$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2bd5d46-7307-33ac-b3b9-486741b54e77.roa File: f2bd5d46-7307-33ac-b3b9-486741b54e77.roa (raw, json) Hash identifier: VUCKTXufCVrzbp1GK3aSowozKQRE6DvPY7WRug7NUNQ= Subject key identifier: BB:26:7F:93:61:D4:43:AD:23:7E:43:9D:C5:7C:96:7F:58:84:02:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE21F31074DAC86D26200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2bd5d46-7307-33ac-b3b9-486741b54e77.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e2:1f:31:07:4d:ac:86:d2:62:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=75843a24-b1bf-49e5-92a0-8577324692de Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:66:f9:d3:bf:17:f9:97:5a:a6:ab:ca:74: e7:57:b3:45:3e:6d:b3:7a:7c:ca:f2:5b:6d:16:78: f4:cf:f8:85:af:4e:31:cb:e5:55:9c:1e:64:a8:15: ba:f1:7f:9f:d8:80:a8:77:d9:25:d2:b2:cd:0e:3f: 4b:ce:6a:03:f5:33:e9:c5:84:b6:b5:e7:5b:e5:b4: 5f:52:d5:be:52:49:b5:a8:b6:07:fc:39:15:ab:5c: 33:fe:27:cf:40:c5:2b:b7:76:e1:80:5e:6e:c3:cd: 76:fd:80:6a:bb:ee:f3:d1:88:ab:8e:8c:72:e7:fd: b4:91:47:1b:4a:6c:0d:11:25:0c:d5:d2:b5:cb:b0: bb:5e:ba:22:dc:a7:34:5e:84:b6:66:02:f7:c6:d3: ab:94:04:7a:fa:4a:8b:28:75:dc:e7:c5:14:be:e7: 16:fa:36:2a:0f:30:28:59:d9:4b:0b:dc:f1:8c:43: 51:41:b9:e8:0a:ae:22:26:7b:95:b1:5d:04:c6:58: 3b:80:36:f7:91:84:8d:45:6f:69:7a:a1:d4:a9:84: b8:ce:35:87:55:2a:aa:83:39:f3:2b:e9:72:ae:bc: 77:c7:bc:d3:fb:5e:32:1f:25:7b:2b:ee:dc:80:26: cc:0a:87:64:85:85:a0:79:07:57:b7:ac:47:fa:3e: 6b:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:26:7F:93:61:D4:43:AD:23:7E:43:9D:C5:7C:96:7F:58:84:02:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f2bd5d46-7307-33ac-b3b9-486741b54e77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:9a:fe:73:b5:b3:f9:f2:e3:ff:d5:08:86:e3:8e:85:b3:80: da:c8:c3:ae:1c:79:d4:a1:50:cd:b2:62:39:f0:7f:7d:2c:d7: c6:9e:0b:96:60:a9:ba:a2:5c:99:82:0c:4f:ec:12:93:b3:87: d5:33:11:5b:2b:2b:51:f7:df:bb:b6:f3:52:63:86:b5:91:ab: 8b:84:fc:3d:02:95:2a:02:e9:a8:e4:50:04:49:2a:97:b5:26: 1f:10:a2:90:7a:5a:ad:74:d6:20:39:b1:d3:77:69:a9:31:34: 3e:d4:11:5f:0e:c1:db:a6:3e:9a:3b:8a:10:ec:74:a6:65:34: 1a:7c:e8:13:1e:9a:7f:29:e6:cd:29:16:6f:10:7c:5e:26:5a: a7:2f:ff:31:f3:60:4d:dc:e6:2f:a4:9c:e3:08:74:52:4a:72: 72:57:d3:c5:02:d9:ee:d0:70:9b:15:e6:f0:c8:67:03:16:12: c9:5b:aa:05:ad:bd:04:c8:32:59:bf:19:9c:11:bd:0a:d5:31: 5f:a5:70:bd:b7:7f:ca:be:08:83:35:c8:36:fd:10:0a:36:dc: 23:44:be:b9:ae:99:78:4b:42:2f:9e:c4:74:3e:55:5e:9a:1f: 96:91:48:31:8c:a0:8a:79:5f:b1:b2:9d:05:a9:bb:55:d3:fc: a7:d2:fd:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeIfMQdNrIbSYgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzU4NDNhMjQtYjFiZi00OWU1LTkyYTAtODU3NzMyNDY5MmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmfhm+dO/F/mXWqarynTnV7NFPm2zenzK8ltt Fnj0z/iFr04xy+VVnB5kqBW68X+f2ICod9kl0rLNDj9LzmoD9TPpxYS2tedb5bRf UtW+Ukm1qLYH/DkVq1wz/ifPQMUrt3bhgF5uw812/YBqu+7z0Yirjoxy5/20kUcb SmwNESUM1dK1y7C7Xroi3Kc0XoS2ZgL3xtOrlAR6+kqLKHXc58UUvucW+jYqDzAo WdlLC9zxjENRQbnoCq4iJnuVsV0Exlg7gDb3kYSNRW9peqHUqYS4zjWHVSqqgznz K+lyrrx3x7zT+14yHyV7K+7cgCbMCodkhYWgeQdXt6xH+j5rxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLsmf5Nh1EOtI35DncV8ln9YhAI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjJiZDVkNDYtNzMwNy0z M2FjLWIzYjktNDg2NzQxYjU0ZTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICa/nO1s/ny4//VCIbjjoWzgNrIw64cedShUM2yYjnwf30s18aeC5Zg qbqiXJmCDE/sEpOzh9UzEVsrK1H337u281JjhrWRq4uE/D0ClSoC6ajkUARJKpe1 Jh8QopB6Wq101iA5sdN3aakxND7UEV8OwdumPpo7ihDsdKZlNBp86BMemn8p5s0p Fm8QfF4mWqcv/zHzYE3c5i+knOMIdFJKcnJX08UC2e7QcJsV5vDIZwMWEslbqgWt vQTIMlm/GZwRvQrVMV+lcL23f8q+CIM1yDb9EAo23CNEvrmumXhLQi+exHQ+VV6a H5aRSDGMoIp5X7GynQWpu1XT/KfS/SI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:18 2025 by rpki-client