:95: 52:2e:a5:95:c7:a7:e9:c2:e3:44:bf:3f:09:68:dc:31:95:a4: eb:33:b6:05:63:1f:6a:74:13:a3:4e:2c:d1:79:4f:3e:88:f4: 0e:5e:55:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRZ8lF77OPoioAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjQ0M2U0MmUtMDY3Ni00NjhhLTkzZDItNzkzZWE4Y2U5ZDZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40FXVB5mijqNQSYCz3+G3Y7WZafcsDTbVjxC vRlqGB1+nHt6dBS19Tjt0K23FLB5Ky0KKTbRxrHlhyIs2dApuZppgxolXSWVzxdp Y2O9Iw33SdEo7VDBmN4ZQeOMcg+2aF1x4cWoa13XOif7PqTrqmQy0Hlpojf8XlwD unn0OnlyTDu2iYGSDhlnObt+IeZoj+zu6vc8eUZzoFMUejCokk5D02JE5eHiWp22 831cIr2qvX9HRWy8hOR3VYrmt35nvpFBKimJMzdMIoxJQpL5eaBKnIc5NPaI99/f /XFaf7zvputTEuezEGgSb4Eh0jnKZ4QRC3ClO6Xy535ID2l3DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI/ykoeqlc5MJz/TmK0eBol1B9aqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGE1ODZkODQtNDMzYi0z Zjc5LWEwZTYtMTdhYTc0MDc2ZTIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPImMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINiyeaUSSqWsjh3lAFa2rK3TFb5boqO6U8teFvcI2BoC/HPQD0EZDQK 6gRQ6y71d8IzdLLk+zEj6nHjSeJJtpSnixQTwpPo97mqJZpWiwyoqP4kwLRvcp28 s6bJIVCgPRRE0bFJ7zZrap4/a42ESQY0fDhPZmVnSPi/GoedbppAaovf3jzMR41s 0rpZkdJBkb+QiWqI7//S+jKqLQgXhlXQPMpj+A5Ez0PE1CTuZ9ut2OqaN/FbfzeB JdIUAar4cb+moQtRrG79QMAy0tcz6q5If8GFJd1YlVIupZXHp+nC40S/Pwlo3DGV pOsztgVjH2p0E6NOLNF5Tz6I9A5eVZk= -----END CERTIFICATE-----Generated at Mon Oct 20 05:04:38 2025 by rpki-client