$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a052872-d0a5-3afb-a708-b822e4f37cac.roa File: 0a052872-d0a5-3afb-a708-b822e4f37cac.roa (raw, json) Hash identifier: w4H+HwPC5+a3WPJCVqC3MSJSe/Vu0WjXZWxBacif5ZY= Subject key identifier: 59:F5:17:03:57:2F:AA:FC:06:B2:A7:78:6A:EA:26:FA:21:C1:0C:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD55879F5F70AE0853080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a052872-d0a5-3afb-a708-b822e4f37cac.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.47.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d5:58:79:f5:f7:0a:e0:85:30:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=90d06a89-736e-427e-abc7-36fb48ea10e0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ac:4d:c6:ac:aa:d8:12:bd:69:3b:8e:5f:f6: 67:51:55:58:f9:d7:cf:2e:d6:f5:8d:49:4c:2b:fa: 74:13:79:a4:7c:af:57:e0:53:4a:d3:b3:e9:e2:f8: b5:00:1c:44:bb:50:bc:a7:dd:c0:ff:10:46:b9:69: 61:18:8d:56:bc:67:9a:fa:d3:3b:47:fe:e2:83:5f: 7e:03:13:cf:ed:bf:69:3f:bc:67:a9:06:79:c1:52: f3:73:8b:33:5b:47:4a:f6:ea:1c:6e:b6:56:ef:72: b5:0a:83:c7:e4:d8:ac:d7:3d:72:75:03:66:97:64: 3c:e9:27:32:27:b8:d6:92:a8:8b:c6:14:b0:b9:f3: 47:60:36:3e:8e:18:2f:ea:58:33:96:e9:94:3e:fb: ed:72:72:cf:26:c2:65:65:94:c9:bd:3e:39:7e:8d: 67:84:44:f6:d2:d4:06:3d:00:a1:12:2d:35:92:c2: 99:21:1d:43:fb:1e:3a:33:a2:a7:61:16:67:14:8c: 7b:7e:9a:db:1f:73:ef:54:36:be:ec:8c:03:26:99: 76:a3:f4:d2:c8:aa:b2:96:1f:40:e7:cd:2f:d5:77: 85:cf:73:3c:20:5c:23:34:2f:1d:e1:33:e8:50:33: 0f:41:2c:1a:f3:16:1a:3b:df:e7:71:47:86:34:aa: ad:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:F5:17:03:57:2F:AA:FC:06:B2:A7:78:6A:EA:26:FA:21:C1:0C:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a052872-d0a5-3afb-a708-b822e4f37cac.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.47.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fa:d4:41:90:59:d6:25:52:60:9b:62:8b:27:a8:f2:a9:72: 71:39:49:21:a8:3c:95:8a:7c:41:24:db:16:c0:9f:f5:5f:e6: 0d:66:a8:55:4b:e2:1b:e0:f9:2e:80:3f:8d:db:88:b6:87:e1: 8e:a0:c1:cf:cd:fe:ae:9b:60:a5:b6:98:a7:2c:03:b6:c4:66: e7:a4:04:5b:c4:f9:08:e1:a6:68:e7:23:83:b6:e1:f6:b4:17: 2c:9c:4e:35:44:fe:bd:24:aa:82:92:96:fa:08:46:e9:d3:96: 13:b8:97:e8:f9:34:00:27:5b:31:36:36:c4:ed:49:69:94:89: a8:9d:45:9f:b4:42:5a:88:25:7f:78:23:a6:8f:b8:05:61:3b: 67:0c:b8:fa:bb:fd:ce:99:40:08:64:9d:ac:9a:2e:1e:55:87: 67:82:4e:82:b3:4e:17:12:94:63:75:60:a8:84:39:40:7a:17: 88:4e:7c:e8:f8:d0:0b:bf:9f:29:d8:0f:50:59:e4:16:be:06: c4:23:28:8a:15:c5:ab:9a:4d:65:5d:7f:57:cc:20:24:f2:c4: 6f:49:c6:c9:e5:da:dd:10:8a:2f:8e:ab:b6:a9:dd:2a:c7:50: 57:49:cf:ba:de:7d:fa:cb:7c:0f:3c:ab:12:5a:55:a2:b3:9c: a4:1b:f9:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNVYefX3CuCFMIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OTBkMDZhODktNzM2ZS00MjdlLWFiYzctMzZmYjQ4ZWExMGUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaxNxqyq2BK9aTuOX/ZnUVVY+dfPLtb1jUlM K/p0E3mkfK9X4FNK07Pp4vi1ABxEu1C8p93A/xBGuWlhGI1WvGea+tM7R/7ig19+ AxPP7b9pP7xnqQZ5wVLzc4szW0dK9uocbrZW73K1CoPH5Nis1z1ydQNml2Q86Scy J7jWkqiLxhSwufNHYDY+jhgv6lgzlumUPvvtcnLPJsJlZZTJvT45fo1nhET20tQG PQChEi01ksKZIR1D+x46M6KnYRZnFIx7fprbH3PvVDa+7IwDJpl2o/TSyKqylh9A 580v1XeFz3M8IFwjNC8d4TPoUDMPQSwa8xYaO9/ncUeGNKqtfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFn1FwNXL6r8BrKneGrqJvohwQxsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGEwNTI4NzItZDBhNS0z YWZiLWE3MDgtYjgyMmU0ZjM3Y2FjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr61EGQWdYlUmCbYosnqPKpcnE5SSGoPJWKfEEk2xbAn/Vf5g1mqFVL 4hvg+S6AP43biLaH4Y6gwc/N/q6bYKW2mKcsA7bEZuekBFvE+QjhpmjnI4O24fa0 FyycTjVE/r0kqoKSlvoIRunTlhO4l+j5NAAnWzE2NsTtSWmUiaidRZ+0QlqIJX94 I6aPuAVhO2cMuPq7/c6ZQAhknayaLh5Vh2eCToKzThcSlGN1YKiEOUB6F4hOfOj4 0Au/nynYD1BZ5Ba+BsQjKIoVxauaTWVdf1fMICTyxG9Jxsnl2t0Qii+Oq7ap3SrH UFdJz7reffrLfA88qxJaVaKznKQb+es= -----END CERTIFICATE-----Generated at Mon Oct 20 00:05:36 2025 by rpki-client