$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa File: 33271add-0348-3765-b5da-157fa92afbdc.roa (raw, json) Hash identifier: clrn+8dzxXcb8A9OXZMWwo9+II8Xxx0MKt35M7T5eeU= Subject key identifier: F9:4C:69:C9:63:F2:8A:FB:0C:E2:9C:FE:4A:3F:8F:31:00:B5:CB:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD2033356CD8845A836C00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:20:33:35:6c:d8:84:5a:83:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=746e905d-5459-4b30-8f4c-c1fe9aa64935 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:7f:c3:99:ed:1f:49:fa:a8:69:5a:d7:8b:33: d1:a5:6a:da:cb:00:78:7a:86:ac:4f:d4:df:bb:f9: 68:37:fb:f8:4a:fc:6d:85:e8:e3:ca:2e:ae:6d:1e: cf:01:93:a8:9d:1d:cb:8a:e9:2d:0c:df:b6:59:91: 97:5f:be:ce:71:92:66:1f:d8:31:0e:90:99:f6:c5: 87:71:63:f5:20:39:30:13:46:d2:ce:c7:74:01:2f: 23:49:7d:6a:bd:25:da:f6:30:e6:ec:3b:8a:dd:db: 96:ad:3f:7f:1f:c9:9e:2e:a0:8c:02:26:49:65:ca: 15:4f:2a:27:36:c9:bf:67:c3:f0:dc:4b:f4:e9:29: 5f:39:be:01:3d:f3:b2:51:49:59:7b:39:80:32:33: 93:0f:22:26:1f:1d:d1:80:ba:33:99:87:c4:4e:c0: 4f:54:b7:ff:74:53:5f:c8:e1:84:7c:cd:79:98:d0: d3:90:a3:ae:f5:f9:bb:36:97:ac:8d:5f:dd:8b:5a: 5c:a8:09:96:b8:b3:70:da:86:33:1b:31:7a:e0:0e: e8:b0:85:ae:0b:99:e8:be:7b:ca:cd:e3:23:b4:62: 6b:4d:ee:c0:00:1d:15:e8:60:b4:62:41:a6:ca:4a: c9:4b:73:a0:1d:9a:04:86:66:28:51:7a:d4:c4:09: 1f:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:4C:69:C9:63:F2:8A:FB:0C:E2:9C:FE:4A:3F:8F:31:00:B5:CB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33271add-0348-3765-b5da-157fa92afbdc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:80:80:88:a6:8b:94:9d:62:25:1a:dd:5d:45:7e:7a:d1:a0: 25:dd:7d:e4:ea:81:ef:6a:6a:2f:fb:16:ff:1d:7a:c9:ce:b0: 61:87:5f:08:a6:e1:fa:9c:76:b4:15:24:4b:4d:eb:33:ad:39: be:97:00:d1:bc:86:fc:a5:31:97:bd:a9:86:8a:69:d9:e7:77: d3:87:fa:d2:e5:61:8e:34:44:7a:5c:f3:9f:47:0e:00:fc:0b: 40:d2:36:90:f7:7c:de:0e:d1:f2:75:ca:46:96:68:cf:15:3c: d3:50:24:bd:bb:6e:1d:ed:7a:89:57:fe:3f:bf:06:7b:92:ef: 40:3e:48:fc:e3:35:9e:06:59:13:46:e7:8e:b6:c2:59:f3:7b: 40:71:8e:6e:ee:8d:66:fc:11:f0:ad:0d:ea:6e:71:72:32:72: a3:5b:10:b2:39:b7:87:6d:21:b8:0a:0a:35:98:a4:0c:c0:ec: 48:01:66:28:99:1b:2f:39:64:40:97:bf:fe:0e:f1:65:84:f2: 33:2d:60:6e:03:be:99:1a:89:f4:c2:6e:22:c2:c6:80:58:90: 47:45:64:13:5a:9a:a1:94:9e:05:5f:b4:da:c1:69:b0:6a:a0: 0f:5c:1f:f7:71:bb:9b:53:36:1b:ca:9b:2a:f1:28:3b:bd:dc: 24:54:e6:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSAzNWzYhFqDbAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NzQ2ZTkwNWQtNTQ1OS00YjMwLThmNGMtYzFmZTlhYTY0OTM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAon/Dme0fSfqoaVrXizPRpWraywB4eoasT9Tf u/loN/v4Svxthejjyi6ubR7PAZOonR3LiuktDN+2WZGXX77OcZJmH9gxDpCZ9sWH cWP1IDkwE0bSzsd0AS8jSX1qvSXa9jDm7DuK3duWrT9/H8meLqCMAiZJZcoVTyon Nsm/Z8Pw3Ev06SlfOb4BPfOyUUlZezmAMjOTDyImHx3RgLozmYfETsBPVLf/dFNf yOGEfM15mNDTkKOu9fm7NpesjV/di1pcqAmWuLNw2oYzGzF64A7osIWuC5novnvK zeMjtGJrTe7AAB0V6GC0YkGmykrJS3OgHZoEhmYoUXrUxAkfPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPlMaclj8or7DOKc/ko/jzEAtctDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzMyNzFhZGQtMDM0OC0z NzY1LWI1ZGEtMTU3ZmE5MmFmYmRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB2AgIimi5SdYiUa3V1FfnrRoCXdfeTqge9qai/7Fv8desnOsGGHXwim 4fqcdrQVJEtN6zOtOb6XANG8hvylMZe9qYaKadnnd9OH+tLlYY40RHpc859HDgD8 C0DSNpD3fN4O0fJ1ykaWaM8VPNNQJL27bh3teolX/j+/BnuS70A+SPzjNZ4GWRNG 5462wlnze0Bxjm7ujWb8EfCtDepucXIycqNbELI5t4dtIbgKCjWYpAzA7EgBZiiZ Gy85ZECXv/4O8WWE8jMtYG4DvpkaifTCbiLCxoBYkEdFZBNamqGUngVftNrBabBq oA9cH/dxu5tTNhvKmyrxKDu93CRU5sY= -----END CERTIFICATE-----Generated at Sun Oct 26 10:03:51 2025 by rpki-client