$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e784b86d-e40a-3437-ad30-959c6010eb16.roa File: e784b86d-e40a-3437-ad30-959c6010eb16.roa (raw, json) Hash identifier: c7Ts/wMcxlkv68+pZFOY+BQ8DtZJ3eqx5Ou0uXjgSbo= Subject key identifier: E7:02:03:16:16:53:FE:5F:BD:5C:8C:AB:DA:85:57:4C:4E:41:3F:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1D8229E11EB6CD69EFC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e784b86d-e40a-3437-ad30-959c6010eb16.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.252.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1d:82:29:e1:1e:b6:cd:69:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6253c9a6-cf45-41ca-9f96-3f1c818b1e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6e:03:8e:ce:61:09:a7:55:d4:0a:a6:42:ed: ef:7d:1e:1b:9a:ac:11:62:00:f0:60:31:22:40:97: c8:38:d7:dc:d8:4e:ac:69:8d:2b:6c:01:27:02:a0: 9c:d4:a4:72:5d:66:8e:3e:6a:66:cc:6c:15:87:5a: f3:bc:b5:d0:42:91:a3:c8:ad:dd:24:91:81:a6:cd: 28:f8:ac:8d:32:7c:29:4f:17:3f:b5:f5:f9:7f:60: dc:5d:27:b5:5f:cf:ae:5a:11:39:07:f5:b4:23:ad: b8:09:b4:84:fb:96:36:2c:09:fa:ab:fe:a9:37:3d: 1a:22:f9:e9:b2:24:1d:5e:92:4f:c5:b0:f6:96:ac: c9:ab:8a:c2:02:73:bf:a9:69:8b:7b:58:ad:53:fd: 55:c0:7d:1f:30:9b:58:45:31:92:c5:f3:2c:e0:1f: 91:47:db:28:ed:f6:8e:23:9e:32:58:45:6d:98:de: f1:3a:bf:0c:22:cb:c3:e0:46:ae:50:02:9d:3f:7c: 76:b7:00:1a:54:38:6d:4d:6b:db:d3:74:b5:86:0e: 11:ed:7f:45:f2:7a:7e:3f:1e:8b:dd:da:f1:f6:77: cb:2f:d2:a5:21:f6:a2:42:e9:72:eb:3d:7b:54:ef: 41:f8:d6:0f:b6:db:56:68:ed:ef:59:c2:a8:e2:b4: 4b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:02:03:16:16:53:FE:5F:BD:5C:8C:AB:DA:85:57:4C:4E:41:3F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e784b86d-e40a-3437-ad30-959c6010eb16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.252.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:7f:48:a9:f2:1d:c8:55:8c:58:e2:96:77:18:f2:11:03:84: d2:50:68:23:c6:2d:6b:20:c0:ea:82:fe:b9:7e:5c:b9:2c:5b: 98:44:d0:9f:28:b3:2e:3c:a7:fc:06:09:9e:9c:0e:a7:71:be: ba:9c:2a:ae:92:a3:d2:27:77:03:d7:d7:3f:bb:d8:cc:56:63: 2d:27:c0:80:8a:d0:38:f1:cf:80:8c:5a:32:c6:9b:aa:93:80: 59:a8:51:d3:e1:60:69:fd:51:72:52:69:98:f2:96:4b:52:73: ad:dd:94:4d:0d:e1:12:9c:a7:76:f8:7e:8f:52:d3:18:59:88: 15:41:55:56:1b:8f:e0:ac:78:c2:99:7e:42:4a:9d:85:61:aa: 8e:92:70:fd:d9:45:6f:a7:3f:fc:d1:70:56:c4:1f:17:1d:87: f2:c7:4c:31:72:9f:e7:e1:07:c0:c6:d2:9b:95:3f:6c:1e:b9: 58:20:3b:26:b7:bf:15:9f:2e:fa:81:8b:64:91:5e:62:eb:0b: 8e:8e:eb:61:8d:4b:98:69:c0:ba:49:d4:b9:9c:3a:44:81:7b: c7:48:ad:f3:f8:f0:02:d8:a2:55:e9:2c:87:5b:aa:f5:14:0e: 3a:3e:97:0c:32:92:09:5c:c6:cd:32:a9:37:22:0e:d3:46:a8: e1:26:61:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzR2CKeEets1p78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NjI1M2M5YTYtY2Y0NS00MWNhLTlmOTYtM2YxYzgxOGIxZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApm4Djs5hCadV1AqmQu3vfR4bmqwRYgDwYDEi QJfIONfc2E6saY0rbAEnAqCc1KRyXWaOPmpmzGwVh1rzvLXQQpGjyK3dJJGBps0o +KyNMnwpTxc/tfX5f2DcXSe1X8+uWhE5B/W0I624CbSE+5Y2LAn6q/6pNz0aIvnp siQdXpJPxbD2lqzJq4rCAnO/qWmLe1itU/1VwH0fMJtYRTGSxfMs4B+RR9so7faO I54yWEVtmN7xOr8MIsvD4EauUAKdP3x2twAaVDhtTWvb03S1hg4R7X9F8np+Px6L 3drx9nfLL9KlIfaiQuly6z17VO9B+NYPtttWaO3vWcKo4rRLJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcCAxYWU/5fvVyMq9qFV0xOQT+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTc4NGI4NmQtZTQwYS0z NDM3LWFkMzAtOTU5YzYwMTBlYjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACV/SKnyHchVjFjilncY8hEDhNJQaCPGLWsgwOqC/rl+XLksW5hE0J8o sy48p/wGCZ6cDqdxvrqcKq6So9IndwPX1z+72MxWYy0nwICK0Djxz4CMWjLGm6qT gFmoUdPhYGn9UXJSaZjylktSc63dlE0N4RKcp3b4fo9S0xhZiBVBVVYbj+CseMKZ fkJKnYVhqo6ScP3ZRW+nP/zRcFbEHxcdh/LHTDFyn+fhB8DG0puVP2weuVggOya3 vxWfLvqBi2SRXmLrC46O62GNS5hpwLpJ1LmcOkSBe8dIrfP48ALYolXpLIdbqvUU Djo+lwwykglcxs0yqTciDtNGqOEmYeA= -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:32 2025 by rpki-client