$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc46a09-cfa9-3373-8668-e0cb9ab2f2c7.roa File: 0bc46a09-cfa9-3373-8668-e0cb9ab2f2c7.roa (raw, json) Hash identifier: 05EuAajRXtxsABLwIgujKsUbTrzaa7hA+QOH2w2N1Wo= Subject key identifier: 16:A8:5A:E8:FE:05:99:F5:F7:DE:32:27:D9:3E:A1:EF:BF:38:BF:E5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD1215920E224843801080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc46a09-cfa9-3373-8668-e0cb9ab2f2c7.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 162.72.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:12:15:92:0e:22:48:43:80:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4aadcbae-084a-4063-b7a1-9a2b5d9daed4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:96:be:8d:8a:a6:c2:cf:d1:f5:9d:3a:9f:32: 81:ff:35:c8:91:a0:1e:f7:33:02:be:f7:2d:e5:0f: d8:dc:da:02:4d:d9:ea:d1:ac:03:1e:6c:d5:9c:be: dd:d8:7b:73:03:9b:e5:8a:f4:6f:62:b9:84:b4:2e: ba:30:06:9e:f2:de:05:e9:3e:95:2c:7b:c8:75:45: 47:7d:b9:b5:e3:87:03:97:1a:f9:a4:64:61:18:e9: de:4a:94:e1:b8:e1:7e:79:19:a0:a1:77:fa:88:a5: 7b:53:fe:9f:fe:ea:f4:da:b5:5a:7e:cb:67:2d:a2: 58:8c:fd:54:91:7f:a4:2d:ae:7c:88:ef:c9:ad:15: 23:e9:5b:e3:bc:4d:83:d7:13:12:0f:c3:d7:a6:63: c8:88:2d:08:cd:b1:e0:9f:ac:28:3b:3b:ff:d6:d2: f4:ec:8c:5e:5d:88:d5:e4:d5:3d:f5:87:d0:18:a7: e5:e6:0a:4a:21:f4:2c:6f:a4:03:b3:35:bb:4d:53: c6:4e:5c:3b:f2:e8:74:65:bb:8f:ae:9d:fe:42:90: 82:81:70:80:1f:70:9a:71:13:54:a0:8a:3c:46:d6: aa:44:e3:ab:77:7b:67:ec:36:b8:e5:c4:c8:9f:46: c9:fa:b2:0c:91:fa:c9:96:b2:94:a4:6e:f0:d1:45: 8b:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A8:5A:E8:FE:05:99:F5:F7:DE:32:27:D9:3E:A1:EF:BF:38:BF:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0bc46a09-cfa9-3373-8668-e0cb9ab2f2c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:40:d5:4d:ba:f6:e5:6c:94:bd:29:17:36:74:bd:d6:72:50: 85:c1:28:dc:9c:a4:6e:15:fd:04:52:20:4a:ca:46:4f:d2:47: 13:4b:00:bb:df:43:ca:c3:49:ee:7c:3c:15:d3:3b:0f:e7:b6: 20:31:ef:ee:9d:8f:38:f5:ce:b7:8c:f1:bc:20:d6:16:c9:da: be:fa:52:27:2d:3f:49:9f:c4:0b:19:e8:f1:5a:d9:4f:c6:38: 3f:01:f6:a1:1b:3e:d2:a6:84:e1:48:90:02:13:86:0c:e6:e3: 68:10:fe:23:47:8e:c3:e9:82:fc:b1:a5:78:63:1a:a0:24:b0: 39:41:f3:e4:3d:25:b8:26:14:fc:9b:42:ea:69:86:53:32:eb: f8:93:ff:81:8a:e2:cd:13:2d:fd:50:31:05:c7:8e:a0:01:01: 09:e8:a4:5b:27:f0:3e:21:9d:ba:2f:eb:f2:66:48:61:72:bd: c2:5b:7c:a7:8a:1e:bd:5c:de:b5:fb:ec:f1:ec:f6:ca:43:52: d6:c1:a6:1e:46:4e:e1:4a:44:fa:5a:45:d6:dc:f9:d6:db:79: 75:b0:73:78:b9:1b:34:28:b9:c9:13:c3:ce:2f:b2:43:48:f4: 2a:cd:68:0e:e0:04:ff:e5:31:c7:b3:a6:5a:8c:bb:58:a6:07: 2c:e9:1c:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzRIVkg4iSEOAEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGFhZGNiYWUtMDg0YS00MDYzLWI3YTEtOWEyYjVkOWRhZWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5a+jYqmws/R9Z06nzKB/zXIkaAe9zMCvvct 5Q/Y3NoCTdnq0awDHmzVnL7d2HtzA5vlivRvYrmEtC66MAae8t4F6T6VLHvIdUVH fbm144cDlxr5pGRhGOneSpThuOF+eRmgoXf6iKV7U/6f/ur02rVafstnLaJYjP1U kX+kLa58iO/JrRUj6VvjvE2D1xMSD8PXpmPIiC0IzbHgn6woOzv/1tL07IxeXYjV 5NU99YfQGKfl5gpKIfQsb6QDszW7TVPGTlw78uh0ZbuPrp3+QpCCgXCAH3CacRNU oIo8RtaqROOrd3tn7Da45cTIn0bJ+rIMkfrJlrKUpG7w0UWLQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBaoWuj+BZn1994yJ9k+oe+/OL/lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGJjNDZhMDktY2ZhOS0z MzczLTg2NjgtZTBjYjlhYjJmMmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhA1U269uVslL0pFzZ0vdZyUIXBKNycpG4V/QRSIErKRk/SRxNLALvf Q8rDSe58PBXTOw/ntiAx7+6djzj1zreM8bwg1hbJ2r76UictP0mfxAsZ6PFa2U/G OD8B9qEbPtKmhOFIkAIThgzm42gQ/iNHjsPpgvyxpXhjGqAksDlB8+Q9JbgmFPyb QupphlMy6/iT/4GK4s0TLf1QMQXHjqABAQnopFsn8D4hnbov6/JmSGFyvcJbfKeK Hr1c3rX77PHs9spDUtbBph5GTuFKRPpaRdbc+dbbeXWwc3i5GzQouckTw84vskNI 9CrNaA7gBP/lMcezplqMu1imByzpHKg= -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:05 2025 by rpki-client