$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa File: df9b0389-0511-3f33-9eab-3d06768fd88e.roa (raw, json) Hash identifier: jLbH7ujzR/D9lciVZvKG279G5KKg75diKpGQhGmkZUo= Subject key identifier: EF:58:85:6A:37:A7:AD:64:42:14:40:24:EE:3F:F5:C8:85:20:2F:3D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1ED69D67886FEFD39A40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1e:d6:9d:67:88:6f:ef:d3:9a:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=fad09824-1a8a-428a-af45-b09a09986175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a0:96:59:3a:2f:87:67:4d:af:d5:61:c4:63: 3f:9e:f7:72:5f:0f:29:13:49:07:cb:af:55:d1:eb: 41:e4:07:c1:44:fc:8f:58:ce:bf:59:22:4c:92:79: e2:a1:0f:37:94:68:7b:ea:51:f0:fb:43:71:57:25: 66:55:36:b1:94:e2:7a:27:80:65:bb:c2:75:08:55: f0:c8:53:c8:f6:ea:8f:4a:ca:34:4c:4b:71:1d:67: d7:dc:29:55:c1:14:38:32:ee:a7:1a:66:1b:15:8e: 31:ff:90:f8:b5:2f:a0:41:03:b9:86:ae:94:8d:e7: 87:76:ce:71:d4:98:46:dc:69:7a:4c:69:a2:8d:61: 9d:77:48:c9:7c:f3:30:f7:3a:bd:36:4d:01:47:a7: 09:7a:ae:78:5f:9b:b0:8a:a8:73:0d:9e:3c:ac:9d: 58:ea:ee:30:2a:19:f5:9f:b5:1d:91:25:36:b9:fe: ee:06:de:bf:d0:bc:88:ee:79:82:0a:ad:c8:7d:45: a7:f3:36:14:6f:6e:10:e0:d0:8a:34:b9:62:83:1b: c0:78:96:88:0e:d2:c4:e1:3b:4e:b9:b7:a8:0c:16: b8:49:5f:32:f0:6d:84:66:44:e8:53:e7:da:4e:e9: 3d:11:bc:09:7b:6f:63:9b:33:c3:ef:eb:4a:58:73: 58:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:58:85:6A:37:A7:AD:64:42:14:40:24:EE:3F:F5:C8:85:20:2F:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/df9b0389-0511-3f33-9eab-3d06768fd88e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b5:7c:92:7e:07:a4:9c:fe:3f:04:3b:9c:3b:c4:5a:ea:72:27: 22:db:6b:db:6a:55:28:b5:f1:c1:bd:52:80:88:1d:11:da:23: a2:d0:2c:87:c5:56:74:f7:92:ca:8e:94:68:62:6f:63:d3:17: b4:74:e9:dd:97:f0:11:f7:60:b2:67:d0:fa:15:12:91:7d:81: 1d:b8:1d:78:21:93:bd:dd:f9:f0:de:f6:0b:e9:df:e9:11:76: 70:74:72:99:d5:27:2c:37:44:95:85:5d:7c:2e:76:b4:86:62: c5:e6:71:18:0b:68:47:65:cd:e9:eb:46:8a:63:0e:7c:1d:1d: 4f:b4:6f:b9:43:5f:e4:af:33:1c:6b:63:d7:dd:6a:50:64:f0: d3:fb:b4:19:9a:02:92:5b:5d:39:a2:9f:a9:ab:13:1c:62:d6: 63:03:69:ea:04:47:e3:51:0e:88:67:46:d6:b1:78:21:3e:a4: c4:15:8b:93:87:32:32:6e:0d:d4:c9:cc:d1:35:af:63:a0:63: 34:7c:56:e1:3a:a2:2e:21:7d:b9:63:57:53:5d:af:a8:5b:a5: 3f:0c:e7:ef:d3:79:ad:49:94:65:71:99:3c:44:97:7a:77:b8: 7a:63:a4:90:e1:67:2a:af:37:99:d0:a8:8b:8f:e1:4d:bb:64: ae:8e:43:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzR7WnWeIb+/TmkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZmFkMDk4MjQtMWE4YS00MjhhLWFmNDUtYjA5YTA5OTg2MTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqCWWTovh2dNr9VhxGM/nvdyXw8pE0kHy69V 0etB5AfBRPyPWM6/WSJMknnioQ83lGh76lHw+0NxVyVmVTaxlOJ6J4Blu8J1CFXw yFPI9uqPSso0TEtxHWfX3ClVwRQ4Mu6nGmYbFY4x/5D4tS+gQQO5hq6UjeeHds5x 1JhG3Gl6TGmijWGdd0jJfPMw9zq9Nk0BR6cJeq54X5uwiqhzDZ48rJ1Y6u4wKhn1 n7UdkSU2uf7uBt6/0LyI7nmCCq3IfUWn8zYUb24Q4NCKNLligxvAeJaIDtLE4TtO ubeoDBa4SV8y8G2EZkToU+faTuk9EbwJe29jmzPD7+tKWHNYmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO9YhWo3p61kQhRAJO4/9ciFIC89MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGY5YjAzODktMDUxMS0z ZjMzLTllYWItM2QwNjc2OGZkODhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALV8kn4HpJz+PwQ7nDvEWupyJyLba9tqVSi18cG9UoCIHRHaI6LQLIfF VnT3ksqOlGhib2PTF7R06d2X8BH3YLJn0PoVEpF9gR24HXghk73d+fDe9gvp3+kR dnB0cpnVJyw3RJWFXXwudrSGYsXmcRgLaEdlzenrRopjDnwdHU+0b7lDX+SvMxxr Y9fdalBk8NP7tBmaApJbXTmin6mrExxi1mMDaeoER+NRDohnRtaxeCE+pMQVi5OH MjJuDdTJzNE1r2OgYzR8VuE6oi4hfbljV1Ndr6hbpT8M5+/Tea1JlGVxmTxEl3p3 uHpjpJDhZyqvN5nQqIuP4U27ZK6OQwE= -----END CERTIFICATE-----Generated at Mon Oct 20 05:15:53 2025 by rpki-client