$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9c9f042-61b2-3bb8-bb23-f1d32110254c.roa File: d9c9f042-61b2-3bb8-bb23-f1d32110254c.roa (raw, json) Hash identifier: uZHU534cZulStssI3J3ALBhB0zoB/Z1E45LAmE583mA= Subject key identifier: 05:81:E0:61:A9:1A:2A:7C:44:CE:83:CC:7D:29:6B:11:67:CD:86:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDDC093438DE8FB9A55300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9c9f042-61b2-3bb8-bb23-f1d32110254c.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:dc:09:34:38:de:8f:b9:a5:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2788bac6-daa5-47d5-8749-791678a1e713 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:99:7f:03:94:d2:61:75:f7:7e:fa:d1:4e:bd: 23:6b:7c:c1:34:c0:53:04:33:81:a2:55:af:26:9f: a6:6d:a0:34:24:fa:a3:f2:80:3e:94:09:fb:b6:e3: c2:b7:75:74:c6:52:d2:59:e9:2d:ca:43:6e:1a:be: 3a:1c:4c:bf:62:eb:81:b1:1c:1a:82:10:95:cf:58: 1d:0c:ee:52:1b:12:17:e4:48:99:5b:c9:0b:ac:5f: 9e:9d:18:a8:f5:2d:54:3a:82:02:52:b3:63:1d:65: 80:28:cc:5c:c3:b0:c8:f0:e8:5c:d9:d6:4e:5c:bc: 54:05:b8:44:ac:39:82:5c:0f:6e:1a:d3:6d:c4:b2: 84:35:03:ab:74:ac:5a:9f:19:ca:68:2e:ae:17:1d: 0a:f5:a7:67:80:25:99:e9:d7:40:43:71:c6:f3:09: d7:1f:e5:b9:84:8d:69:f5:70:c9:2e:de:62:02:02: 6d:33:5d:bb:4e:f4:5e:20:67:a2:a8:93:ca:d8:84: bc:16:35:05:2b:a1:21:c2:b6:de:86:79:af:82:11: 89:bb:d2:ee:d3:9b:62:35:95:b9:12:4e:fb:1f:ae: cc:b1:fc:ef:e0:af:f0:ff:20:41:86:1f:81:4a:76: fc:6a:65:5a:b1:ef:44:7e:e1:98:b6:e2:59:e9:06: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:81:E0:61:A9:1A:2A:7C:44:CE:83:CC:7D:29:6B:11:67:CD:86:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d9c9f042-61b2-3bb8-bb23-f1d32110254c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:a6:09:53:a2:84:4e:94:ff:ff:e9:bd:33:43:eb:40:04:72: 81:ec:fe:f2:1c:cf:bc:bc:40:0c:56:97:22:4d:41:71:c7:3c: 3f:30:8e:b3:2f:22:54:bd:da:fc:b8:63:90:02:8d:51:84:51: a2:56:b2:4f:c0:f6:8f:f0:b4:1b:4d:a9:b1:68:9d:60:46:c0: a0:05:6d:08:3c:b4:0a:fc:ef:88:10:7b:eb:ba:02:82:bf:c7: c9:95:c0:eb:fd:c2:16:57:9f:93:21:e3:da:f8:28:b2:29:82: 88:79:b5:0a:7b:9d:47:5c:92:28:82:07:83:56:e8:4c:84:97: a5:8f:d9:e8:49:5c:b6:ae:b0:6c:7e:73:a8:b1:46:2c:b1:b8: 88:8b:07:62:aa:fd:42:e1:95:29:11:cc:82:58:a8:9f:80:99: f5:11:d4:d9:e3:fe:78:bf:bb:4d:35:24:02:af:97:70:a1:e8: 98:09:7f:b9:02:b7:96:a4:58:7d:00:32:db:21:30:d3:6d:ba: 8d:08:72:d8:83:d8:0a:d7:25:8b:b3:9c:24:67:bc:0f:3b:ad: 8f:b2:3b:d1:ed:71:fb:4d:a0:6a:ea:f6:09:ef:86:5d:34:86: dd:e6:a4:60:4c:41:94:37:02:7d:4c:30:2f:6f:97:bf:43:f2: 66:4c:19:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdwJNDjej7mlUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Mjc4OGJhYzYtZGFhNS00N2Q1LTg3NDktNzkxNjc4YTFlNzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZl/A5TSYXX3fvrRTr0ja3zBNMBTBDOBolWv Jp+mbaA0JPqj8oA+lAn7tuPCt3V0xlLSWektykNuGr46HEy/YuuBsRwaghCVz1gd DO5SGxIX5EiZW8kLrF+enRio9S1UOoICUrNjHWWAKMxcw7DI8Ohc2dZOXLxUBbhE rDmCXA9uGtNtxLKENQOrdKxanxnKaC6uFx0K9adngCWZ6ddAQ3HG8wnXH+W5hI1p 9XDJLt5iAgJtM127TvReIGeiqJPK2IS8FjUFK6EhwrbehnmvghGJu9Lu05tiNZW5 Ek77H67Msfzv4K/w/yBBhh+BSnb8amVase9EfuGYtuJZ6QZE6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAWB4GGpGip8RM6DzH0paxFnzYYYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDljOWYwNDItNjFiMi0z YmI4LWJiMjMtZjFkMzIxMTAyNTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmmCVOihE6U///pvTND60AEcoHs/vIcz7y8QAxWlyJNQXHHPD8wjrMv IlS92vy4Y5ACjVGEUaJWsk/A9o/wtBtNqbFonWBGwKAFbQg8tAr874gQe+u6AoK/ x8mVwOv9whZXn5Mh49r4KLIpgoh5tQp7nUdckiiCB4NW6EyEl6WP2ehJXLausGx+ c6ixRiyxuIiLB2Kq/ULhlSkRzIJYqJ+AmfUR1Nnj/ni/u001JAKvl3Ch6JgJf7kC t5akWH0AMtshMNNtuo0IctiD2ArXJYuznCRnvA87rY+yO9HtcftNoGrq9gnvhl00 ht3mpGBMQZQ3An1MMC9vl79D8mZMGQI= -----END CERTIFICATE-----Generated at Sun Oct 26 12:01:19 2025 by rpki-client