$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa File: b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa (raw, json) Hash identifier: /ZyvG2n8FQKFxa2epNwJHy4Xn8yGacUGAtz9ABi/M7c= Subject key identifier: 85:E1:51:67:9F:68:74:76:85:65:6B:E6:14:F6:06:F3:8A:77:14:2F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDE20F797900FC6BEA9B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:e2:0f:79:79:00:fc:6b:ea:9b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bf542ebb-c7d0-4aa1-b187-2f2e8644a1a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:6b:b6:c4:fd:b6:b0:95:70:d9:57:af:73:0e: 6b:b1:f1:a6:13:a5:98:d6:c9:de:94:38:e0:d7:21: 44:44:5d:42:f9:79:af:d7:c8:f0:21:61:54:14:d1: 5e:88:12:0f:d9:3c:26:32:67:fe:b2:a7:8a:17:f0: 34:e1:60:05:a7:70:bc:90:44:d4:6f:dd:d2:67:97: 2f:55:c2:30:51:01:26:85:a4:28:a3:01:1f:ea:d6: f8:2b:f0:31:7c:1f:6c:7e:a2:ec:ae:5b:24:8b:0d: 23:03:65:21:f3:5c:42:85:37:3d:e0:c3:54:2f:34: 83:ed:79:cd:10:82:e2:df:b8:4b:ff:72:d8:68:b9: 9a:f5:06:92:44:2d:45:8b:dc:09:8f:8c:e2:81:f4: 1a:7a:d7:8e:9c:65:82:84:58:8f:73:09:c2:3f:a8: d5:bf:38:01:d8:8c:60:f6:0d:b3:99:ab:78:2c:44: 3f:54:1a:29:39:ff:9e:5a:b0:f0:cf:e7:e6:37:ce: dc:da:ae:d9:65:a3:e4:ea:36:95:e2:6b:3b:2e:be: d8:6f:38:4d:e2:f9:2f:58:a4:e8:d7:b7:7a:07:eb: 5e:e7:de:fb:36:19:71:e5:ea:3b:b5:8b:7a:d5:d8: 38:ff:7f:7c:6e:f3:3c:e9:b3:0d:0f:de:02:d4:74: d3:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E1:51:67:9F:68:74:76:85:65:6B:E6:14:F6:06:F3:8A:77:14:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3685e0d-6a85-36d4-aa9f-12bb30aebb13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:dd:e9:86:8e:3f:bc:b7:d8:bd:55:7c:9d:f2:87:3d:e0:dc: a3:6a:ca:2e:4c:59:06:02:c2:38:61:6c:e2:59:b1:41:1a:53: dc:a9:14:7f:2c:e0:b4:72:1c:af:cf:fe:3c:bb:b5:48:e5:79: e7:fe:b2:90:9e:1f:5c:94:20:04:38:bc:71:fa:6c:c6:ff:0b: 04:35:d3:1a:a1:58:8f:e9:40:b0:76:b1:75:33:ea:e1:51:43: 65:27:85:4d:86:3b:b6:03:16:0b:62:f7:42:8b:05:62:3c:fa: 2c:c9:b1:f4:28:e3:44:aa:02:24:8b:b5:26:89:ea:4a:c9:1f: 65:28:27:9c:e2:30:ba:5b:3b:d7:57:b8:3d:93:46:67:93:af: c8:11:4a:63:1f:42:bf:56:65:55:b4:15:8f:8e:61:51:6f:af: 34:6d:62:ed:40:0c:79:e9:72:a7:ad:8a:fe:18:2e:a6:6f:40: ae:3b:95:fa:fb:a9:a2:e9:8a:01:8d:6d:ad:11:0b:26:67:d1: 04:e9:28:67:1b:91:40:9d:0e:5e:48:e0:21:bb:b7:a7:49:29: c2:b7:50:e1:db:3b:19:5c:78:3d:21:a8:27:36:ab:15:d4:ac: 89:e8:48:67:3a:85:04:f8:c2:86:17:2a:aa:3b:9e:7b:06:26: bd:96:18:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzeIPeXkA/GvqmwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmY1NDJlYmItYzdkMC00YWExLWIxODctMmYyZTg2NDRhMWE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWu2xP22sJVw2Vevcw5rsfGmE6WY1snelDjg 1yFERF1C+Xmv18jwIWFUFNFeiBIP2TwmMmf+sqeKF/A04WAFp3C8kETUb93SZ5cv VcIwUQEmhaQoowEf6tb4K/AxfB9sfqLsrlskiw0jA2Uh81xChTc94MNULzSD7XnN EILi37hL/3LYaLma9QaSRC1Fi9wJj4zigfQaeteOnGWChFiPcwnCP6jVvzgB2Ixg 9g2zmat4LEQ/VBopOf+eWrDwz+fmN87c2q7ZZaPk6jaV4ms7Lr7YbzhN4vkvWKTo 17d6B+te5977Nhlx5eo7tYt61dg4/398bvM86bMND94C1HTTPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIXhUWefaHR2hWVr5hT2BvOKdxQvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjM2ODVlMGQtNmE4NS0z NmQ0LWFhOWYtMTJiYjMwYWViYjEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDd6YaOP7y32L1VfJ3yhz3g3KNqyi5MWQYCwjhhbOJZsUEaU9ypFH8s 4LRyHK/P/jy7tUjleef+spCeH1yUIAQ4vHH6bMb/CwQ10xqhWI/pQLB2sXUz6uFR Q2UnhU2GO7YDFgti90KLBWI8+izJsfQo40SqAiSLtSaJ6krJH2UoJ5ziMLpbO9dX uD2TRmeTr8gRSmMfQr9WZVW0FY+OYVFvrzRtYu1ADHnpcqetiv4YLqZvQK47lfr7 qaLpigGNba0RCyZn0QTpKGcbkUCdDl5I4CG7t6dJKcK3UOHbOxlceD0hqCc2qxXU rInoSGc6hQT4woYXKqo7nnsGJr2WGGg= -----END CERTIFICATE-----Generated at Sun Oct 26 12:01:25 2025 by rpki-client