$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e955eb09-8f12-3934-854d-fb35921011e7.roa File: e955eb09-8f12-3934-854d-fb35921011e7.roa (raw, json) Hash identifier: Fi9Z6Np2+5SaMoy7I9a7EZOGCjkcu5N+WW3188Usc0s= Subject key identifier: 04:6C:18:B7:F9:D9:8D:FB:00:34:5A:39:70:71:13:96:76:4D:1D:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1F7A568E9896C9C1C580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e955eb09-8f12-3934-854d-fb35921011e7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1f:7a:56:8e:98:96:c9:c1:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1de76ba7-da98-4641-94d7-640477bf09bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:8a:d6:72:2c:34:c6:4f:12:cf:12:50:10:c5: b0:b3:fe:38:38:49:08:b5:bb:bd:c4:03:05:64:ca: 19:71:fe:30:7a:9f:f3:69:46:95:d2:40:48:47:d1: fd:95:8e:49:af:ca:c1:d5:dd:9e:37:62:50:6c:c8: 0b:58:03:3e:33:2e:d8:45:3b:e4:ae:cc:ae:72:e2: 0b:78:08:b0:1c:83:31:7a:bf:f6:fa:94:3b:4d:f4: 5b:5f:8d:f4:8b:0b:a5:8d:ef:72:65:2f:bb:1b:81: d0:1b:16:f7:17:07:6c:6c:8b:ab:28:8e:2f:a0:5b: df:05:13:24:11:16:c6:18:5f:43:2b:7f:3a:2d:4c: 7b:fb:8a:b2:25:58:e2:10:bc:0d:94:90:fb:81:4d: c1:79:12:3e:21:34:f9:23:c0:b4:83:be:12:7f:27: e0:e8:df:63:a6:86:1a:10:a3:97:7b:b8:50:12:f8: e0:46:b9:60:8a:5a:c8:68:f9:90:bf:e1:58:d6:00: 38:4c:91:70:95:7b:1f:62:c0:d7:be:80:fb:c5:17: 14:6b:48:94:e1:f8:89:87:44:75:9e:8c:66:d8:83: 65:75:b8:5e:c1:d4:ce:57:01:06:b2:51:67:da:38: 9c:03:91:2b:68:32:13:ff:23:1b:ac:b0:1e:c5:a1: a2:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:6C:18:B7:F9:D9:8D:FB:00:34:5A:39:70:71:13:96:76:4D:1D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e955eb09-8f12-3934-854d-fb35921011e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d2:8a:60:1c:1b:04:dc:a0:0f:9b:9c:27:83:d4:f6:08:d8:4f: 9c:82:1c:a6:ce:60:c9:f3:a4:75:d1:18:5e:b4:e6:56:25:e1: 2b:e7:96:3c:d3:44:70:73:02:01:f5:fb:b0:fb:d2:72:fd:01: 1f:61:97:73:c2:a8:44:6e:8b:04:a4:35:b1:78:19:91:c6:42: 30:e3:b7:0d:6f:b4:3c:d9:dc:4f:89:37:78:79:0f:ae:fd:c9: 2b:a4:fb:a4:97:2b:0f:df:ef:f4:3e:09:92:f5:15:a6:12:dd: 27:a9:51:91:89:96:07:a0:6e:25:b6:ad:7a:ab:68:36:39:ae: cc:52:2b:52:1e:da:03:a9:31:3b:eb:12:f4:fa:1e:98:6d:45: b9:f0:79:dc:db:d8:06:e8:25:ac:9e:32:63:39:74:1d:bc:f0: c5:fc:c8:8e:5f:08:7c:be:96:e3:db:5f:fc:d2:87:b1:88:99: 95:29:16:07:d1:f4:4f:c3:9f:da:48:e9:3b:58:74:be:f2:b4: f5:16:b0:0a:25:7b:8a:7c:62:d5:19:04:28:14:69:9f:e7:68: d5:70:e7:84:d7:2e:13:3d:0b:1e:0d:bc:eb:6b:1b:cb:cf:01: a5:77:fb:d1:2d:fc:1a:4f:89:71:46:e7:09:78:50:a5:fb:2f: 23:dc:35:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzR96Vo6YlsnBxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWRlNzZiYTctZGE5OC00NjQxLTk0ZDctNjQwNDc3YmYwOWJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6IrWciw0xk8SzxJQEMWws/44OEkItbu9xAMF ZMoZcf4wep/zaUaV0kBIR9H9lY5Jr8rB1d2eN2JQbMgLWAM+My7YRTvkrsyucuIL eAiwHIMxer/2+pQ7TfRbX430iwulje9yZS+7G4HQGxb3FwdsbIurKI4voFvfBRMk ERbGGF9DK386LUx7+4qyJVjiELwNlJD7gU3BeRI+ITT5I8C0g74Sfyfg6N9jpoYa EKOXe7hQEvjgRrlgilrIaPmQv+FY1gA4TJFwlXsfYsDXvoD7xRcUa0iU4fiJh0R1 noxm2INldbhewdTOVwEGslFn2jicA5EraDIT/yMbrLAexaGiVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARsGLf52Y37ADRaOXBxE5Z2TR2nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTk1NWViMDktOGYxMi0z OTM0LTg1NGQtZmIzNTkyMTAxMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANKKYBwbBNygD5ucJ4PU9gjYT5yCHKbOYMnzpHXRGF605lYl4SvnljzT RHBzAgH1+7D70nL9AR9hl3PCqERuiwSkNbF4GZHGQjDjtw1vtDzZ3E+JN3h5D679 ySuk+6SXKw/f7/Q+CZL1FaYS3SepUZGJlgegbiW2rXqraDY5rsxSK1Ie2gOpMTvr EvT6HphtRbnwedzb2AboJayeMmM5dB288MX8yI5fCHy+luPbX/zSh7GImZUpFgfR 9E/Dn9pI6TtYdL7ytPUWsAole4p8YtUZBCgUaZ/naNVw54TXLhM9Cx4NvOtrG8vP AaV3+9Et/BpPiXFG5wl4UKX7LyPcNes= -----END CERTIFICATE-----Generated at Mon Oct 20 02:54:11 2025 by rpki-client