$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e52c1dc6-8252-3809-9b32-fab94157760d.roa File: e52c1dc6-8252-3809-9b32-fab94157760d.roa (raw, json) Hash identifier: qen6xsS0dkA8GeBTsh4P8cTU4FbLdE4/5HLh/Rz8cJA= Subject key identifier: 03:ED:6D:D6:F4:9B:B3:BB:DB:AC:C8:76:86:98:DE:09:D2:4D:27:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD22750E48870662BA77E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e52c1dc6-8252-3809-9b32-fab94157760d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:22:75:0e:48:87:06:62:ba:77:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=343217c7-db5f-4cf8-a3de-6f6a1937ee37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:7a:74:1c:46:ee:a4:a8:52:2b:39:73:3a:f5: 99:f3:0b:b0:d3:5e:18:bc:b7:db:79:b7:48:41:33: 60:ee:01:50:4e:9f:59:f9:09:dc:14:37:8e:05:9d: bb:cf:e4:f9:3c:8d:11:43:ae:d3:30:6f:14:b3:f0: cf:2f:ca:25:03:fe:ac:0a:14:0b:81:f7:6e:fa:a6: a3:49:55:69:53:8b:33:3f:96:57:ee:30:5c:2b:a5: 84:1f:3b:ee:48:55:36:5e:9d:1d:19:68:47:79:1c: a8:a9:c6:cc:6d:8b:83:46:36:27:1a:d9:0c:84:97: 0e:51:c4:c3:0f:dc:6a:4e:4a:98:8f:d6:cb:2c:ae: 26:ee:79:b7:89:08:fb:0f:f7:60:05:0d:7e:09:e1: e9:b5:07:85:9f:80:ea:50:17:0a:2f:25:08:ba:c7: 41:77:77:14:4a:cd:98:ba:21:43:2a:86:31:b6:52: 58:63:35:0b:5a:57:8d:1c:9f:45:01:71:03:ce:25: d5:86:cc:48:a3:1e:dd:ad:93:16:3d:d8:93:4a:be: a3:57:ab:cc:91:6b:21:ff:83:dd:92:6d:9c:d5:6f: db:22:a1:53:e2:5a:ec:3f:cd:a9:3c:72:ba:f7:3f: ae:a7:ef:bc:cd:1b:f0:19:55:fe:9a:52:30:1d:ba: c7:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:ED:6D:D6:F4:9B:B3:BB:DB:AC:C8:76:86:98:DE:09:D2:4D:27:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e52c1dc6-8252-3809-9b32-fab94157760d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c0:5a:57:e0:41:e0:5f:aa:2e:44:7d:1b:29:80:d1:9d:f1:01: 46:a9:1a:9c:90:a6:94:d4:7a:ed:0c:2f:6e:50:65:59:17:5c: e2:85:70:1e:d4:75:f2:a4:92:60:5d:73:78:fd:a2:a5:a2:56: ef:e7:aa:79:aa:92:05:b4:cb:cc:6a:08:1a:e0:f5:49:d5:59: 17:b2:24:e3:27:e2:08:b1:52:05:a7:97:fe:62:a2:24:fc:72: 53:41:3a:01:8e:6e:2a:6a:83:36:8c:20:eb:e4:6a:ac:0e:82: 70:f9:35:d4:6d:9e:55:c4:db:e1:00:cf:20:16:ed:bb:37:76: fa:d2:d3:3e:ba:13:0d:52:2a:f9:2e:0d:b0:f6:1b:e9:19:f2: 87:6e:26:ca:ea:d0:bc:93:fe:68:4c:dc:d9:56:6c:a6:5e:fc: 47:e9:a4:ef:e3:24:96:3a:29:e9:91:bd:de:ac:74:97:41:a9: c5:89:ec:69:16:3b:90:49:ec:1c:4e:6e:2c:a6:ca:c2:39:1f: 4a:95:5e:ea:ca:17:a7:ec:c5:68:44:b9:2f:39:e5:12:6f:84: 8d:fe:1b:91:c6:89:ee:9b:a5:f1:75:3b:c2:f5:b1:50:a2:f4: c8:07:43:85:6c:6f:e4:32:96:66:bb:62:b8:24:14:38:4c:57: 31:a4:79:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSJ1DkiHBmK6d+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzQzMjE3YzctZGI1Zi00Y2Y4LWEzZGUtNmY2YTE5MzdlZTM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnp0HEbupKhSKzlzOvWZ8wuw014YvLfbebdI QTNg7gFQTp9Z+QncFDeOBZ27z+T5PI0RQ67TMG8Us/DPL8olA/6sChQLgfdu+qaj SVVpU4szP5ZX7jBcK6WEHzvuSFU2Xp0dGWhHeRyoqcbMbYuDRjYnGtkMhJcOUcTD D9xqTkqYj9bLLK4m7nm3iQj7D/dgBQ1+CeHptQeFn4DqUBcKLyUIusdBd3cUSs2Y uiFDKoYxtlJYYzULWleNHJ9FAXEDziXVhsxIox7drZMWPdiTSr6jV6vMkWsh/4Pd km2c1W/bIqFT4lrsP82pPHK69z+up++8zRvwGVX+mlIwHbrH2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPtbdb0m7O726zIdoaY3gnSTSeSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTUyYzFkYzYtODI1Mi0z ODA5LTliMzItZmFiOTQxNTc3NjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPN9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMBaV+BB4F+qLkR9GymA0Z3xAUapGpyQppTUeu0ML25QZVkXXOKFcB7U dfKkkmBdc3j9oqWiVu/nqnmqkgW0y8xqCBrg9UnVWReyJOMn4gixUgWnl/5ioiT8 clNBOgGObipqgzaMIOvkaqwOgnD5NdRtnlXE2+EAzyAW7bs3dvrS0z66Ew1SKvku DbD2G+kZ8oduJsrq0LyT/mhM3NlWbKZe/EfppO/jJJY6KemRvd6sdJdBqcWJ7GkW O5BJ7BxObiymysI5H0qVXurKF6fsxWhEuS855RJvhI3+G5HGie6bpfF1O8L1sVCi 9MgHQ4Vsb+Qylma7YrgkFDhMVzGkeRY= -----END CERTIFICATE-----Generated at Mon Oct 20 19:04:20 2025 by rpki-client