$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/008327d4-9650-3012-9b90-ac9a6dda47d6.roa File: 008327d4-9650-3012-9b90-ac9a6dda47d6.roa (raw, json) Hash identifier: Fq/q8SVxoR+MwxE0xNmB9qpB9ZlWj4/6dvSeZ1emHSs= Subject key identifier: FE:90:FF:5B:AD:30:74:51:5B:3C:C2:AA:CC:2F:7D:03:D6:99:B0:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD3E744500D4F75DC15C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/008327d4-9650-3012-9b90-ac9a6dda47d6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d3:e7:44:50:0d:4f:75:dc:15:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=6f83630f-752f-485d-bf32-2357d0da1a54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8b:c5:48:90:5c:19:fd:c3:19:1f:1b:f4:13: d6:11:d7:b9:e9:8b:ab:e6:1b:7e:2d:60:f2:b3:cc: 27:82:2a:e6:57:4a:55:0f:b4:fe:02:04:ef:ea:f9: f1:49:26:11:ac:f1:54:3d:24:9c:d1:97:b9:d8:bc: 41:e5:be:4e:93:58:1f:8b:95:15:b7:84:d4:38:83: ec:84:a8:33:4d:a9:9d:97:4a:5a:db:8e:8f:51:c5: cb:ad:26:c7:fd:93:42:1f:f9:66:65:89:f0:91:c4: cd:80:da:5f:f0:17:63:9e:ef:ae:b2:d7:0c:f5:5c: f9:d4:8b:7c:4d:a1:e1:27:c8:0a:5a:de:27:09:22: 63:23:64:61:62:53:48:fe:86:94:53:b0:d6:80:6a: 78:69:57:06:71:c8:75:0d:8d:f3:14:12:40:83:22: de:97:75:a4:81:e8:e3:e0:69:fc:d2:8a:16:79:b4: 24:c3:7c:72:d2:29:26:6d:11:ab:3f:22:c7:d4:26: 88:db:3f:fe:a6:6b:6f:2d:84:5b:3f:80:bb:28:f2: 85:1b:39:bc:82:f2:0f:ec:f2:65:74:79:3f:79:8a: 50:9b:d9:7d:cf:5f:98:51:0e:17:f8:43:07:29:1d: 81:16:c5:25:e7:5d:f5:0a:cd:85:0d:9a:02:d7:25: 68:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:90:FF:5B:AD:30:74:51:5B:3C:C2:AA:CC:2F:7D:03:D6:99:B0:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/008327d4-9650-3012-9b90-ac9a6dda47d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:00:69:a1:2c:93:7f:f3:88:38:0c:55:d5:ae:3a:15:23:d4: 24:93:df:2f:6b:52:c8:e0:88:c2:73:81:35:89:d4:30:88:c3: fe:89:64:6c:a2:21:f1:6f:9d:29:88:ac:5a:72:c8:50:e7:33: ac:fb:50:76:31:c5:b5:74:b2:72:f4:89:42:1f:ec:45:d5:db: b0:77:24:ba:aa:51:c0:2d:f4:61:09:99:bc:04:d0:dd:8d:de: a8:38:2f:41:9e:c0:7e:f1:fa:a2:28:8f:ee:bd:e0:f2:18:77: 3f:8a:3a:b0:c6:94:80:3c:d9:7d:8a:51:53:38:e8:31:41:49: 98:22:fa:8f:7a:9d:4c:8b:fa:8e:3a:69:e6:86:94:63:8a:55: 58:74:d8:85:f6:29:ac:8e:34:a4:b2:04:2d:53:90:17:3e:ac: ae:cb:92:4a:f9:f4:64:2b:35:96:ce:60:7d:d0:11:22:45:95: b3:1a:65:91:85:86:94:d5:28:8b:ec:09:a6:e3:48:cb:7a:81: 27:b2:80:ef:f6:86:63:d8:cb:90:27:0d:db:10:42:83:3d:b7: 2b:dd:41:84:66:34:37:96:17:e7:1f:c3:70:1c:06:78:78:71: 1f:51:8f:71:ae:ce:f8:f5:cc:fd:55:fd:10:04:a6:49:e5:8d: 2f:bc:f3:6b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNPnRFANT3XcFcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NmY4MzYzMGYtNzUyZi00ODVkLWJmMzItMjM1N2QwZGExYTU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4vFSJBcGf3DGR8b9BPWEde56Yur5ht+LWDy s8wngirmV0pVD7T+AgTv6vnxSSYRrPFUPSSc0Ze52LxB5b5Ok1gfi5UVt4TUOIPs hKgzTamdl0pa246PUcXLrSbH/ZNCH/lmZYnwkcTNgNpf8Bdjnu+ustcM9Vz51It8 TaHhJ8gKWt4nCSJjI2RhYlNI/oaUU7DWgGp4aVcGcch1DY3zFBJAgyLel3Wkgejj 4Gn80ooWebQkw3xy0ikmbRGrPyLH1CaI2z/+pmtvLYRbP4C7KPKFGzm8gvIP7PJl dHk/eYpQm9l9z1+YUQ4X+EMHKR2BFsUl5131Cs2FDZoC1yVowQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP6Q/1utMHRRWzzCqswvfQPWmbD0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDA4MzI3ZDQtOTY1MC0z MDEyLTliOTAtYWM5YTZkZGE0N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkAaaEsk3/ziDgMVdWuOhUj1CST3y9rUsjgiMJzgTWJ1DCIw/6JZGyi IfFvnSmIrFpyyFDnM6z7UHYxxbV0snL0iUIf7EXV27B3JLqqUcAt9GEJmbwE0N2N 3qg4L0GewH7x+qIoj+694PIYdz+KOrDGlIA82X2KUVM46DFBSZgi+o96nUyL+o46 aeaGlGOKVVh02IX2KayONKSyBC1TkBc+rK7Lkkr59GQrNZbOYH3QESJFlbMaZZGF hpTVKIvsCabjSMt6gSeygO/2hmPYy5AnDdsQQoM9tyvdQYRmNDeWF+cfw3AcBnh4 cR9Rj3Guzvj1zP1V/RAEpknljS+882s= -----END CERTIFICATE-----Generated at Mon Oct 20 02:37:24 2025 by rpki-client