$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa File: b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa (raw, json) Hash identifier: FYLe3fawduUIiA+cdmmggmQihKmw/nPI7+UEYLcFvM8= Subject key identifier: 96:80:E8:CB:F8:7B:3C:66:D4:56:18:34:3C:66:35:2A:61:39:F8:CF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1ADE2DC2EFCD97DB96C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.169.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1a:de:2d:c2:ef:cd:97:db:96:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=13852cfc-0046-4ec9-aa8f-015f88e3746c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:6d:54:10:41:23:da:4c:20:ed:43:2b:bf: 88:94:3f:64:4e:88:3f:52:18:c6:94:2e:f9:57:41: fc:b4:89:41:8e:47:2c:94:c4:ff:e7:91:56:d1:d6: 1d:e3:f1:a2:bb:1d:bb:41:ed:de:0c:22:ab:7e:ed: 54:27:b6:25:d8:27:e1:0e:96:e9:a9:b3:20:be:bb: a6:ab:33:e2:2b:c8:68:c4:b6:b5:a4:d6:46:9c:3d: 31:9e:71:b0:ba:30:7a:e6:70:b8:89:21:6a:a8:f3: 4b:75:9e:7c:9b:d8:c6:9e:7f:5c:b7:9d:f8:3d:5f: 15:1f:94:9b:99:00:0b:fd:0a:95:32:fd:8b:60:07: 18:57:41:16:9c:93:e0:94:29:2b:9d:ec:16:13:5f: fd:28:77:9c:0b:9e:52:a6:89:9e:f8:40:09:7f:a4: f6:55:77:be:b7:f2:79:35:25:72:5a:8f:2b:8c:98: e5:c6:57:40:54:c9:12:7a:73:92:9f:e0:07:ef:bb: b2:c1:96:9d:1a:1e:f2:33:8c:26:c6:a0:69:73:cd: e9:8b:57:25:c9:96:52:cd:c4:0b:8f:9c:6b:e2:7b: 05:a7:55:e9:79:0e:35:7f:19:ff:e6:7b:11:22:2b: ed:08:ff:63:3a:61:25:a9:85:c7:48:71:08:47:18: f9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:80:E8:CB:F8:7B:3C:66:D4:56:18:34:3C:66:35:2A:61:39:F8:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8fc3bca-d4fa-378d-b6c5-968dc6876a69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.169.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:bc:23:5c:27:9b:e9:4f:93:e8:d7:d3:5a:0a:e9:80:6b:bf: 80:4e:b6:17:03:ae:8c:70:d2:2e:b5:cc:65:65:f1:eb:a3:34: 47:45:e9:82:f6:22:6e:0a:4a:4b:a1:7b:60:d9:34:96:47:56: 99:93:9b:17:ed:37:91:dd:c5:71:7e:40:d7:59:35:28:56:8d: 2b:df:c3:d6:bb:13:eb:93:33:c1:ca:ec:d0:c7:73:16:11:1c: 84:2b:c0:2c:51:f8:26:f4:94:23:f2:b9:ae:db:b0:d9:ee:8f: 09:f4:b0:8f:f6:60:54:c3:ff:6a:66:bf:51:08:68:bc:a3:8b: 7f:5c:4d:7a:59:52:b3:2c:52:25:da:07:ca:c7:f9:98:38:7c: 30:2c:ff:76:6d:60:4c:fc:2d:7c:49:cf:36:00:13:10:e0:17: 93:78:e8:25:92:e4:5f:c4:1e:24:63:3d:ee:ec:1b:57:64:bb: aa:97:48:93:67:65:1b:60:aa:63:e9:16:c3:29:40:56:2b:56: 4b:a8:51:86:a7:d7:71:9e:d7:99:b3:af:41:86:94:b9:0e:9d: d2:ac:1a:8a:27:0a:3a:19:4e:fb:57:dd:6b:5c:cc:ea:50:d6: f3:fc:6c:21:bf:0d:34:75:c4:30:09:8b:c5:fe:0b:2d:29:78: 11:9f:8f:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRreLcLvzZfblsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MTM4NTJjZmMtMDA0Ni00ZWM5LWFhOGYtMDE1Zjg4ZTM3NDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+ltVBBBI9pMIO1DK7+IlD9kTog/UhjGlC75 V0H8tIlBjkcslMT/55FW0dYd4/Giux27Qe3eDCKrfu1UJ7Yl2CfhDpbpqbMgvrum qzPiK8hoxLa1pNZGnD0xnnGwujB65nC4iSFqqPNLdZ58m9jGnn9ct534PV8VH5Sb mQAL/QqVMv2LYAcYV0EWnJPglCkrnewWE1/9KHecC55Spome+EAJf6T2VXe+t/J5 NSVyWo8rjJjlxldAVMkSenOSn+AH77uywZadGh7yM4wmxqBpc83pi1clyZZSzcQL j5xr4nsFp1XpeQ41fxn/5nsRIivtCP9jOmElqYXHSHEIRxj5fQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaA6Mv4ezxm1FYYNDxmNSphOfjPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhmYzNiY2EtZDRmYS0z NzhkLWI2YzUtOTY4ZGM2ODc2YTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHq8I1wnm+lPk+jX01oK6YBrv4BOthcDroxw0i61zGVl8eujNEdF6YL2 Im4KSkuhe2DZNJZHVpmTmxftN5HdxXF+QNdZNShWjSvfw9a7E+uTM8HK7NDHcxYR HIQrwCxR+Cb0lCPyua7bsNnujwn0sI/2YFTD/2pmv1EIaLyji39cTXpZUrMsUiXa B8rH+Zg4fDAs/3ZtYEz8LXxJzzYAExDgF5N46CWS5F/EHiRjPe7sG1dku6qXSJNn ZRtgqmPpFsMpQFYrVkuoUYan13Ge15mzr0GGlLkOndKsGoonCjoZTvtX3WtczOpQ 1vP8bCG/DTR1xDAJi8X+Cy0peBGfj5c= -----END CERTIFICATE-----Generated at Sun Oct 26 09:58:20 2025 by rpki-client