$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa File: 239c4599-2f7f-356a-86bd-f8a86a18042f.roa (raw, json) Hash identifier: MghlS56/cld+Fn/jk2CJ1lrVa36fWInC2hD7ZuBUkDk= Subject key identifier: 56:61:05:3E:D3:EB:31:88:78:C2:9D:20:64:0B:67:F6:00:B5:42:79 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD26271112B8519BA94680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:26:27:11:12:b8:51:9b:a9:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=42aa4481-cd5d-4db2-a9b4-6c17c0d13ec2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:20:b7:9e:e2:36:28:bd:69:62:d8:20:24:36: 7e:44:0f:c7:04:38:07:cf:1e:60:d4:ef:b3:28:95: fe:56:1c:c1:26:50:de:6e:92:80:fd:a1:8b:13:59: 01:46:a4:2b:7b:36:90:d3:57:96:29:97:4f:d7:7e: 2b:5b:d0:f2:64:c4:36:4b:42:c7:d0:89:91:a0:1a: 26:6f:37:c5:4c:49:e7:bf:fc:c7:67:76:cd:a9:34: ad:f8:e4:12:d5:8d:46:94:43:8e:aa:43:3d:ee:9c: c3:ac:a6:2b:65:eb:b4:47:63:5d:63:30:64:ab:c4: 6e:72:12:ba:12:42:78:54:c7:bb:c4:46:c2:4c:dd: 52:b0:26:9a:5a:cd:f0:1f:75:41:3b:e5:0a:70:8e: d5:b2:e1:43:8a:cb:93:e9:01:37:df:f8:12:ac:f4: ea:35:11:41:2c:a0:ee:c5:b8:51:6e:76:a4:05:56: 24:67:9a:ca:b6:c7:da:bb:ca:0e:2e:df:42:3c:e3: 64:1c:2f:9e:85:60:30:c0:79:f8:a4:49:8f:32:5c: b8:f9:cc:1a:4e:81:f7:53:0e:7c:49:a7:e7:db:0b: 95:9f:f8:62:4c:e4:91:a7:44:82:93:2b:ff:19:28: c5:63:f3:05:a2:0d:0f:1b:8f:29:a1:46:28:b8:03: 65:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:61:05:3E:D3:EB:31:88:78:C2:9D:20:64:0B:67:F6:00:B5:42:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:3e:69:c9:bb:55:45:cd:2a:c9:8f:b0:b4:4e:33:ef:8a:32: 03:98:9d:4c:34:a1:c5:bd:66:0e:72:7a:ba:85:e1:18:99:12: ee:c0:37:6f:e0:c9:68:e3:27:83:42:fa:76:22:3c:67:98:17: cd:57:c7:ff:c5:ee:59:88:ba:68:b4:a2:10:b0:6b:0b:de:07: 6d:c2:3b:de:22:e1:11:16:1c:41:f9:2d:5c:1b:e8:74:97:97: c6:73:57:40:05:b5:3a:cf:7b:77:aa:1a:0d:e8:16:a7:8d:62: 17:65:fc:fc:d7:1c:a9:20:0a:74:01:23:14:ea:64:c5:14:8e: 37:d5:32:02:c8:15:20:66:75:00:e4:9e:19:e7:0b:13:db:1b: a3:5e:27:8e:89:1c:77:e3:f4:2f:33:d0:af:6f:8c:6a:49:4b: ba:b1:d6:6c:b2:40:0c:fb:86:5e:ef:ea:4d:ab:bf:35:17:a9: d8:a0:d1:dd:4b:09:c7:30:ef:90:6e:9a:15:a4:09:ae:b3:41: 73:9b:87:0c:09:4e:38:bf:00:28:65:28:27:80:b1:1c:18:57: a2:0e:a3:13:85:65:39:3f:b0:d4:00:75:4d:74:fa:29:02:47: f7:8e:60:10:65:2e:37:cc:96:5e:bc:9d:37:ed:0d:8a:f7:a9: f2:b6:41:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSYnERK4UZupRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NDJhYTQ0ODEtY2Q1ZC00ZGIyLWE5YjQtNmMxN2MwZDEzZWMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSC3nuI2KL1pYtggJDZ+RA/HBDgHzx5g1O+z KJX+VhzBJlDebpKA/aGLE1kBRqQrezaQ01eWKZdP134rW9DyZMQ2S0LH0ImRoBom bzfFTEnnv/zHZ3bNqTSt+OQS1Y1GlEOOqkM97pzDrKYrZeu0R2NdYzBkq8RuchK6 EkJ4VMe7xEbCTN1SsCaaWs3wH3VBO+UKcI7VsuFDisuT6QE33/gSrPTqNRFBLKDu xbhRbnakBVYkZ5rKtsfau8oOLt9CPONkHC+ehWAwwHn4pEmPMly4+cwaToH3Uw58 Safn2wuVn/hiTOSRp0SCkyv/GSjFY/MFog0PG48poUYouANlAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZhBT7T6zGIeMKdIGQLZ/YAtUJ5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM5YzQ1OTktMmY3Zi0z NTZhLTg2YmQtZjhhODZhMTgwNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIQ+acm7VUXNKsmPsLROM++KMgOYnUw0ocW9Zg5yerqF4RiZEu7AN2/g yWjjJ4NC+nYiPGeYF81Xx//F7lmIumi0ohCwawveB23CO94i4REWHEH5LVwb6HSX l8ZzV0AFtTrPe3eqGg3oFqeNYhdl/PzXHKkgCnQBIxTqZMUUjjfVMgLIFSBmdQDk nhnnCxPbG6NeJ46JHHfj9C8z0K9vjGpJS7qx1myyQAz7hl7v6k2rvzUXqdig0d1L Cccw75BumhWkCa6zQXObhwwJTji/AChlKCeAsRwYV6IOoxOFZTk/sNQAdU10+ikC R/eOYBBlLjfMll68nTftDYr3qfK2QTQ= -----END CERTIFICATE-----Generated at Sun Oct 26 10:01:35 2025 by rpki-client