$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4f689e6-8c1b-31e3-b16c-9aa10c7263a7.roa File: f4f689e6-8c1b-31e3-b16c-9aa10c7263a7.roa (raw, json) Hash identifier: Op97PXrpHsT8z2w+UP3S8pK3oaQCfvZE4eEUkN6HroA= Subject key identifier: C5:79:B1:D2:5F:82:6B:3A:2E:13:4E:C5:63:B3:D8:2B:B2:EA:39:96 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD4BB0E15CF7D098AA4C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4f689e6-8c1b-31e3-b16c-9aa10c7263a7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 198.45.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:4b:b0:e1:5c:f7:d0:98:aa:4c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dea39172-802b-428c-b245-ead294675acf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:bd:d7:91:c8:a9:eb:f3:87:63:45:cc:25:25: 8f:f6:00:2f:0b:6e:05:00:8a:74:86:40:c4:ff:8d: 71:81:05:87:3a:2b:df:d3:21:64:d1:6d:d2:a7:d5: b1:24:37:b9:43:73:ea:a0:f2:b5:fe:18:4e:74:6b: c5:39:de:2f:f6:d2:c7:d7:17:cd:af:0b:ca:62:d8: de:e3:c5:d6:1f:65:44:bd:ca:ee:92:d7:55:73:eb: b8:33:63:c7:e5:36:54:89:90:41:56:1c:bd:bc:cd: f5:8f:d4:df:e7:94:7e:50:4b:a2:1c:86:c9:2e:b9: fb:2e:e7:05:ac:29:16:b7:b9:08:66:2e:43:3e:a3: d3:9f:28:f5:fc:6c:be:1c:e9:02:e9:38:f1:4b:1d: f5:93:28:42:63:44:82:30:83:85:b6:bf:ff:47:a1: dd:d5:2f:98:bd:23:4e:5e:c5:3e:89:af:ce:98:6b: a7:28:22:10:a2:b9:cf:a8:de:a9:fd:1d:74:10:03: ea:11:8f:27:9f:fb:50:12:e2:b7:1a:b7:97:51:1a: 76:a6:ba:b4:f0:e8:d0:4d:40:43:d0:52:a1:a1:55: 82:5c:ac:d4:c0:b1:b0:55:3c:bd:89:b3:0f:c9:5d: 79:b5:cb:55:eb:af:c9:3e:61:5a:2f:46:96:b4:e0: 5a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:B1:D2:5F:82:6B:3A:2E:13:4E:C5:63:B3:D8:2B:B2:EA:39:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f4f689e6-8c1b-31e3-b16c-9aa10c7263a7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:67:72:cb:79:d5:33:16:f0:f4:e5:78:01:b3:ee:cd:74:f4: 41:8e:9b:c6:b6:55:94:05:af:56:b5:67:54:49:59:85:27:f1: 66:76:5f:51:d9:47:7f:19:ec:54:68:48:bb:a2:30:93:5d:bd: 74:e4:81:5e:c2:8f:a7:67:dd:76:fd:06:c2:dd:16:55:91:96: 24:5f:eb:d4:83:34:3d:f9:fb:9a:00:97:9a:63:d6:29:82:14: 55:51:13:ea:0f:4c:01:fe:e1:17:95:23:91:9c:f0:d3:87:c1: ec:93:2e:bd:1c:eb:7a:2b:b6:22:1c:b3:67:b6:15:49:c7:e0: 46:72:19:cc:91:4a:a8:20:f1:a9:1d:2d:b8:86:6e:f8:76:1f: cb:13:e7:09:02:c0:e1:fb:29:89:f5:63:71:cb:75:c9:e5:87: 11:a9:10:22:27:a5:ae:f2:71:e8:08:96:0d:78:0f:b9:e7:42: 76:d3:31:ec:89:25:3c:32:a9:5a:f7:7d:35:f6:93:a2:0a:5a: f4:88:d4:d1:57:89:c7:6b:68:16:00:2d:f8:d8:e6:ba:7a:2e: 1c:fd:b3:ad:4a:59:17:6d:4e:10:50:c7:1a:6c:27:1d:dc:34: 17:88:ec:3e:4e:3f:90:8a:c6:4b:d5:d1:f7:f4:fc:8c:70:10: b2:9f:64:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzUuw4Vz30JiqTIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGVhMzkxNzItODAyYi00MjhjLWIyNDUtZWFkMjk0Njc1YWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgr3Xkcip6/OHY0XMJSWP9gAvC24FAIp0hkDE /41xgQWHOivf0yFk0W3Sp9WxJDe5Q3PqoPK1/hhOdGvFOd4v9tLH1xfNrwvKYtje 48XWH2VEvcruktdVc+u4M2PH5TZUiZBBVhy9vM31j9Tf55R+UEuiHIbJLrn7LucF rCkWt7kIZi5DPqPTnyj1/Gy+HOkC6TjxSx31kyhCY0SCMIOFtr//R6Hd1S+YvSNO XsU+ia/OmGunKCIQornPqN6p/R10EAPqEY8nn/tQEuK3GreXURp2prq08OjQTUBD 0FKhoVWCXKzUwLGwVTy9ibMPyV15tctV66/JPmFaL0aWtOBaowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMV5sdJfgms6LhNOxWOz2Cuy6jmWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjRmNjg5ZTYtOGMxYi0z MWUzLWIxNmMtOWFhMTBjNzI2M2E3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAERncst51TMW8PTleAGz7s109EGOm8a2VZQFr1a1Z1RJWYUn8WZ2X1HZ R38Z7FRoSLuiMJNdvXTkgV7Cj6dn3Xb9BsLdFlWRliRf69SDND35+5oAl5pj1imC FFVRE+oPTAH+4ReVI5Gc8NOHweyTLr0c63ortiIcs2e2FUnH4EZyGcyRSqgg8akd LbiGbvh2H8sT5wkCwOH7KYn1Y3HLdcnlhxGpECInpa7ycegIlg14D7nnQnbTMeyJ JTwyqVr3fTX2k6IKWvSI1NFXicdraBYALfjY5rp6Lhz9s61KWRdtThBQxxpsJx3c NBeI7D5OP5CKxkvV0ff0/IxwELKfZLs= -----END CERTIFICATE-----Generated at Mon Oct 20 12:37:28 2025 by rpki-client