$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20d8b5ab-2dc0-3d9c-a7a5-d99caa788bf6.roa File: 20d8b5ab-2dc0-3d9c-a7a5-d99caa788bf6.roa (raw, json) Hash identifier: c/7pxPensDILkhTND9hiA2TlyMhIxFbf9V+orQebV88= Subject key identifier: 3C:95:AF:09:FC:BE:02:92:E8:DC:31:72:E8:BA:EA:82:D0:B4:20:08 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD8C64C39334EBDC7F0EC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20d8b5ab-2dc0-3d9c-a7a5-d99caa788bf6.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.81.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:8c:64:c3:93:34:eb:dc:7f:0e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4af79ffb-318b-4b22-8c2f-cc77ce6bdc7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:03:41:58:ea:a0:34:65:5c:48:77:e6:f8:36: fe:1f:f0:99:cb:59:8d:bc:e7:69:41:7c:5b:e6:91: 27:31:31:45:e2:bc:99:91:df:3b:d1:6a:05:93:24: 4a:7b:0b:b7:1b:e4:d9:bf:95:5d:a2:ed:e3:f2:db: 07:a3:5f:c2:a7:8f:80:96:13:f3:5b:4d:9f:cc:12: 0c:26:25:8b:22:3c:6d:98:11:c0:19:21:c8:66:49: 6a:79:ad:1b:fb:bf:d1:dc:0a:9b:83:c0:bf:f0:1a: f0:a3:ff:31:b4:1e:3c:43:ba:b7:f9:9a:fd:63:b9: bc:06:0d:18:bb:cc:02:a2:03:69:ce:0d:23:4b:71: b4:c7:92:56:8f:25:1a:06:f4:64:53:08:0b:0c:a8: 4f:e4:29:1f:ae:ba:c3:2a:d2:9a:c4:4b:8d:51:98: 62:48:a9:16:c9:0d:fc:16:44:64:1b:a3:6e:b6:ae: 03:db:12:30:4a:71:c6:a8:c6:63:b9:93:69:be:ed: 36:2e:4e:14:f4:35:51:08:5f:a1:25:24:26:a8:ad: 42:ab:76:39:69:eb:d9:f6:e6:49:52:c0:4b:ce:d6: 60:5f:d6:17:bf:3b:28:73:18:f5:fb:b0:64:73:4a: 9b:ad:76:8c:c5:f3:b9:9b:95:97:01:ef:1e:f5:1b: d8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:95:AF:09:FC:BE:02:92:E8:DC:31:72:E8:BA:EA:82:D0:B4:20:08 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/20d8b5ab-2dc0-3d9c-a7a5-d99caa788bf6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.81.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b7:42:6f:24:fb:c0:13:b5:df:f6:3d:f5:c8:8a:7b:12:45:95: 23:29:ec:9d:eb:28:ce:95:f1:b8:65:bd:55:a9:bc:72:88:36: f3:a8:5c:3e:cc:a3:29:a5:23:5d:e9:6a:9c:87:a8:e6:bc:a5: 4f:90:ed:b6:4e:0a:c0:e5:bf:a5:94:94:b4:5d:46:33:81:5a: af:74:5c:80:ae:9d:4a:dc:bc:ce:ff:d6:a8:8b:87:ca:40:71: 29:a4:db:ad:61:ef:1c:66:3c:fe:fa:3c:eb:18:f6:a4:69:cd: 14:b1:50:4c:8d:05:04:36:3c:fb:b0:f2:81:8a:a4:59:d9:f9: 79:15:b2:f7:65:7a:93:d6:b4:e9:37:21:09:de:0e:2b:38:f1: 67:27:48:d5:7b:a0:bf:5e:8c:8b:8e:cc:9f:a2:f7:36:6f:02: bf:6e:e1:88:b5:e2:5a:bb:f1:e8:cd:6e:40:fe:2e:95:81:0c: 6e:7a:8b:5d:e7:61:30:bc:0f:07:dd:b7:5d:eb:8e:e8:99:c4: 5d:f4:e8:6e:0b:87:ac:60:c8:ef:cd:30:a0:9f:68:91:04:2a: aa:e5:67:ee:a6:36:46:8f:26:cc:28:15:19:52:ff:88:33:ad: 41:75:d9:6a:63:5e:f2:72:7d:62:d9:c8:90:ba:47:62:96:ed: 24:72:ac:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYxkw5M069x/DsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGFmNzlmZmItMzE4Yi00YjIyLThjMmYtY2M3N2NlNmJkYzdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQNBWOqgNGVcSHfm+Db+H/CZy1mNvOdpQXxb 5pEnMTFF4ryZkd870WoFkyRKewu3G+TZv5Vdou3j8tsHo1/Cp4+AlhPzW02fzBIM JiWLIjxtmBHAGSHIZklqea0b+7/R3Aqbg8C/8Brwo/8xtB48Q7q3+Zr9Y7m8Bg0Y u8wCogNpzg0jS3G0x5JWjyUaBvRkUwgLDKhP5CkfrrrDKtKaxEuNUZhiSKkWyQ38 FkRkG6Nutq4D2xIwSnHGqMZjuZNpvu02Lk4U9DVRCF+hJSQmqK1Cq3Y5aevZ9uZJ UsBLztZgX9YXvzsocxj1+7Bkc0qbrXaMxfO5m5WXAe8e9RvY7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDyVrwn8vgKS6Nwxcui66oLQtCAIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjBkOGI1YWItMmRjMC0z ZDljLWE3YTUtZDk5Y2FhNzg4YmY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALdCbyT7wBO13/Y99ciKexJFlSMp7J3rKM6V8bhlvVWpvHKINvOoXD7M oymlI13papyHqOa8pU+Q7bZOCsDlv6WUlLRdRjOBWq90XICunUrcvM7/1qiLh8pA cSmk261h7xxmPP76POsY9qRpzRSxUEyNBQQ2PPuw8oGKpFnZ+XkVsvdlepPWtOk3 IQneDis48WcnSNV7oL9ejIuOzJ+i9zZvAr9u4Yi14lq78ejNbkD+LpWBDG56i13n YTC8Dwfdt13rjuiZxF306G4Lh6xgyO/NMKCfaJEEKqrlZ+6mNkaPJswoFRlS/4gz rUF12WpjXvJyfWLZyJC6R2KW7SRyrKc= -----END CERTIFICATE-----Generated at Mon Oct 20 01:58:41 2025 by rpki-client