$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa File: 8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa (raw, json) Hash identifier: GXNfri/IiRTbl/Gj1bwZSFk08elyb2gxQR/LUSHSQOo= Subject key identifier: 28:64:04:53:5A:57:36:84:F6:5A:54:CB:B2:F0:CC:4C:BB:D7:87:0B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDF3BBEC7EC6F13286260 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.77.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:df:3b:be:c7:ec:6f:13:28:62:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=812ee1c4-4721-4a39-8b8f-9ffc5ea6ae64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:7d:92:20:99:cf:62:05:a1:ca:e6:11:91:e1: fc:7a:15:66:85:92:5f:db:31:a5:4e:a6:32:16:b1: 6c:6e:b9:f7:48:3c:4e:3f:a5:2f:08:4b:ec:67:4e: dd:1c:f7:ea:52:a3:08:cc:75:d8:74:6e:28:3e:f4: 8d:b2:63:28:db:d4:3b:2c:09:ac:48:02:67:d3:5c: f7:de:ea:e7:ab:7c:3f:8b:f9:87:fb:c9:c0:37:59: 19:dd:7a:89:39:73:4c:6e:e5:f2:57:93:a9:2d:f9: a8:a1:ae:ec:30:e9:bf:ae:07:b9:77:6c:c9:d5:ca: 2c:e7:40:c1:d6:1e:bc:c3:5e:6b:bb:18:57:39:27: 44:45:05:d6:8b:81:0f:03:26:bf:42:df:1b:21:0e: 28:50:79:57:43:5c:33:5d:ca:48:9d:fc:36:d8:0f: 87:8f:1f:13:92:30:17:32:6f:5a:0f:fb:41:9f:79: 5b:4d:13:20:ab:38:3f:a1:bc:11:46:54:9e:03:16: a4:6a:02:b9:7d:34:af:86:5f:10:f5:f8:7a:92:ec: 97:a9:8b:71:ea:38:3d:2b:50:d2:48:01:13:48:37: b1:56:51:a9:f5:1f:d3:64:a2:9b:85:81:c1:18:ae: 26:76:08:02:eb:c2:6d:c4:ca:25:e7:23:7b:4b:f0: 48:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:64:04:53:5A:57:36:84:F6:5A:54:CB:B2:F0:CC:4C:BB:D7:87:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8f728d4e-eef0-3ffe-9272-ce0167dbdb4f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.77.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:6d:a3:ed:a7:83:25:64:d7:e1:0e:05:d5:e5:ea:6a:99:63: 98:fd:90:4b:91:6f:2a:92:9b:7e:51:e1:a8:5f:45:d3:51:ab: 79:92:bd:af:e4:46:c5:f2:e3:a2:f5:62:b6:17:18:ae:53:06: 80:de:76:b8:6a:fc:d2:aa:88:27:d4:82:69:70:ca:af:5e:4e: 0f:25:12:3e:b5:88:4e:de:28:b2:80:76:82:b8:01:42:13:00: f0:5c:e5:54:79:51:1c:23:33:25:e8:ce:5b:b4:70:9a:a9:fb: 2c:11:d4:bb:12:57:17:3e:66:61:66:34:67:50:2a:3a:1e:8d: b6:38:40:51:92:65:71:50:ac:fe:42:e0:20:84:e8:b8:c5:06: e6:f3:e2:1a:29:da:03:27:e5:63:f1:a2:45:4d:cb:92:8b:c5: b8:4d:22:e1:70:94:3d:a2:43:91:c8:71:79:44:71:d0:6e:5d: 1e:a1:60:58:a6:8b:f0:9c:41:b2:19:49:74:49:66:38:53:42: c9:9a:8e:2d:9f:1a:37:7e:b9:a9:d3:ea:2b:d4:34:18:e7:39: ca:44:8d:02:75:3d:49:b5:9a:74:d0:d2:a5:25:3b:c5:78:1e: 7c:aa:55:b6:15:6c:fd:30:27:ab:5d:a7:bc:84:ad:2c:28:37: bc:85:7a:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzd87vsfsbxMoYmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ODEyZWUxYzQtNDcyMS00YTM5LThiOGYtOWZmYzVlYTZhZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApX2SIJnPYgWhyuYRkeH8ehVmhZJf2zGlTqYy FrFsbrn3SDxOP6UvCEvsZ07dHPfqUqMIzHXYdG4oPvSNsmMo29Q7LAmsSAJn01z3 3urnq3w/i/mH+8nAN1kZ3XqJOXNMbuXyV5OpLfmooa7sMOm/rge5d2zJ1cos50DB 1h68w15ruxhXOSdERQXWi4EPAya/Qt8bIQ4oUHlXQ1wzXcpInfw22A+Hjx8TkjAX Mm9aD/tBn3lbTRMgqzg/obwRRlSeAxakagK5fTSvhl8Q9fh6kuyXqYtx6jg9K1DS SAETSDexVlGp9R/TZKKbhYHBGK4mdggC68JtxMol5yN7S/BILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFChkBFNaVzaE9lpUy7LwzEy714cLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGY3MjhkNGUtZWVmMC0z ZmZlLTkyNzItY2UwMTY3ZGJkYjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlto+2ngyVk1+EOBdXl6mqZY5j9kEuRbyqSm35R4ahfRdNRq3mSva/k RsXy46L1YrYXGK5TBoDedrhq/NKqiCfUgmlwyq9eTg8lEj61iE7eKLKAdoK4AUIT APBc5VR5URwjMyXozlu0cJqp+ywR1LsSVxc+ZmFmNGdQKjoejbY4QFGSZXFQrP5C 4CCE6LjFBubz4hop2gMn5WPxokVNy5KLxbhNIuFwlD2iQ5HIcXlEcdBuXR6hYFim i/CcQbIZSXRJZjhTQsmaji2fGjd+uanT6ivUNBjnOcpEjQJ1PUm1mnTQ0qUlO8V4 HnyqVbYVbP0wJ6tdp7yErSwoN7yFeqs= -----END CERTIFICATE-----Generated at Sun Oct 26 10:07:31 2025 by rpki-client