$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa File: fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa (raw, json) Hash identifier: lupvlTU8VJa9oCwg1V7jBymNSl1wk+xCdXEhECblddg= Subject key identifier: 04:70:25:7B:BC:97:B5:B1:19:23:81:96:26:03:A8:71:B1:2A:59:22 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1CEC00D6AB6483F7AD70 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1c:ec:00:d6:ab:64:83:f7:ad:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4a1b8755-8cb8-40bf-92a7-af0c7ccdfd7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a4:c4:e9:ba:07:23:6e:00:ab:e5:9b:5b:92: de:6b:0c:4c:87:2a:89:7c:df:09:15:83:25:46:fa: 26:48:fc:59:8a:15:59:5c:4f:f4:ea:a3:30:7c:66: 24:8b:64:47:04:22:14:0f:42:71:6b:a2:36:91:8b: 04:a4:68:64:4b:4c:af:a1:dc:04:57:11:ff:e7:cd: ec:c3:76:45:be:37:3e:e1:2a:c6:9f:a2:89:55:8f: cb:50:eb:3f:9a:4d:65:32:69:f7:75:11:e3:8e:fa: 96:74:e9:62:fd:f9:a7:ab:de:3f:f5:25:14:4e:fb: e5:03:87:17:ff:ae:a9:a3:d0:4b:f1:7c:a6:a5:b2: 4f:8b:03:dd:79:e2:fe:6a:a1:55:a3:d4:2f:31:69: d2:d1:08:74:df:ec:d8:55:85:58:1f:8c:47:ca:20: ae:e3:8f:d2:34:06:2f:ab:ba:66:d1:d6:bb:93:7e: 41:13:16:9c:34:0e:4c:02:32:ad:08:d9:e9:52:05: fa:9e:b1:0d:be:6f:42:11:cb:0a:66:e1:df:4a:92: f5:c6:e7:ea:57:7e:d2:4e:9f:7d:7f:28:8d:e3:21: b7:54:a2:4f:b8:9b:3a:74:b2:05:0e:21:90:55:7e: 50:09:b4:c3:c2:ec:ff:b7:1f:5f:83:19:e4:06:f9: da:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:70:25:7B:BC:97:B5:B1:19:23:81:96:26:03:A8:71:B1:2A:59:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fbff48dd-87f6-3825-a9a9-4c06cf242be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:78:89:e5:66:ba:32:81:1a:ed:d0:39:6e:46:9c:24:55:76: 56:25:61:82:60:52:d0:fd:97:3b:d9:ef:b6:a0:7a:2a:82:0f: 4f:2c:ab:8c:c6:88:ee:ad:3f:75:81:21:db:91:a8:e3:57:a5: a2:ed:1d:b1:fc:6e:43:4e:ad:7d:9e:08:57:06:d2:97:f8:bd: e0:f4:f9:09:72:b4:f5:8d:6d:26:74:47:f3:26:68:1c:08:c4: 31:e5:b1:c1:b0:f7:17:24:3f:17:a9:06:ec:6a:80:29:43:55: 37:8c:38:a1:92:3c:ee:d3:38:5c:7a:a9:f1:4d:27:e7:b4:74: 54:d2:59:f4:56:9e:9c:4e:5d:74:0d:6d:42:e3:76:ad:cc:5b: 90:c7:76:c7:34:64:4d:22:d1:23:e3:53:91:03:85:8c:5b:10: 8b:5e:e0:55:84:e7:bc:3d:f0:6c:40:fa:6f:22:15:ea:45:2f: 56:aa:d6:ef:64:45:9e:3e:f5:ce:4b:ea:99:51:83:cd:10:9b: 64:df:01:71:6d:38:18:ee:e5:a1:93:75:00:79:54:66:e2:96: 7d:be:e9:04:c9:2d:81:ea:ac:18:38:19:02:31:45:3a:83:07: 67:8c:22:0a:9c:07:5d:2b:0e:2b:f9:f0:35:f3:4d:9d:d1:04: 25:96:f9:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRzsANarZIP3rXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGExYjg3NTUtOGNiOC00MGJmLTkyYTctYWYwYzdjY2RmZDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaTE6boHI24Aq+WbW5LeawxMhyqJfN8JFYMl RvomSPxZihVZXE/06qMwfGYki2RHBCIUD0Jxa6I2kYsEpGhkS0yvodwEVxH/583s w3ZFvjc+4SrGn6KJVY/LUOs/mk1lMmn3dRHjjvqWdOli/fmnq94/9SUUTvvlA4cX /66po9BL8XympbJPiwPdeeL+aqFVo9QvMWnS0Qh03+zYVYVYH4xHyiCu44/SNAYv q7pm0da7k35BExacNA5MAjKtCNnpUgX6nrENvm9CEcsKZuHfSpL1xufqV37STp99 fyiN4yG3VKJPuJs6dLIFDiGQVX5QCbTDwuz/tx9fgxnkBvnasQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARwJXu8l7WxGSOBliYDqHGxKlkiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmJmZjQ4ZGQtODdmNi0z ODI1LWE5YTktNGMwNmNmMjQyYmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKp4ieVmujKBGu3QOW5GnCRVdlYlYYJgUtD9lzvZ77ageiqCD08sq4zG iO6tP3WBIduRqONXpaLtHbH8bkNOrX2eCFcG0pf4veD0+QlytPWNbSZ0R/MmaBwI xDHlscGw9xckPxepBuxqgClDVTeMOKGSPO7TOFx6qfFNJ+e0dFTSWfRWnpxOXXQN bULjdq3MW5DHdsc0ZE0i0SPjU5EDhYxbEIte4FWE57w98GxA+m8iFepFL1aq1u9k RZ4+9c5L6plRg80Qm2TfAXFtOBju5aGTdQB5VGbiln2+6QTJLYHqrBg4GQIxRTqD B2eMIgqcB10rDiv58DXzTZ3RBCWW+as= -----END CERTIFICATE-----Generated at Mon Oct 20 05:26:10 2025 by rpki-client