$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa File: 1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa (raw, json) Hash identifier: 5Or7VyS+2/h8S9rWglJqbdQIU2zHk3H2wfHnqg/XrsE= Subject key identifier: F8:9C:1E:7F:D0:7B:2C:3B:F6:8C:59:C0:E7:76:AE:4E:29:64:EF:F0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD37EDE7D7DD4662F97A4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 162.72.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d3:7e:de:7d:7d:d4:66:2f:97:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=d6fdfe45-a3c6-4d41-b281-ad5cc659aee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:51:84:c9:20:96:5c:77:42:47:5b:aa:b7: fd:86:95:36:6f:6f:0b:d3:db:59:4a:a9:e6:36:d0: 82:98:27:b0:2c:0d:e6:21:cb:e0:15:23:18:8e:a6: ef:db:fb:90:66:67:90:2b:16:19:05:9a:a8:4b:b5: 40:10:bd:bf:3c:fd:90:75:5a:71:5d:6d:a7:83:58: 79:99:01:32:76:87:a8:e2:23:75:41:c0:a9:fd:b6: f6:10:56:e4:16:af:ec:1b:13:ca:7c:8b:b6:e7:7e: 2d:77:fc:d3:a4:64:88:ba:08:01:6f:d4:87:05:65: f7:b7:51:d8:b3:99:48:01:82:a7:30:12:80:9c:b1: d7:1b:5a:74:39:11:22:aa:e5:2d:57:9a:0b:72:b2: 51:72:6f:9a:0d:c6:f6:75:8f:29:79:1e:9a:75:ac: 20:6f:a2:12:14:0a:7a:98:02:3a:79:35:ea:02:b7: 4b:4e:66:65:3d:a5:5b:73:97:63:a5:7e:fe:06:09: 52:d8:97:e8:aa:a7:e7:b3:a7:2b:cc:fe:f0:85:1e: 25:fc:58:1f:41:f6:46:71:ef:63:f2:62:39:bb:fa: 3e:c1:7f:b8:f9:76:88:6f:e8:d4:65:64:0c:20:d3: aa:3e:47:a0:8b:c1:37:37:fa:37:37:14:05:45:11: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:9C:1E:7F:D0:7B:2C:3B:F6:8C:59:C0:E7:76:AE:4E:29:64:EF:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/1faa8d54-7f9e-37a4-8fc5-b5de6fecad11.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:b2:1f:a3:f7:95:16:1a:fb:20:42:fa:10:82:e4:db:a2:77: 96:22:f9:c5:14:eb:84:dd:a1:92:dc:b0:fb:f1:df:4e:0a:2b: 01:c2:97:11:2f:eb:a4:bb:86:b0:60:24:60:29:05:c5:29:6f: 98:4f:7b:0b:62:a9:1b:12:a3:c5:45:b2:3d:82:69:aa:ba:2f: 50:eb:69:00:31:64:cc:66:3b:07:88:36:e1:93:fa:67:57:78: 62:e0:12:20:e6:78:06:b9:52:90:d8:26:59:99:21:3d:2d:bd: 42:16:61:d3:6a:d9:98:23:4b:62:a1:09:93:74:02:7b:58:f8: 85:ae:cb:3c:5d:40:4f:47:52:06:34:23:9d:55:39:62:a2:78: 4e:35:dd:15:f9:43:5e:a8:60:8a:4f:3b:46:27:16:79:3b:5e: 7d:07:35:88:4f:6a:16:20:c9:c3:08:94:ac:66:8a:ac:32:9d: c9:41:8b:b2:60:44:b5:fc:1f:0c:8b:ff:0d:1e:7e:39:65:7f: 09:4e:0a:6c:b5:b6:ca:29:02:8d:e4:6d:33:a2:41:99:33:82: 4b:fe:2b:51:f3:a8:8a:27:53:3f:4a:21:31:87:d1:dd:36:73: 2b:eb:cb:63:13:dc:61:28:e6:45:2a:07:a2:51:c8:9a:74:5f: 27:d3:4e:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdN+3n191GYvl6QwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZDZmZGZlNDUtYTNjNi00ZDQxLWIyODEtYWQ1Y2M2NTlhZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtBRhMkgllx3Qkdbqrf9hpU2b28L09tZSqnm NtCCmCewLA3mIcvgFSMYjqbv2/uQZmeQKxYZBZqoS7VAEL2/PP2QdVpxXW2ng1h5 mQEydoeo4iN1QcCp/bb2EFbkFq/sGxPKfIu2534td/zTpGSIuggBb9SHBWX3t1HY s5lIAYKnMBKAnLHXG1p0OREiquUtV5oLcrJRcm+aDcb2dY8peR6adawgb6ISFAp6 mAI6eTXqArdLTmZlPaVbc5djpX7+BglS2Jfoqqfns6crzP7whR4l/FgfQfZGce9j 8mI5u/o+wX+4+XaIb+jUZWQMINOqPkegi8E3N/o3NxQFRRG1zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPicHn/Qeyw79oxZwOd2rk4pZO/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMWZhYThkNTQtN2Y5ZS0z N2E0LThmYzUtYjVkZTZmZWNhZDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHeyH6P3lRYa+yBC+hCC5Nuid5Yi+cUU64TdoZLcsPvx304KKwHClxEv 66S7hrBgJGApBcUpb5hPewtiqRsSo8VFsj2Caaq6L1DraQAxZMxmOweINuGT+mdX eGLgEiDmeAa5UpDYJlmZIT0tvUIWYdNq2ZgjS2KhCZN0AntY+IWuyzxdQE9HUgY0 I51VOWKieE413RX5Q16oYIpPO0YnFnk7Xn0HNYhPahYgycMIlKxmiqwynclBi7Jg RLX8HwyL/w0efjllfwlOCmy1tsopAo3kbTOiQZkzgkv+K1HzqIonUz9KITGH0d02 cyvry2MT3GEo5kUqB6JRyJp0XyfTTkI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:26:34 2025 by rpki-client