$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa File: e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa (raw, json) Hash identifier: TZXp01Xzlzcl2XmHNliGln/TMbDhrYhUjSlSoZIFQFA= Subject key identifier: 9D:40:08:78:8D:E0:13:4F:E2:01:6A:AF:BC:80:4F:80:A6:EA:58:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1ABE2E9D88F3C0664730 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.242.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:1a:be:2e:9d:88:f3:c0:66:47:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=1d39e631-d253-4f41-8a0b-ee9ca250f5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:48:80:21:9f:5d:bf:41:99:ad:3c:c3:1b:76: 30:4d:76:31:e0:6f:09:59:e3:d4:44:37:df:4b:76: fc:f9:93:c7:aa:ac:ed:5e:f9:b2:cb:99:3d:89:19: 2d:72:79:42:b5:10:1f:cf:bc:30:98:3d:22:df:04: 0d:65:db:46:76:65:c6:a9:02:99:db:bf:cd:4c:c0: 50:a2:c1:01:5b:5f:00:de:aa:9d:e8:05:c2:74:e6: 2b:07:ce:e3:a1:73:06:30:b7:ad:bd:e8:b3:1f:49: 8d:47:36:a6:fd:04:05:6a:dc:b7:52:b8:5d:80:9f: 0c:c9:df:d2:65:61:f7:68:e7:ea:b9:f2:6c:10:52: e0:33:bc:b5:8c:f4:4b:1a:57:05:bb:ef:45:19:ad: 1e:56:db:ff:a3:bd:0f:1e:2f:32:0d:23:22:be:ff: fe:2d:33:95:00:ae:0e:24:85:5f:26:0f:00:f2:a7: 20:d3:de:d8:22:3a:35:64:93:ed:47:b9:0d:87:44: da:e0:ac:b4:05:4e:90:54:25:0c:d7:e9:4d:17:f3: 60:d6:b4:5e:58:90:56:72:c4:c8:0d:4e:d5:59:9a: 87:78:80:08:2c:0f:50:9a:25:d3:6c:18:28:5d:4b: 37:3e:9b:82:38:3c:e7:31:8c:64:86:a9:1f:00:eb: 4b:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:40:08:78:8D:E0:13:4F:E2:01:6A:AF:BC:80:4F:80:A6:EA:58:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5eb21c0-e2b9-3785-a437-d7bd75336fcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:34:a8:de:69:fd:ce:2b:46:89:ad:0d:f0:f2:08:6a:01:14: 67:3f:e2:44:85:1e:eb:62:b2:12:a0:5d:2a:27:69:7a:a3:86: 0f:7e:fd:aa:f3:18:cc:93:32:7b:df:5a:79:b8:32:30:83:99: 08:1a:99:04:14:37:fa:0f:8d:f6:81:c6:bb:8c:37:0a:ea:12: 33:36:d8:29:d2:06:86:45:64:1f:05:b7:87:be:a0:b1:19:b4: 0a:d2:3c:a5:ca:3d:79:e6:5f:f3:21:5e:51:e6:4d:e9:be:81: 37:ab:1d:bf:f6:92:87:28:55:e5:82:8c:fe:ee:d3:e2:ff:e6: 71:59:36:d3:f5:c1:77:36:35:60:81:35:71:fa:b5:bd:7c:80: 25:e9:c9:6e:2e:e5:e1:bb:7a:d4:54:95:cb:78:c6:c7:4c:03: d3:b0:27:5d:fd:27:8b:e8:a1:c5:58:92:77:aa:23:44:2d:ec: 28:0c:f1:a4:c6:02:2b:6d:2e:e4:15:3b:11:e4:bf:9d:49:93: 82:38:0e:51:77:3e:32:66:f9:f8:b5:76:71:b6:ec:78:20:ea: e9:79:23:16:6e:c3:3f:10:75:7e:0f:fe:57:60:e0:83:90:fd: de:96:c4:16:85:c1:4a:cd:bf:e2:16:76:fd:fb:61:c9:23:58: 4d:1d:be:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRq+Lp2I88BmRzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MWQzOWU2MzEtZDI1My00ZjQxLThhMGItZWU5Y2EyNTBmNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkiAIZ9dv0GZrTzDG3YwTXYx4G8JWePURDff S3b8+ZPHqqztXvmyy5k9iRktcnlCtRAfz7wwmD0i3wQNZdtGdmXGqQKZ27/NTMBQ osEBW18A3qqd6AXCdOYrB87joXMGMLetveizH0mNRzam/QQFaty3UrhdgJ8Myd/S ZWH3aOfqufJsEFLgM7y1jPRLGlcFu+9FGa0eVtv/o70PHi8yDSMivv/+LTOVAK4O JIVfJg8A8qcg097YIjo1ZJPtR7kNh0Ta4Ky0BU6QVCUM1+lNF/Ng1rReWJBWcsTI DU7VWZqHeIAILA9QmiXTbBgoXUs3PpuCODznMYxkhqkfAOtLnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1ACHiN4BNP4gFqr7yAT4Cm6ljKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTVlYjIxYzAtZTJiOS0z Nzg1LWE0MzctZDdiZDc1MzM2ZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKE0qN5p/c4rRomtDfDyCGoBFGc/4kSFHutishKgXSonaXqjhg9+/arz GMyTMnvfWnm4MjCDmQgamQQUN/oPjfaBxruMNwrqEjM22CnSBoZFZB8Ft4e+oLEZ tArSPKXKPXnmX/MhXlHmTem+gTerHb/2kocoVeWCjP7u0+L/5nFZNtP1wXc2NWCB NXH6tb18gCXpyW4u5eG7etRUlct4xsdMA9OwJ139J4voocVYkneqI0Qt7CgM8aTG AittLuQVOxHkv51Jk4I4DlF3PjJm+fi1dnG27Hgg6ul5IxZuwz8QdX4P/ldg4IOQ /d6WxBaFwUrNv+IWdv37YckjWE0dvnk= -----END CERTIFICATE-----Generated at Sun Oct 26 10:00:00 2025 by rpki-client