$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa File: f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa (raw, json) Hash identifier: z/SdkxaddWA4doxhJcib9udvhwh8vM+si7UuAdrjmTQ= Subject key identifier: 12:34:67:FB:EA:95:5A:27:7C:BC:85:AB:48:F3:3D:3E:F5:18:A6:36 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD60D3A98D2FBE8669100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.52.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d6:0d:3a:98:d2:fb:e8:66:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7402aaf1-84e3-4808-a3dc-62f5069e6011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4f:ea:fe:e0:40:7a:0d:ba:f3:29:da:5d:86: 3f:b7:b6:83:01:ac:08:5d:7b:e4:14:ac:83:af:c0: d8:fc:fe:d9:01:15:8a:c7:43:d2:85:66:c7:07:c6: cf:d9:61:cf:20:3a:5c:7c:80:90:b4:2d:b5:7f:c7: 66:e7:45:22:e6:d5:52:4a:34:53:0e:8f:ab:27:f1: a1:75:d2:9e:cf:a5:2c:b5:60:27:0d:a4:48:58:55: 66:fa:b3:78:e8:73:da:4f:98:34:68:e6:60:78:19: cf:52:d0:86:c8:94:88:6c:14:51:52:5e:1a:12:df: 33:8a:3c:2a:d8:03:f2:3a:f1:52:46:a4:28:6c:75: ac:16:03:36:61:8a:24:b7:4d:e3:61:4e:ea:2d:74: 9d:33:8b:56:26:20:57:81:99:34:03:05:ec:3a:a6: 4a:a6:5b:db:f6:26:cf:32:b7:f8:ae:a8:7f:95:c1: 6a:ef:51:ab:c4:47:92:57:6b:9b:dd:e3:3c:0b:2f: 07:09:67:04:ec:b3:c6:24:dd:f4:46:b4:36:eb:6f: 09:27:52:cf:d3:5b:a1:6d:b9:19:6b:7f:d9:6b:38: ad:07:32:22:65:00:c3:b9:b4:dd:d8:60:36:50:7f: b8:2e:f6:b8:04:46:c2:96:a1:c8:c7:4f:e3:f1:92: 9b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:34:67:FB:EA:95:5A:27:7C:BC:85:AB:48:F3:3D:3E:F5:18:A6:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f0fc40b1-f9d6-3300-a8ba-387f9a951ae8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.52.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cb:75:af:b5:f1:47:c2:02:bd:92:31:d8:42:6a:49:14:89: 63:0a:48:1d:ab:66:69:cd:04:eb:be:79:77:c5:ad:d0:c3:fd: 40:25:aa:95:66:e8:b0:73:01:bc:50:1d:f1:86:85:10:f0:d7: b3:b4:51:7d:78:3c:5c:84:24:38:81:ff:a2:5c:7a:52:bc:ac: f5:4e:86:c4:37:2b:e5:13:3c:3f:be:18:91:92:17:a9:34:0f: a9:84:49:24:ce:23:82:81:1a:23:ba:8e:84:86:fd:ca:73:e4: d6:a6:9d:f0:e1:db:3e:ad:58:8a:2d:c1:64:73:07:96:39:24: 88:02:33:80:25:00:5f:ba:a9:7f:ca:58:9b:ee:39:c1:76:5b: 72:f5:19:fa:31:b6:92:c1:82:a0:9a:b3:77:d1:b1:aa:68:11: ea:b4:64:3a:46:85:48:0b:78:ae:0e:f0:be:a5:87:f8:41:b0: d3:ac:f7:da:4f:a9:d8:6f:b3:30:06:c6:ba:24:27:5e:6d:6f: e7:87:f7:c3:46:c4:4d:43:3b:e1:03:be:f1:8a:af:33:ce:57: 30:b6:81:b9:de:39:75:1c:07:2d:f4:55:a0:48:e5:ab:ac:6a: 04:ca:12:3c:73:10:c5:ed:52:5c:eb:20:33:98:d2:02:a5:c5: 46:30:a4:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdYNOpjS++hmkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzQwMmFhZjEtODRlMy00ODA4LWEzZGMtNjJmNTA2OWU2MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE/q/uBAeg268ynaXYY/t7aDAawIXXvkFKyD r8DY/P7ZARWKx0PShWbHB8bP2WHPIDpcfICQtC21f8dm50Ui5tVSSjRTDo+rJ/Gh ddKez6UstWAnDaRIWFVm+rN46HPaT5g0aOZgeBnPUtCGyJSIbBRRUl4aEt8zijwq 2APyOvFSRqQobHWsFgM2YYokt03jYU7qLXSdM4tWJiBXgZk0AwXsOqZKplvb9ibP Mrf4rqh/lcFq71GrxEeSV2ub3eM8Cy8HCWcE7LPGJN30RrQ2628JJ1LP01uhbbkZ a3/ZazitBzIiZQDDubTd2GA2UH+4Lva4BEbClqHIx0/j8ZKbuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBI0Z/vqlVonfLyFq0jzPT71GKY2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjBmYzQwYjEtZjlkNi0z MzAwLWE4YmEtMzg3ZjlhOTUxYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADLda+18UfCAr2SMdhCakkUiWMKSB2rZmnNBOu+eXfFrdDD/UAlqpVm 6LBzAbxQHfGGhRDw17O0UX14PFyEJDiB/6JcelK8rPVOhsQ3K+UTPD++GJGSF6k0 D6mESSTOI4KBGiO6joSG/cpz5NamnfDh2z6tWIotwWRzB5Y5JIgCM4AlAF+6qX/K WJvuOcF2W3L1GfoxtpLBgqCas3fRsapoEeq0ZDpGhUgLeK4O8L6lh/hBsNOs99pP qdhvszAGxrokJ15tb+eH98NGxE1DO+EDvvGKrzPOVzC2gbneOXUcBy30VaBI5aus agTKEjxzEMXtUlzrIDOY0gKlxUYwpIE= -----END CERTIFICATE-----Generated at Mon Oct 20 15:00:43 2025 by rpki-client