$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa File: 5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa (raw, json) Hash identifier: WIgWRhWrECbyCN9bnZYqRXbKbz32AbAeTqGJE4E5f8E= Subject key identifier: AA:F1:22:D5:08:E4:3E:20:00:FD:BF:7E:AC:FE:B6:1A:B9:C6:8C:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B16A157A7DA06B4D8649DE800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa Signing time: Fri 05 Sep 2025 01:00:33 +0000 ROA not before: Fri 05 Sep 2025 01:00:33 +0000 ROA not after: Thu 04 Dec 2025 02:00:33 +0000 asID: 7155 IP address blocks: 172.242.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 11 Sep 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:16:a1:57:a7:da:06:b4:d8:64:9d:e8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 5 01:00:33 2025 GMT Not After : Dec 4 02:00:33 2025 GMT Subject: CN=12e2583c-9fa5-47f2-ae1b-dbc8d11424a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:19:64:f5:92:5d:5b:b7:e3:eb:d9:23:83:52: de:1d:5a:6a:b1:3c:dc:cb:2b:14:8d:01:75:e2:04: ac:63:a3:0f:13:9e:49:12:05:d0:3e:58:38:4e:32: 59:ab:30:ac:91:e8:09:da:75:d8:00:b1:0a:dd:90: c4:39:0f:7b:55:fe:a6:a2:0b:77:77:b2:02:22:f1: 01:d9:ae:a8:ab:a0:14:7c:c6:97:84:35:9c:43:18: 9b:6b:75:41:2f:3d:8c:49:b9:03:c8:80:03:a0:3e: 62:91:4a:8e:18:11:50:c3:97:44:08:22:81:86:d3: 2a:1a:e0:40:2b:55:f4:7c:67:ba:07:b3:35:43:f5: 78:5c:c0:d5:3d:08:c2:06:65:5e:b6:51:0a:9d:66: e1:28:a1:8b:eb:1e:b5:c7:9e:e5:79:e5:ff:af:a1: 50:59:6c:d6:1a:86:48:ac:ce:3a:80:b6:4e:e7:85: 14:78:ff:0b:2d:5b:f8:f0:97:d8:79:90:98:42:a6: b7:9b:eb:8b:9d:92:a9:43:b1:cc:33:6f:b8:10:70: 07:21:c9:03:36:a5:17:81:19:e8:2b:1f:4f:97:35: 9b:75:28:b8:72:db:f8:21:89:d7:56:c2:ee:bd:25: a7:aa:48:e3:32:f5:22:fc:79:c5:67:28:35:d6:34: c2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:22:D5:08:E4:3E:20:00:FD:BF:7E:AC:FE:B6:1A:B9:C6:8C:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4b:f6:09:6d:4b:f3:f8:9d:de:a9:6c:90:ce:89:cd:c4:07: 0f:69:04:75:0e:ca:9f:72:dd:be:9b:60:3c:72:43:0a:80:9f: db:0b:f8:c3:08:cb:eb:e0:f9:58:fb:a0:32:bf:ca:69:be:00: e2:dc:82:e8:4b:7d:41:ba:57:83:4f:48:a9:36:5d:b5:e6:4e: 5c:0b:96:0b:49:56:c2:36:1a:20:f7:58:52:9a:3d:16:dc:83: 51:66:dd:80:eb:7d:5b:d3:76:e7:9c:99:36:eb:83:61:f6:74: c4:fb:90:46:b6:a9:a6:bb:52:8f:6a:8f:90:97:92:82:ce:e1: 00:36:85:92:66:3f:bf:a8:17:51:25:2f:b7:e7:6b:f6:b4:f6: 1c:1f:e0:d8:e4:e1:85:c2:80:f2:0b:3f:17:3c:1f:7b:85:f2: 1e:c1:8a:fb:15:4c:b4:cf:00:4c:71:f0:a4:ca:ad:32:df:cb: aa:d0:d6:d1:1b:4f:6a:dd:ed:4c:a2:5e:2b:1d:a1:fc:aa:90: 29:e6:b2:9c:d5:f4:bd:b8:5a:ba:ef:dd:61:ae:d8:58:f3:55: 59:bf:d8:f6:c1:78:c1:ad:e0:91:64:66:19:ca:fa:65:d6:a4: 0f:bf:f0:db:e1:52:e5:fe:83:6b:a3:e7:37:44:13:28:59:52: 68:e1:96:bc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsWoVen2ga02GSd6AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDkwNTAxMDAzM1oXDTI1MTIwNDAyMDAzM1owLzEtMCsGA1UEAxMk MTJlMjU4M2MtOWZhNS00N2YyLWFlMWItZGJjOGQxMTQyNGE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hlk9ZJdW7fj69kjg1LeHVpqsTzcyysUjQF1 4gSsY6MPE55JEgXQPlg4TjJZqzCskegJ2nXYALEK3ZDEOQ97Vf6mogt3d7ICIvEB 2a6oq6AUfMaXhDWcQxiba3VBLz2MSbkDyIADoD5ikUqOGBFQw5dECCKBhtMqGuBA K1X0fGe6B7M1Q/V4XMDVPQjCBmVetlEKnWbhKKGL6x61x57leeX/r6FQWWzWGoZI rM46gLZO54UUeP8LLVv48JfYeZCYQqa3m+uLnZKpQ7HMM2+4EHAHIckDNqUXgRno Kx9PlzWbdSi4ctv4IYnXVsLuvSWnqkjjMvUi/HnFZyg11jTCFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrxItUI5D4gAP2/fqz+thq5xow/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWU2NmQzYjYtYzBmYS0z M2NkLTlmNGUtMzk1NTU3ZDIwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErPIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdL9gltS/P4nd6pbJDOic3EBw9pBHUOyp9y3b6bYDxyQwqAn9sL+MMI y+vg+Vj7oDK/ymm+AOLcguhLfUG6V4NPSKk2XbXmTlwLlgtJVsI2GiD3WFKaPRbc g1Fm3YDrfVvTduecmTbrg2H2dMT7kEa2qaa7Uo9qj5CXkoLO4QA2hZJmP7+oF1El L7fna/a09hwf4Njk4YXCgPILPxc8H3uF8h7BivsVTLTPAExx8KTKrTLfy6rQ1tEb T2rd7UyiXisdofyqkCnmspzV9L24Wrrv3WGu2FjzVVm/2PbBeMGt4JFkZhnK+mXW pA+/8NvhUuX+g2uj5zdEEyhZUmjhlrw= -----END CERTIFICATE-----Generated at Wed Sep 10 04:04:21 2025 by rpki-client