$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f4de36-5a5d-3582-85d4-0fc224e2765c.roa File: 17f4de36-5a5d-3582-85d4-0fc224e2765c.roa (raw, json) Hash identifier: yRT7sbNtb+5g2glL+VmmMVtFo8SUSzohf1nMZLCwhT4= Subject key identifier: 11:08:76:77:15:CD:E0:C6:C3:49:69:4D:97:A2:50:86:B5:BA:F1:60 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD884C901B9D203120580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f4de36-5a5d-3582-85d4-0fc224e2765c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d8:84:c9:01:b9:d2:03:12:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f820c3fc-1a7a-4896-96cf-613759fc3fce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:b5:1f:c6:20:fc:7b:61:af:8c:33:c9:49:11: 6c:05:df:54:8d:7a:c4:5d:a0:2c:97:dc:07:b6:b2: b1:94:7a:0f:fd:2e:f7:c3:f7:e6:eb:de:53:f8:9a: dd:57:9e:76:6d:54:32:9c:db:ee:2f:0a:4f:80:60: 95:35:11:9c:dc:b0:39:f8:80:09:24:5f:0f:47:42: b0:80:57:0a:2f:0a:4b:f2:71:41:35:ab:9a:62:5b: 01:b0:8c:b4:0a:ce:63:42:5b:68:a5:fa:95:da:ba: d8:75:3f:46:f9:15:d2:de:d7:da:47:60:39:d4:83: aa:aa:aa:ea:39:94:11:5e:26:b1:61:0e:5f:d2:51: ac:13:0c:5c:7a:80:95:4c:ed:00:03:06:28:04:de: 26:f4:60:0a:18:c5:57:45:6a:ca:02:20:56:28:2e: 21:4b:ff:83:9c:46:ea:de:72:1d:b9:4d:7e:2c:5b: a3:e6:7c:3f:15:97:2c:cc:ec:11:6e:7e:b2:ad:c7: cf:04:a9:2e:10:74:ea:91:2f:46:51:5c:76:0f:2b: c2:37:cc:98:ec:9f:6c:1b:ff:8c:d7:01:4e:ba:16: ea:3c:59:8b:c9:41:d1:ea:a9:2e:07:26:1c:7f:66: 86:8e:76:0b:21:dc:56:67:c5:57:19:75:90:94:12: 46:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:08:76:77:15:CD:E0:C6:C3:49:69:4D:97:A2:50:86:B5:BA:F1:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17f4de36-5a5d-3582-85d4-0fc224e2765c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:b5:ae:9f:f1:8b:2b:bb:7a:5a:49:89:3c:9e:b9:28:6d:d8: 69:66:ae:58:e2:d5:1c:46:f5:03:a8:17:79:12:cf:1d:c0:de: 92:ea:87:bf:c2:d4:e6:41:5f:11:05:a1:99:f7:d7:47:ad:c1: a4:a0:db:d8:6c:58:8d:b6:30:cd:dd:92:8e:29:36:06:72:b3: 6f:bf:f7:ba:78:9d:55:5a:e9:06:44:44:ad:83:c8:a9:06:42: 10:54:0a:1b:c6:f5:d2:6d:a7:e4:b2:9e:dd:f8:cd:2f:d9:b7: 7d:cc:83:3f:53:74:1e:f7:1b:b6:80:cf:6d:04:91:56:c8:2b: 6d:82:42:bd:8f:07:22:0a:b9:a2:88:5e:7a:8b:3c:5b:8e:6b: 84:50:6c:08:2b:ed:d2:2e:38:93:6b:89:36:b4:11:9c:1c:c3: 0f:dc:62:df:72:e1:ce:66:aa:e4:a6:f3:0d:8d:0d:48:9f:88: d6:1c:4a:de:51:31:b9:78:d2:a9:af:9e:64:16:33:29:12:ff: c9:80:82:d4:9c:02:aa:a5:f6:24:08:a2:c0:06:23:be:e3:a1: 1b:30:24:85:59:7d:19:24:e3:c2:f9:76:90:03:53:f5:3a:02: e1:62:50:78:ce:a2:ac:7e:ee:bb:0d:c9:f1:ad:88:4c:e5:0e: 4a:aa:e2:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdiEyQG50gMSBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjgyMGMzZmMtMWE3YS00ODk2LTk2Y2YtNjEzNzU5ZmMzZmNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6LUfxiD8e2GvjDPJSRFsBd9UjXrEXaAsl9wH trKxlHoP/S73w/fm695T+JrdV552bVQynNvuLwpPgGCVNRGc3LA5+IAJJF8PR0Kw gFcKLwpL8nFBNauaYlsBsIy0Cs5jQltopfqV2rrYdT9G+RXS3tfaR2A51IOqqqrq OZQRXiaxYQ5f0lGsEwxceoCVTO0AAwYoBN4m9GAKGMVXRWrKAiBWKC4hS/+DnEbq 3nIduU1+LFuj5nw/FZcszOwRbn6yrcfPBKkuEHTqkS9GUVx2DyvCN8yY7J9sG/+M 1wFOuhbqPFmLyUHR6qkuByYcf2aGjnYLIdxWZ8VXGXWQlBJG3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBEIdncVzeDGw0lpTZeiUIa1uvFgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdmNGRlMzYtNWE1ZC0z NTgyLTg1ZDQtMGZjMjI0ZTI3NjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALC1rp/xiyu7elpJiTyeuSht2Glmrlji1RxG9QOoF3kSzx3A3pLqh7/C 1OZBXxEFoZn310etwaSg29hsWI22MM3dko4pNgZys2+/97p4nVVa6QZERK2DyKkG QhBUChvG9dJtp+Synt34zS/Zt33Mgz9TdB73G7aAz20EkVbIK22CQr2PByIKuaKI XnqLPFuOa4RQbAgr7dIuOJNriTa0EZwcww/cYt9y4c5mquSm8w2NDUifiNYcSt5R Mbl40qmvnmQWMykS/8mAgtScAqql9iQIosAGI77joRswJIVZfRkk48L5dpADU/U6 AuFiUHjOoqx+7rsNyfGtiEzlDkqq4jM= -----END CERTIFICATE-----Generated at Sun Oct 26 10:07:49 2025 by rpki-client