$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa File: b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa (raw, json) Hash identifier: aQi41MWT9uFLBnSlYwzQrVnohbwzPhLIuvYmv7olozA= Subject key identifier: EA:28:36:73:BD:1E:C5:32:C9:89:1F:B7:03:2A:B6:5C:02:77:D1:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD20DCE1969BC997F25400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:20:dc:e1:96:9b:c9:97:f2:54:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ac19e8a9-a814-42c8-bb23-9a8960d984a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:fd:73:c3:e6:40:4d:e4:a9:fa:a5:a6:00:80: ff:d4:92:a6:a7:48:39:90:9a:a5:42:a6:bf:51:82: e6:40:77:b7:30:71:4c:2e:7a:cd:31:32:22:a1:4a: 2c:b3:c7:d0:4c:4a:8a:2a:36:93:72:40:8e:47:f7: d9:86:a2:2a:39:32:e4:87:af:1f:5b:15:86:fa:e1: d7:78:2a:15:a3:bb:54:5e:83:7e:22:eb:5a:bf:7b: 0b:0a:80:8e:c8:66:86:33:75:1a:14:90:0d:7e:a5: 7b:1c:03:c0:98:87:12:4b:88:58:b8:42:3c:20:81: 36:91:8b:f0:16:f9:14:e8:df:17:ff:37:87:6a:c1: 0a:05:33:63:ee:2e:23:4e:e9:2e:5a:5e:79:ee:ca: cf:a3:09:99:42:18:31:bc:8c:29:7d:67:82:a6:ab: d2:aa:02:94:9e:9e:b6:58:48:d5:39:f6:06:12:a6: 31:a0:fa:ee:8c:44:3c:27:39:b4:fd:7d:e3:aa:24: 77:eb:5f:d5:2c:e6:60:73:a9:1c:0a:ec:cf:bc:dc: a9:c6:c4:30:26:33:81:c6:75:ac:db:35:69:40:8c: 8b:e5:ec:0b:3c:6e:04:e9:d1:5d:1b:8d:9e:c5:95: a7:50:7d:91:7a:82:56:1c:38:a0:c7:e6:dc:82:0e: 57:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:28:36:73:BD:1E:C5:32:C9:89:1F:B7:03:2A:B6:5C:02:77:D1:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b3cf0838-03ae-33be-86d3-57ff017a9f8c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:cf:1c:ca:67:d7:07:9b:9f:d8:80:a0:a8:dd:bc:2e:e6:d3: d0:e5:ce:7d:8e:65:f6:a5:1e:88:cb:54:eb:70:ce:34:1f:c3: 09:ab:91:c4:c9:91:e4:63:7b:99:f2:72:0d:25:c4:eb:bf:6b: f6:47:16:97:3a:c8:5c:2d:98:3e:09:51:7d:fb:99:6a:59:13: 42:80:af:9b:b3:1d:15:99:b1:50:7a:63:89:99:71:cc:f6:b5: 13:63:bd:1b:96:e8:49:2d:4c:37:73:cf:e1:c7:07:e8:42:cf: 1c:74:09:25:0a:77:ac:3e:14:14:ee:59:1f:ae:2d:1f:42:c3: eb:5b:5c:b1:81:1a:64:c5:0a:ee:50:8d:a1:d2:e1:41:da:04: 17:0c:7c:dc:64:23:3e:57:e6:12:f0:11:c1:b7:0d:9e:53:eb: 1b:0d:2f:e9:99:ba:fe:a2:8f:89:f9:14:f8:d2:28:33:74:b4: 1d:0b:dc:a9:6b:b1:a4:45:0a:38:a3:6c:39:61:e7:99:2c:0e: 59:11:54:27:1e:40:e9:73:ec:db:34:19:5c:1a:0a:6d:90:09: b3:1c:da:32:e5:62:18:d8:54:68:14:e6:1b:dd:5b:ee:63:52: f3:e9:71:4a:87:7a:29:07:24:59:97:c6:7b:2d:17:cd:7e:94: 2b:5e:d6:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSDc4ZabyZfyVAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YWMxOWU4YTktYTgxNC00MmM4LWJiMjMtOWE4OTYwZDk4NGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhv1zw+ZATeSp+qWmAID/1JKmp0g5kJqlQqa/ UYLmQHe3MHFMLnrNMTIioUoss8fQTEqKKjaTckCOR/fZhqIqOTLkh68fWxWG+uHX eCoVo7tUXoN+Iutav3sLCoCOyGaGM3UaFJANfqV7HAPAmIcSS4hYuEI8IIE2kYvw FvkU6N8X/zeHasEKBTNj7i4jTukuWl557srPowmZQhgxvIwpfWeCpqvSqgKUnp62 WEjVOfYGEqYxoPrujEQ8Jzm0/X3jqiR361/VLOZgc6kcCuzPvNypxsQwJjOBxnWs 2zVpQIyL5ewLPG4E6dFdG42exZWnUH2ReoJWHDigx+bcgg5XgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOooNnO9HsUyyYkftwMqtlwCd9FdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjNjZjA4MzgtMDNhZS0z M2JlLTg2ZDMtNTdmZjAxN2E5ZjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3PHMpn1webn9iAoKjdvC7m09Dlzn2OZfalHojLVOtwzjQfwwmrkcTJ keRje5nycg0lxOu/a/ZHFpc6yFwtmD4JUX37mWpZE0KAr5uzHRWZsVB6Y4mZccz2 tRNjvRuW6EktTDdzz+HHB+hCzxx0CSUKd6w+FBTuWR+uLR9Cw+tbXLGBGmTFCu5Q jaHS4UHaBBcMfNxkIz5X5hLwEcG3DZ5T6xsNL+mZuv6ij4n5FPjSKDN0tB0L3Klr saRFCjijbDlh55ksDlkRVCceQOlz7Ns0GVwaCm2QCbMc2jLlYhjYVGgU5hvdW+5j UvPpcUqHeikHJFmXxnstF81+lCte1qk= -----END CERTIFICATE-----Generated at Sun Oct 26 12:06:41 2025 by rpki-client