$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa File: 3507b290-125c-3f58-85ba-ed6602ee5ef5.roa (raw, json) Hash identifier: Puko1KAeKtOv1ONVjfR6sBdgUP40PIlJHBDVfArd7k8= Subject key identifier: 05:5F:43:7A:DA:F6:2C:50:E3:DB:77:15:49:10:7E:D4:93:EA:D2:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD19C9B3C1083967275F60 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:19:c9:b3:c1:08:39:67:27:5f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=de20ad29-09f8-4151-9417-54a8cb4aa5bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:0c:79:61:55:d7:93:49:0a:ec:3e:32:bc: a3:e4:ea:6e:9e:5b:ca:72:1a:ea:30:0b:1c:f4:a9: f6:f0:ee:9b:9b:99:a4:e0:0f:01:e4:ab:8d:0d:e8: a0:6f:51:bb:42:35:03:d6:59:e6:3e:ef:a3:0f:c6: a6:11:e7:1b:af:34:51:a7:34:1e:4b:ac:23:2d:97: 6d:e7:15:51:7a:52:7f:4f:3f:20:b0:05:ce:63:d6: 16:4a:41:76:20:3c:9a:f5:d9:23:fa:56:f6:db:53: f7:eb:dc:18:b6:b0:3e:72:95:cb:eb:66:6f:a8:ef: 78:38:74:04:67:5e:a5:cc:15:27:1c:ed:c9:8d:32: ef:e1:47:f2:6a:29:a9:27:ea:a6:1b:f0:b2:25:c5: fb:c2:ef:3c:f8:26:b9:5a:d8:29:32:3c:84:df:0c: 48:98:33:ce:11:a1:38:78:6a:8b:81:84:13:48:f3: 02:bb:45:71:8a:31:4a:89:14:4b:c2:38:18:5f:94: 55:7b:5a:e1:e9:4b:12:be:bc:d7:ef:c8:57:f3:42: 26:8a:b3:5b:6f:f2:2e:b7:bc:db:04:8b:b6:0c:2f: 0f:9e:82:f9:27:28:b5:84:76:bd:6d:86:78:89:2a: ee:1d:68:0d:b1:c4:51:a4:ed:5f:2f:b7:c0:b7:1b: 3f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5F:43:7A:DA:F6:2C:50:E3:DB:77:15:49:10:7E:D4:93:EA:D2:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3507b290-125c-3f58-85ba-ed6602ee5ef5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:a6:e3:31:0a:8f:cc:e2:31:32:2a:f9:53:03:b1:9c:60:b1: 79:f8:0b:a0:7a:fa:9f:f5:95:d7:bc:b7:a8:23:95:1f:6e:ef: 86:a5:86:60:cb:ec:37:78:38:58:ec:14:4d:5a:d3:5d:09:ac: fc:9b:0b:c9:df:bc:03:ec:d5:72:f1:e2:6d:4d:b2:51:42:58: a6:63:40:f0:a4:bf:6e:e8:2e:16:2a:01:93:d5:95:18:d3:9a: b5:57:8e:c9:69:7d:3b:52:c3:c0:a9:7b:14:8c:60:29:4e:e7: 84:98:f1:4e:f6:b3:e3:33:d3:eb:41:a1:96:0f:19:50:d5:a7: 02:c4:86:f3:40:a4:f4:de:6d:e3:a4:33:6c:21:ee:77:bf:cc: a9:25:56:dd:29:ae:bd:13:da:ae:9c:b5:dc:4a:25:97:86:2e: b9:0b:df:b6:b0:83:ad:4b:97:34:77:07:88:1e:05:f7:37:e8: 77:e5:ae:45:79:fc:3c:c6:b9:ae:82:e7:ff:2d:fb:e9:6c:66: 71:75:fa:e8:80:d1:06:b1:b3:91:3c:81:91:f8:6f:4e:dd:8f: c9:93:49:68:f9:97:ac:a8:32:ad:bb:6a:c7:c7:62:e0:48:ad: d6:1a:53:d4:72:b6:1e:b9:4f:a9:c6:de:31:51:b6:64:74:95: f9:bb:10:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRnJs8EIOWcnX2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGUyMGFkMjktMDlmOC00MTUxLTk0MTctNTRhOGNiNGFhNWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2qoMeWFV15NJCuw+Mryj5OpunlvKchrqMAsc 9Kn28O6bm5mk4A8B5KuNDeigb1G7QjUD1lnmPu+jD8amEecbrzRRpzQeS6wjLZdt 5xVRelJ/Tz8gsAXOY9YWSkF2IDya9dkj+lb221P369wYtrA+cpXL62ZvqO94OHQE Z16lzBUnHO3JjTLv4UfyaimpJ+qmG/CyJcX7wu88+Ca5WtgpMjyE3wxImDPOEaE4 eGqLgYQTSPMCu0VxijFKiRRLwjgYX5RVe1rh6UsSvrzX78hX80ImirNbb/Iut7zb BIu2DC8PnoL5Jyi1hHa9bYZ4iSruHWgNscRRpO1fL7fAtxs/XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVfQ3ra9ixQ49t3FUkQftST6tJxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzUwN2IyOTAtMTI1Yy0z ZjU4LTg1YmEtZWQ2NjAyZWU1ZWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGum4zEKj8ziMTIq+VMDsZxgsXn4C6B6+p/1lde8t6gjlR9u74alhmDL 7Dd4OFjsFE1a010JrPybC8nfvAPs1XLx4m1NslFCWKZjQPCkv27oLhYqAZPVlRjT mrVXjslpfTtSw8CpexSMYClO54SY8U72s+Mz0+tBoZYPGVDVpwLEhvNApPTebeOk M2wh7ne/zKklVt0prr0T2q6ctdxKJZeGLrkL37awg61LlzR3B4geBfc36HflrkV5 /DzGua6C5/8t++lsZnF1+uiA0Qaxs5E8gZH4b07dj8mTSWj5l6yoMq27asfHYuBI rdYaU9Ryth65T6nG3jFRtmR0lfm7EBs= -----END CERTIFICATE-----Generated at Sun Oct 26 10:07:42 2025 by rpki-client