$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa File: 33d98de7-82e5-3294-87bd-da0c96c9fa35.roa (raw, json) Hash identifier: biubAKatcsjYy/NSpHbliz9mikjKfHynxNFs+XiSX1w= Subject key identifier: 61:8F:90:3A:AC:3F:39:5E:32:56:2C:82:05:F4:E0:1F:45:B8:3B:2B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD22B9EEFA0CA1BAEAE480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:22:b9:ee:fa:0c:a1:ba:ea:e4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=353ff030-0010-4e78-863f-a8a1168e2f33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:73:ed:be:fa:f3:e4:99:6b:15:0f:f6:47:75: 75:a7:5f:ee:51:ab:36:60:da:d2:64:00:7c:a6:ab: 7a:0c:46:e0:13:f6:a7:b9:05:cb:06:e7:e3:5b:37: 83:bb:3d:76:72:0b:23:c6:71:4c:f0:63:61:e6:72: 8f:fa:29:9c:bd:22:21:d5:55:b8:fb:7f:10:f4:b0: b5:e0:65:82:7c:f7:01:1b:08:1a:5f:80:3b:1c:db: 4f:80:09:75:bf:eb:ab:06:7d:b6:11:51:bb:40:8d: d4:ee:88:59:fe:c3:70:2b:d6:19:7a:e5:09:21:c3: 8e:67:37:f7:c4:31:e6:1b:7c:f3:22:7d:26:9e:d7: 2a:b3:ea:24:5e:ef:99:7f:86:e9:fd:fb:f5:06:d2: e5:d3:6c:11:2a:9d:6b:a7:1f:9d:21:dc:a4:e8:08: e1:b8:12:c2:05:db:26:52:bd:76:9b:f7:66:85:1c: bd:dc:b9:21:a1:a0:c4:a2:e2:4d:f1:94:88:07:2b: 1c:5e:6b:4b:c3:e7:d4:4a:06:b1:74:7d:e5:7a:de: e1:9f:95:15:42:a8:53:dc:0f:b3:e0:98:dd:88:1a: 8e:ca:7f:68:a0:57:33:f9:bb:c8:f9:c6:cc:da:0e: 2b:6d:3c:74:04:9f:af:11:96:a3:57:63:af:c4:a4: 88:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:8F:90:3A:AC:3F:39:5E:32:56:2C:82:05:F4:E0:1F:45:B8:3B:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/33d98de7-82e5-3294-87bd-da0c96c9fa35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ca:5c:38:56:cc:5f:35:f6:e8:67:b2:9f:1c:14:80:14:8d: c9:41:01:27:bd:1b:3e:bf:61:c8:cb:f5:a5:9f:04:78:22:fe: bb:8b:15:11:2d:d8:97:52:4f:b6:27:78:68:78:cb:00:bb:ef: 58:cf:8a:3b:48:5b:33:d8:85:7b:58:14:2f:52:fc:ae:30:f3: 90:d2:b0:d5:16:08:a0:26:4d:b2:a8:1b:df:1e:69:66:6d:70: ae:26:35:2b:2c:a1:f5:65:a0:54:5b:90:f2:44:7c:79:1a:f2: 77:62:2f:c4:be:ed:ad:f4:03:c0:5f:d2:f0:33:67:8a:ce:23: 88:1c:fa:93:07:fa:07:06:85:d7:66:28:0e:79:7f:95:6e:aa: 11:4b:83:53:50:04:40:ce:04:59:7a:cd:06:8c:37:ed:6a:d0: 3f:b0:b3:02:e0:6a:9e:44:04:e2:e3:c1:54:9a:8e:50:50:b2: b3:f9:19:b4:ac:da:12:17:b9:08:48:a6:90:7c:3a:5e:3d:67: 72:a1:f0:84:a3:7a:0c:84:5b:d9:a1:b8:fc:32:d7:56:24:71: ea:23:69:09:47:7b:ef:fd:11:9b:98:46:c2:fc:32:9c:4e:74: 89:84:d8:2c:57:60:56:38:7a:80:d6:00:75:ef:9b:36:d3:39: 68:9e:c6:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSK57voMobrq5IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MzUzZmYwMzAtMDAxMC00ZTc4LTg2M2YtYThhMTE2OGUyZjMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXPtvvrz5JlrFQ/2R3V1p1/uUas2YNrSZAB8 pqt6DEbgE/anuQXLBufjWzeDuz12cgsjxnFM8GNh5nKP+imcvSIh1VW4+38Q9LC1 4GWCfPcBGwgaX4A7HNtPgAl1v+urBn22EVG7QI3U7ohZ/sNwK9YZeuUJIcOOZzf3 xDHmG3zzIn0mntcqs+okXu+Zf4bp/fv1BtLl02wRKp1rpx+dIdyk6AjhuBLCBdsm Ur12m/dmhRy93LkhoaDEouJN8ZSIByscXmtLw+fUSgaxdH3let7hn5UVQqhT3A+z 4JjdiBqOyn9ooFcz+bvI+cbM2g4rbTx0BJ+vEZajV2OvxKSIuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGPkDqsPzleMlYsggX04B9FuDsrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzNkOThkZTctODJlNS0z Mjk0LTg3YmQtZGEwYzk2YzlmYTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPODMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLKXDhWzF819uhnsp8cFIAUjclBASe9Gz6/YcjL9aWfBHgi/ruLFREt 2JdST7YneGh4ywC771jPijtIWzPYhXtYFC9S/K4w85DSsNUWCKAmTbKoG98eaWZt cK4mNSssofVloFRbkPJEfHka8ndiL8S+7a30A8Bf0vAzZ4rOI4gc+pMH+gcGhddm KA55f5VuqhFLg1NQBEDOBFl6zQaMN+1q0D+wswLgap5EBOLjwVSajlBQsrP5GbSs 2hIXuQhIppB8Ol49Z3Kh8ISjegyEW9mhuPwy11YkceojaQlHe+/9EZuYRsL8MpxO dImE2CxXYFY4eoDWAHXvmzbTOWiexss= -----END CERTIFICATE-----Generated at Sun Oct 26 10:07:35 2025 by rpki-client