$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd9c6ad4-8f80-335e-8de8-07e725ebd605.roa File: dd9c6ad4-8f80-335e-8de8-07e725ebd605.roa (raw, json) Hash identifier: xj5nK8yRb+y5/gk1P8GDsKWOHdc04c+JY57Ly1WzDx8= Subject key identifier: 31:2D:23:EF:76:39:B0:C5:2D:86:0F:33:73:81:55:36:5C:0B:D5:70 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDBFC2F4DD1CE65DF3300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd9c6ad4-8f80-335e-8de8-07e725ebd605.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:db:fc:2f:4d:d1:ce:65:df:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=45b92e63-f44f-4fc7-bddc-b68f99887c7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:35:f1:29:a1:a2:3f:79:89:de:29:2a:e6:df: 85:4c:84:84:e0:a2:d8:01:6f:0c:70:ef:31:72:61: 98:68:db:6b:44:9a:41:3b:e5:b3:12:ef:f4:33:68: b9:8b:59:72:40:70:4f:eb:40:c9:44:fe:c8:dd:3c: 35:54:78:7a:c2:f3:fc:09:59:ae:5c:90:f3:ca:f6: b8:9c:40:a0:e4:db:6c:ac:f6:6d:e5:ea:a6:84:35: a1:85:a9:ea:f7:78:19:4c:7a:4d:b9:40:38:cb:2d: 44:48:70:f2:fb:10:b0:7d:0c:9d:b5:a3:47:7a:e6: 41:f4:48:78:ce:96:8e:5d:e8:90:94:c5:02:c7:9b: 68:62:af:38:0a:a1:27:81:d7:ed:37:65:56:3b:90: cc:35:ba:62:38:14:ad:b6:4f:67:d4:f7:46:29:f5: c3:07:fb:fa:79:2b:2e:c9:aa:37:98:2c:1d:58:0b: 15:dd:cd:6c:bf:b8:d8:3b:66:52:a5:48:05:78:bc: eb:28:eb:6b:3d:0a:9c:fe:9a:a1:80:db:f3:1e:10: 13:20:b0:06:13:59:ee:3a:d4:22:cc:72:21:57:12: ec:55:ee:fa:7f:bb:5f:ea:10:65:57:2b:bd:89:52: 07:35:16:7c:a9:c8:cb:4c:af:dd:bf:4e:a0:68:ee: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:2D:23:EF:76:39:B0:C5:2D:86:0F:33:73:81:55:36:5C:0B:D5:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dd9c6ad4-8f80-335e-8de8-07e725ebd605.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:49:49:24:bf:0b:65:11:d5:e2:4d:a0:08:fd:dc:56:d4:8a: 3d:40:1c:4a:a3:24:60:a9:d8:dc:50:91:46:e3:ee:a5:04:7c: 9a:41:c0:61:6c:dd:aa:e4:49:48:c0:7e:53:9f:5a:ff:6b:51: 21:5f:f0:e8:7b:21:d9:c6:bf:ee:ae:31:01:7f:32:ca:24:b2: 80:46:9e:6b:4e:b3:e6:5f:13:94:1d:c5:26:40:44:18:69:b7: 3a:21:c0:6c:94:9a:8f:92:b1:61:bc:53:61:cb:88:45:df:d3: 7a:70:8f:c2:88:5a:34:02:fe:67:01:9d:45:28:27:e4:ea:49: 98:b4:91:54:5f:68:e8:37:26:e7:4c:16:04:71:d7:49:31:da: 08:e6:8a:de:b5:5d:d0:50:bf:dc:d4:62:9f:a5:43:af:93:9c: 6d:79:e0:90:6e:8a:61:64:9b:e9:90:26:32:13:4b:38:02:0b: 37:86:6b:9f:85:3e:e5:b7:d6:8e:c5:3c:5a:a5:27:d4:c5:57: bd:16:d6:4b:f6:67:70:4e:90:3b:c6:10:14:45:72:bf:41:5a: 18:ec:e7:93:d7:c2:8d:6e:6f:ae:57:dc:b5:20:f6:3c:e3:21: 02:ae:1a:db:f5:89:2d:1c:9e:ba:66:b1:48:f7:c8:5b:6f:06: 1f:9f:77:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdv8L03RzmXfMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDViOTJlNjMtZjQ0Zi00ZmM3LWJkZGMtYjY4Zjk5ODg3YzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1TXxKaGiP3mJ3ikq5t+FTISE4KLYAW8McO8x cmGYaNtrRJpBO+WzEu/0M2i5i1lyQHBP60DJRP7I3Tw1VHh6wvP8CVmuXJDzyva4 nECg5NtsrPZt5eqmhDWhhanq93gZTHpNuUA4yy1ESHDy+xCwfQydtaNHeuZB9Eh4 zpaOXeiQlMUCx5toYq84CqEngdftN2VWO5DMNbpiOBSttk9n1PdGKfXDB/v6eSsu yao3mCwdWAsV3c1sv7jYO2ZSpUgFeLzrKOtrPQqc/pqhgNvzHhATILAGE1nuOtQi zHIhVxLsVe76f7tf6hBlVyu9iVIHNRZ8qcjLTK/dv06gaO7B4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEtI+92ObDFLYYPM3OBVTZcC9VwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGQ5YzZhZDQtOGY4MC0z MzVlLThkZTgtMDdlNzI1ZWJkNjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdJSSS/C2UR1eJNoAj93FbUij1AHEqjJGCp2NxQkUbj7qUEfJpBwGFs 3arkSUjAflOfWv9rUSFf8Oh7IdnGv+6uMQF/MsoksoBGnmtOs+ZfE5QdxSZARBhp tzohwGyUmo+SsWG8U2HLiEXf03pwj8KIWjQC/mcBnUUoJ+TqSZi0kVRfaOg3JudM FgRx10kx2gjmit61XdBQv9zUYp+lQ6+TnG154JBuimFkm+mQJjITSzgCCzeGa5+F PuW31o7FPFqlJ9TFV70W1kv2Z3BOkDvGEBRFcr9BWhjs55PXwo1ub65X3LUg9jzj IQKuGtv1iS0cnrpmsUj3yFtvBh+fd1c= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:25 2025 by rpki-client