$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa File: ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa (raw, json) Hash identifier: 1l5n8W8DrGqg6Fd3qg27ZVp2z0OPAYdFvhtBR/Yumn0= Subject key identifier: 2E:4C:13:6C:A6:AB:2F:0F:97:5F:D9:CE:3F:1A:12:AA:7F:95:E9:66 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE3F052E2EC62D9E06180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.227.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e3:f0:52:e2:ec:62:d9:e0:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=af84ac59-6059-4313-96d6-812d5081ec66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:b2:f2:ec:6a:fe:28:64:82:56:f1:5b:cb:33: 13:e8:38:e0:66:68:b9:7f:36:fa:b8:7d:f2:e4:0a: 11:86:f9:e5:f5:47:e8:cf:98:b7:5d:f0:11:eb:c0: 57:c4:7a:1f:c5:41:67:a7:1b:3b:1a:a4:96:8e:e6: 88:da:bf:62:a9:59:79:01:e8:f8:07:21:ff:a4:f2: a9:18:2c:08:a2:e2:3d:54:98:b1:c5:f5:e5:6a:e5: 22:62:35:ea:cc:8e:f1:a1:98:aa:c3:5c:a1:42:40: 01:e9:96:d6:eb:1c:80:31:3b:cc:54:f0:c2:5a:51: 26:ea:e7:b4:51:7f:73:ae:60:e6:c5:7b:e1:ae:71: c9:38:bc:16:46:83:95:17:82:fa:8d:3d:5a:fc:cd: 9c:7b:b5:0a:a9:6a:a6:41:a8:f5:5e:c1:7e:d0:b9: ca:85:22:1b:97:c9:39:df:43:9d:71:32:43:3c:a7: ec:7f:75:04:9a:e7:d4:e1:92:49:cd:b5:36:8a:44: 02:e2:ce:d2:15:44:44:d5:7d:21:db:cc:ea:d3:50: 6f:c5:90:72:9d:e3:ae:87:bb:31:5a:3e:cc:45:8e: 0e:3f:a8:07:1d:91:84:d7:b1:b5:8f:e8:4f:f5:c1: 7e:9b:f0:ac:59:5d:c9:a4:7f:35:53:34:20:bd:09: 20:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4C:13:6C:A6:AB:2F:0F:97:5F:D9:CE:3F:1A:12:AA:7F:95:E9:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ffe9dff8-0944-3e58-9da5-ce8b6f5f1481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.227.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:62:fe:14:51:21:23:d1:21:95:aa:2b:d9:24:3f:5e:dc:3d: d0:05:46:1a:24:bf:f5:40:b8:82:76:0b:f6:16:13:d7:df:52: 45:eb:e0:c1:7e:c8:83:be:08:aa:af:87:ca:76:8d:25:45:93: a0:0f:30:af:e5:82:81:34:72:8a:a8:5f:6f:b5:eb:0f:95:cb: 87:52:c5:f9:f7:1e:18:e0:f3:8c:42:d1:a4:d0:10:0c:0d:fb: a4:71:62:b5:d2:45:3a:3e:06:41:0b:6d:6e:af:40:e2:71:fb: cf:3a:45:3f:61:b2:ff:90:0e:c9:62:1f:58:e3:73:72:63:f8: cd:e4:e7:f5:7f:be:96:33:15:e4:19:e3:25:3f:cf:33:e2:5b: 24:3d:c2:c4:94:51:22:56:b8:b3:b7:85:c3:1d:51:cf:a2:84: 4a:57:a5:17:6e:85:1b:2e:ae:7d:73:ed:0f:f4:94:b4:21:a1: 08:2a:26:ba:8e:8c:a3:90:72:e5:42:35:92:c7:59:c1:4a:95: f7:46:df:ac:0b:78:a9:ac:52:ec:1d:31:68:3f:3b:5b:be:83: 05:59:e0:5d:4e:1d:4f:6b:01:e1:a3:95:ba:08:1f:af:c3:73: db:a7:c1:d8:b3:de:c7:71:48:c2:fe:e4:94:7b:ec:2a:18:5b: 96:89:c2:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzePwUuLsYtngYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWY4NGFjNTktNjA1OS00MzEzLTk2ZDYtODEyZDUwODFlYzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbLy7Gr+KGSCVvFbyzMT6DjgZmi5fzb6uH3y 5AoRhvnl9Ufoz5i3XfAR68BXxHofxUFnpxs7GqSWjuaI2r9iqVl5Aej4ByH/pPKp GCwIouI9VJixxfXlauUiYjXqzI7xoZiqw1yhQkAB6ZbW6xyAMTvMVPDCWlEm6ue0 UX9zrmDmxXvhrnHJOLwWRoOVF4L6jT1a/M2ce7UKqWqmQaj1XsF+0LnKhSIbl8k5 30OdcTJDPKfsf3UEmufU4ZJJzbU2ikQC4s7SFURE1X0h28zq01BvxZByneOuh7sx Wj7MRY4OP6gHHZGE17G1j+hP9cF+m/CsWV3JpH81UzQgvQkgZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5ME2ymqy8Pl1/Zzj8aEqp/lelmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmZlOWRmZjgtMDk0NC0z ZTU4LTlkYTUtY2U4YjZmNWYxNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAApi/hRRISPRIZWqK9kkP17cPdAFRhokv/VAuIJ2C/YWE9ffUkXr4MF+ yIO+CKqvh8p2jSVFk6APMK/lgoE0coqoX2+16w+Vy4dSxfn3Hhjg84xC0aTQEAwN +6RxYrXSRTo+BkELbW6vQOJx+886RT9hsv+QDsliH1jjc3Jj+M3k5/V/vpYzFeQZ 4yU/zzPiWyQ9wsSUUSJWuLO3hcMdUc+ihEpXpRduhRsurn1z7Q/0lLQhoQgqJrqO jKOQcuVCNZLHWcFKlfdG36wLeKmsUuwdMWg/O1u+gwVZ4F1OHU9rAeGjlboIH6/D c9unwdiz3sdxSML+5JR77CoYW5aJwno= -----END CERTIFICATE-----Generated at Mon Oct 20 02:26:24 2025 by rpki-client