$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa File: e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa (raw, json) Hash identifier: 4nbm+whEMSlPFAEyGFWYAczVXFuybMSASU92L8q5jFQ= Subject key identifier: 2D:07:5E:11:D1:06:D1:88:9E:1B:55:A4:61:95:6B:F0:75:46:BE:4A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE1C277B5F88BF2F65050 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e1:c2:77:b5:f8:8b:f2:f6:50:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c49eaf10-b854-4567-8316-31afdcd2ba52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:cb:d5:25:57:fc:bc:2b:00:8f:f9:ec:cc: e9:68:82:a9:01:ca:75:13:bc:7c:5f:59:74:e4:08: b5:ac:83:d8:c3:76:56:09:a9:54:30:56:77:c0:21: 8a:ae:82:52:39:e2:28:02:f1:2f:59:c7:fe:bd:b0: 02:fb:41:3f:ac:87:e9:b4:b8:74:0e:84:10:08:fa: e8:af:e4:8c:bc:d8:0f:a2:7b:40:26:c1:b3:55:b8: c3:23:2f:eb:58:89:9a:50:43:d6:59:42:0e:ad:3a: e8:9d:6a:95:dd:2d:74:60:01:78:68:05:f3:a4:d5: b1:0f:c3:42:23:a2:5a:49:4f:9a:d8:33:f6:ba:11: d6:48:bc:8f:fa:69:3f:67:84:a3:f8:44:74:c8:9c: 82:58:37:b5:7f:38:66:9b:69:fe:b7:d6:6c:17:dd: a0:57:c0:1b:ad:26:2e:fa:b0:f2:de:df:e9:51:2b: 36:7a:b4:88:a8:23:4e:47:5a:07:66:f9:10:25:df: 41:a8:91:51:c7:05:63:b7:95:f0:0e:7e:9e:6b:2b: 9e:e2:e6:8f:e1:37:40:79:0c:a4:8b:62:39:59:6c: e4:4e:cc:5f:f0:73:59:b4:5c:77:53:ee:98:19:ba: 68:61:28:ce:62:03:5c:0c:19:c2:19:f1:cb:bd:a8: cd:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:07:5E:11:D1:06:D1:88:9E:1B:55:A4:61:95:6B:F0:75:46:BE:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e998aa95-f338-3bfc-8620-0fa3a8eb638d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:73:d6:aa:4b:c9:e2:76:be:a0:14:5e:85:f9:cf:e1:ed:68: 7c:bf:2f:9f:36:d8:6c:7f:53:3c:0a:e8:05:b1:4e:c2:6d:7d: f7:0b:cc:8d:6f:27:f3:66:45:06:d0:cc:66:d1:66:84:63:b9: 6b:38:55:a7:22:30:16:a3:6e:6e:3d:35:2a:d9:53:8b:f2:b3: 28:ee:e4:2f:d1:d5:a9:ee:19:77:e2:5c:7a:29:db:76:a4:89: 16:30:a5:e2:0d:95:67:a9:70:f4:94:49:91:ee:3e:8c:e0:22: 95:43:1f:a4:b1:e8:a5:e9:d9:95:4a:a0:48:4b:4a:25:72:b7: e9:db:70:c0:63:29:33:13:5a:97:76:1e:c2:ef:2b:ee:8a:1f: eb:51:e1:6d:04:1f:cc:d1:bc:7a:4e:89:b4:bf:61:7d:4b:45: 8d:fe:77:63:6f:59:b8:09:3b:d5:f7:c9:90:75:5f:22:25:96: fd:f2:96:d4:a9:c8:2d:38:65:68:02:ec:08:25:df:7b:a5:a8: 0a:cd:d3:3b:5f:96:93:46:a9:2b:b0:ea:e5:44:8f:15:6d:6c: 5c:0a:42:df:7e:ee:ee:a1:b6:98:9d:b3:64:a8:62:a6:65:44: 81:c9:bc:8e:49:68:51:f4:cc:94:04:c6:58:35:ff:1e:c2:67: 82:3f:92:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeHCd7X4i/L2UFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzQ5ZWFmMTAtYjg1NC00NTY3LTgzMTYtMzFhZmRjZDJiYTUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMnL1SVX/LwrAI/57MzpaIKpAcp1E7x8X1l0 5Ai1rIPYw3ZWCalUMFZ3wCGKroJSOeIoAvEvWcf+vbAC+0E/rIfptLh0DoQQCPro r+SMvNgPontAJsGzVbjDIy/rWImaUEPWWUIOrTronWqV3S10YAF4aAXzpNWxD8NC I6JaSU+a2DP2uhHWSLyP+mk/Z4Sj+ER0yJyCWDe1fzhmm2n+t9ZsF92gV8AbrSYu +rDy3t/pUSs2erSIqCNOR1oHZvkQJd9BqJFRxwVjt5XwDn6eayue4uaP4TdAeQyk i2I5WWzkTsxf8HNZtFx3U+6YGbpoYSjOYgNcDBnCGfHLvajN8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC0HXhHRBtGInhtVpGGVa/B1Rr5KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTk5OGFhOTUtZjMzOC0z YmZjLTg2MjAtMGZhM2E4ZWI2MzhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAFz1qpLyeJ2vqAUXoX5z+HtaHy/L5822Gx/UzwK6AWxTsJtffcLzI1v J/NmRQbQzGbRZoRjuWs4VaciMBajbm49NSrZU4vysyju5C/R1anuGXfiXHop23ak iRYwpeINlWepcPSUSZHuPozgIpVDH6Sx6KXp2ZVKoEhLSiVyt+nbcMBjKTMTWpd2 HsLvK+6KH+tR4W0EH8zRvHpOibS/YX1LRY3+d2NvWbgJO9X3yZB1XyIllv3yltSp yC04ZWgC7Agl33ulqArN0ztflpNGqSuw6uVEjxVtbFwKQt9+7u6htpids2SoYqZl RIHJvI5JaFH0zJQExlg1/x7CZ4I/kjk= -----END CERTIFICATE-----Generated at Mon Oct 20 02:24:34 2025 by rpki-client