$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a957273-5d8a-3852-b333-64fd74db36a9.roa File: 7a957273-5d8a-3852-b333-64fd74db36a9.roa (raw, json) Hash identifier: gcUsrRziEGWFaJyb2GXnxxhZ0FFeyo8EEqL3hzvioOk= Subject key identifier: 3E:D6:67:70:BA:84:9A:AE:FD:45:E5:85:03:26:60:C7:30:DA:56:DD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD23B82BDF8820B30A7C80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a957273-5d8a-3852-b333-64fd74db36a9.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 172.243.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:23:b8:2b:df:88:20:b3:0a:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ddc04860-8677-4230-bebf-6051ba6ad706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:1e:ff:c0:4a:5b:19:a9:31:80:47:44:3a:04: 1d:51:0b:1a:2c:64:ff:2f:8b:10:9f:d0:b0:2d:0f: d5:25:3e:72:54:a2:c6:cf:2f:27:6d:8c:35:82:84: af:3a:1c:e9:23:0a:c8:dd:21:cb:f6:a3:1b:84:6e: 52:c1:04:86:e6:c3:12:31:58:d9:72:34:30:0e:f4: 24:54:ab:49:e4:98:ea:7b:9e:6a:18:c8:03:a7:28: 53:f0:40:99:77:9c:d6:4b:b5:e8:1e:56:b2:8d:95: 11:a5:6e:df:c1:33:04:ed:71:28:94:f7:a8:b6:76: 43:d1:48:7d:3e:af:f2:e0:d7:9a:3e:64:8a:4f:bd: de:61:78:82:f9:9c:bb:18:e7:1d:41:fb:83:eb:68: 80:87:5b:6f:b0:8e:a7:77:c9:10:73:c3:5d:27:fc: d3:8a:c2:5f:2a:e1:f9:8b:60:c6:f1:de:f6:a9:fc: 2f:2d:0d:a8:9c:a1:a3:ca:c1:ac:d1:6f:1e:ad:97: 84:ae:91:12:51:43:1c:fb:b9:64:fe:00:14:c2:02: ea:5e:2c:d3:bf:41:68:6a:da:26:10:03:1d:ca:81: e1:dc:59:14:20:65:cd:30:b0:a8:6a:96:f5:29:e2: 5b:19:5a:16:8c:89:0e:ea:36:a9:d8:cd:74:fd:f4: 91:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:D6:67:70:BA:84:9A:AE:FD:45:E5:85:03:26:60:C7:30:DA:56:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a957273-5d8a-3852-b333-64fd74db36a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:12:47:1b:5c:1f:26:f9:5a:b5:00:7a:36:b1:41:98:e1:67: 8c:6d:86:2a:c6:f0:6a:cb:76:b2:93:9f:cf:2c:e5:77:33:60: fc:e9:b2:88:d3:0d:93:c6:cb:6f:02:b6:7e:cd:1c:8e:93:9c: 21:74:78:b4:3d:40:b9:9f:e0:0b:1b:c7:89:b1:54:65:53:3d: 3a:5e:ef:49:00:8d:2c:b9:3c:ab:e4:23:81:11:b2:d0:09:75: 3e:5d:60:34:86:df:d4:2f:fc:ef:26:ea:65:38:86:b5:9a:35: 80:7e:ef:6e:82:52:87:72:6b:50:25:9c:ba:5c:31:ab:b7:15: 29:59:a1:48:15:55:7e:d4:5a:0a:11:09:79:64:3b:56:a8:3b: 84:c1:8d:b5:1a:45:aa:dc:70:4e:49:00:11:69:06:76:ad:36: 63:31:74:bd:b7:ac:1c:d8:e2:05:ed:68:8e:bb:fa:c8:1c:22: d8:e9:a7:da:e7:dd:b0:dd:4f:ed:54:e0:6c:ed:ff:d8:55:2a: a2:5c:0f:46:0e:7a:a2:cd:eb:cf:44:45:ee:d4:41:7b:4b:c4: 1b:72:60:5f:86:16:73:60:2a:4d:ba:a7:a5:b9:60:e3:65:e7: 2d:b7:2a:f9:f0:24:20:64:61:53:46:4c:da:56:6b:90:e5:ff: a6:64:06:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzSO4K9+IILMKfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGRjMDQ4NjAtODY3Ny00MjMwLWJlYmYtNjA1MWJhNmFkNzA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhB7/wEpbGakxgEdEOgQdUQsaLGT/L4sQn9Cw LQ/VJT5yVKLGzy8nbYw1goSvOhzpIwrI3SHL9qMbhG5SwQSG5sMSMVjZcjQwDvQk VKtJ5Jjqe55qGMgDpyhT8ECZd5zWS7XoHlayjZURpW7fwTME7XEolPeotnZD0Uh9 Pq/y4NeaPmSKT73eYXiC+Zy7GOcdQfuD62iAh1tvsI6nd8kQc8NdJ/zTisJfKuH5 i2DG8d72qfwvLQ2onKGjysGs0W8erZeErpESUUMc+7lk/gAUwgLqXizTv0Foatom EAMdyoHh3FkUIGXNMLCoapb1KeJbGVoWjIkO6jap2M10/fSR0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD7WZ3C6hJqu/UXlhQMmYMcw2lbdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2E5NTcyNzMtNWQ4YS0z ODUyLWIzMzMtNjRmZDc0ZGIzNmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoSRxtcHyb5WrUAejaxQZjhZ4xthirG8GrLdrKTn88s5XczYPzpsojT DZPGy28Ctn7NHI6TnCF0eLQ9QLmf4Asbx4mxVGVTPTpe70kAjSy5PKvkI4ERstAJ dT5dYDSG39Qv/O8m6mU4hrWaNYB+726CUodya1AlnLpcMau3FSlZoUgVVX7UWgoR CXlkO1aoO4TBjbUaRarccE5JABFpBnatNmMxdL23rBzY4gXtaI67+sgcItjpp9rn 3bDdT+1U4Gzt/9hVKqJcD0YOeqLN689ERe7UQXtLxBtyYF+GFnNgKk26p6W5YONl 5y23KvnwJCBkYVNGTNpWa5Dl/6ZkBvE= -----END CERTIFICATE-----Generated at Wed Nov 5 01:58:29 2025 by rpki-client