$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9a413ad9-632e-34f0-bbc2-41eaffa91c0f.roa File: 9a413ad9-632e-34f0-bbc2-41eaffa91c0f.roa (raw, json) Hash identifier: LMRsfuWVDNRKI8Fzzq+MiPYiHBCXxIWqULyA9n3KMlc= Subject key identifier: F4:D5:68:A9:97:BE:EB:E4:A4:D9:44:42:07:1C:EE:AE:BE:0E:77:1B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD250A755B899AA6BC7B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9a413ad9-632e-34f0-bbc2-41eaffa91c0f.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:25:0a:75:5b:89:9a:a6:bc:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3c1beb13-c3c7-4bfa-a1b9-e1153a0426f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f4:18:b9:43:03:5d:bb:a5:3e:0c:da:4b:0b: e7:5b:36:6b:bc:ff:fe:2b:d8:e9:47:cd:f9:e4:53: 56:39:25:47:33:c3:b0:fa:50:76:7f:28:ae:00:e4: f2:fb:d0:d1:c7:33:b8:64:5a:7a:65:99:80:55:ff: d3:eb:7f:e3:d6:87:68:09:fd:db:b6:ac:04:6a:f6: 8c:8b:d8:3b:e1:4e:69:7d:77:75:33:f0:a8:46:b5: d9:e8:cf:56:1d:a4:db:d0:74:a9:e8:d6:50:85:89: 00:99:bf:bc:b0:e1:b0:57:1b:31:13:2c:43:55:e1: 5a:e9:d9:3c:e6:7b:e7:04:a4:0f:f1:22:82:e8:ef: ad:41:95:69:40:0c:14:f5:89:c3:5f:01:4b:0c:80: dd:de:4a:e7:76:b5:8a:47:7b:e9:b2:e0:f9:de:f6: 2a:6f:13:43:87:1e:72:24:8b:61:70:d9:b4:ff:cc: 3c:09:1e:4c:1b:56:72:5a:a4:e3:09:58:fc:76:5b: a7:7b:f8:f5:09:34:84:7a:85:74:9b:ed:bf:1b:28: 02:4b:07:29:c1:2d:fc:bf:d3:a1:6a:d7:a9:df:c0: ea:2f:e0:71:6c:fa:0f:76:d6:42:b9:21:88:e3:d1: 74:7c:ee:f6:27:20:39:ac:f6:31:9c:c2:69:4d:b3: ed:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:D5:68:A9:97:BE:EB:E4:A4:D9:44:42:07:1C:EE:AE:BE:0E:77:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9a413ad9-632e-34f0-bbc2-41eaffa91c0f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:14:01:65:92:fe:c3:24:de:72:46:d4:6a:9d:ec:60:0d:ec: 15:0a:81:3a:8d:56:47:ee:8f:21:44:2a:ed:53:e2:41:39:c6: ba:6d:d2:29:46:09:b4:fc:8a:5f:e3:78:19:d4:27:37:43:c5: 00:7f:af:d5:25:f6:87:0e:62:7d:10:00:44:43:9f:45:9a:b7: 3e:2b:05:fd:ea:30:fe:88:a0:46:1a:fe:98:e9:a3:6f:02:08: 45:96:ea:cf:3a:c6:e7:a6:f5:42:f6:39:34:e7:35:da:b2:72: d3:d2:9a:8b:b4:c7:49:ca:5a:04:c2:72:06:8f:d3:f3:ca:95: 46:e8:26:74:93:37:75:04:b0:a3:ac:52:dd:71:f8:8a:0d:71: f2:29:12:d5:90:99:f7:73:38:33:c3:74:48:94:e2:76:c2:1d: a2:e5:69:b2:3b:3b:3d:e5:1d:7f:22:a8:98:1b:4b:14:6c:c1: 1a:69:04:25:9d:ef:a7:14:f0:36:33:51:6a:0e:38:c4:ce:0e: e9:30:c5:da:c8:a6:bd:78:5b:59:1e:31:42:34:9c:81:f8:50: 99:8c:41:27:68:b8:6c:18:17:50:b8:6b:03:36:b3:17:c6:46: f0:1e:a1:41:3e:b7:16:f9:96:da:63:4f:88:7a:5c:94:18:31: e4:65:a6:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSUKdVuJmqa8ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2MxYmViMTMtYzNjNy00YmZhLWExYjktZTExNTNhMDQyNmY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/QYuUMDXbulPgzaSwvnWzZrvP/+K9jpR835 5FNWOSVHM8Ow+lB2fyiuAOTy+9DRxzO4ZFp6ZZmAVf/T63/j1odoCf3btqwEavaM i9g74U5pfXd1M/CoRrXZ6M9WHaTb0HSp6NZQhYkAmb+8sOGwVxsxEyxDVeFa6dk8 5nvnBKQP8SKC6O+tQZVpQAwU9YnDXwFLDIDd3krndrWKR3vpsuD53vYqbxNDhx5y JIthcNm0/8w8CR5MG1ZyWqTjCVj8dlune/j1CTSEeoV0m+2/GygCSwcpwS38v9Oh atep38DqL+BxbPoPdtZCuSGI49F0fO72JyA5rPYxnMJpTbPt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTVaKmXvuvkpNlEQgcc7q6+DncbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWE0MTNhZDktNjMyZS0z NGYwLWJiYzItNDFlYWZmYTkxYzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQUAWWS/sMk3nJG1Gqd7GAN7BUKgTqNVkfujyFEKu1T4kE5xrpt0ilG CbT8il/jeBnUJzdDxQB/r9Ul9ocOYn0QAERDn0Watz4rBf3qMP6IoEYa/pjpo28C CEWW6s86xuem9UL2OTTnNdqyctPSmou0x0nKWgTCcgaP0/PKlUboJnSTN3UEsKOs Ut1x+IoNcfIpEtWQmfdzODPDdEiU4nbCHaLlabI7Oz3lHX8iqJgbSxRswRppBCWd 76cU8DYzUWoOOMTODukwxdrIpr14W1keMUI0nIH4UJmMQSdouGwYF1C4awM2sxfG RvAeoUE+txb5ltpjT4h6XJQYMeRlpiU= -----END CERTIFICATE-----Generated at Sun Oct 26 10:00:17 2025 by rpki-client