$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352490f8-3bbc-3c24-9175-79d37b2b0b45.roa File: 352490f8-3bbc-3c24-9175-79d37b2b0b45.roa (raw, json) Hash identifier: h0X4Zkytp/KpPe3QZW3rKSDEYgz8DRXbEtO/oOiZ328= Subject key identifier: F3:9C:36:07:42:CF:22:B2:61:36:8E:0C:1D:9C:C8:86:CD:C5:6D:6C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCDC5931BE520BE5D05200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352490f8-3bbc-3c24-9175-79d37b2b0b45.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:dc:59:31:be:52:0b:e5:d0:52:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2c2b2b18-b07d-4404-b068-79d3a71af41a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:35:c1:9c:ff:c8:b1:40:b4:3d:25:4a:bb:18: 0e:9d:a2:e5:19:77:73:d6:42:cb:04:c2:56:dd:c0: af:06:98:af:21:1d:af:ec:ec:52:ae:0c:e9:2d:81: 2f:e1:0c:2a:51:bf:88:0a:19:af:86:0e:a1:88:d6: db:ac:a1:d6:8e:f3:3f:00:cf:c9:eb:43:4c:f8:8b: 2f:7b:7a:5b:68:4c:02:61:60:78:86:91:87:2b:59: a9:d3:4d:61:34:99:9e:95:12:84:fe:fd:06:34:39: ee:58:48:bc:54:77:22:12:d1:e3:94:a2:40:cf:c7: dc:b6:7e:c2:cd:a3:b5:09:a1:47:cd:fc:02:ad:63: 2d:01:6c:20:fd:43:1e:d0:72:4d:89:ad:e0:2f:e1: 65:51:9a:25:13:0f:4d:99:df:f8:25:ba:b6:59:f9: ac:53:d3:00:4c:6a:8a:c2:5a:52:d3:b5:e4:2d:ff: 1c:44:8a:24:18:5b:1c:1e:85:8a:eb:52:2b:85:3c: 63:60:45:64:1e:09:e4:7c:dc:49:3b:96:bd:ca:4e: 26:c9:e8:42:32:65:33:ff:f6:d4:73:ca:8a:bb:ea: 13:69:5c:87:68:c8:04:78:c1:d4:4b:8c:90:2d:a6: 4b:d7:19:ee:24:6d:fd:d0:47:10:9b:78:9e:37:0d: 7a:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9C:36:07:42:CF:22:B2:61:36:8E:0C:1D:9C:C8:86:CD:C5:6D:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/352490f8-3bbc-3c24-9175-79d37b2b0b45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:79:36:60:39:3b:eb:02:b9:82:47:f3:57:aa:ab:0c:1a:79: 38:9a:92:56:55:6f:b1:21:1e:e8:8a:1a:b4:6e:c6:44:d7:e4: 9a:89:50:51:56:9d:b6:bb:11:7c:2a:42:6f:ef:cb:85:f2:21: 94:c6:6f:00:00:3e:bc:51:03:49:78:91:f8:64:e0:ac:01:cf: 21:8e:87:4d:b4:05:a7:f4:47:fe:a4:50:49:0c:b0:76:20:0e: 3e:02:2f:5d:00:40:13:74:46:5d:53:db:1d:b4:e5:35:ae:b1: 51:77:47:27:49:17:eb:a2:6d:55:03:5a:36:f3:1b:02:5a:41: 78:2f:0d:6d:09:b2:50:e7:55:15:d1:95:dc:0e:8c:f6:fd:cd: d7:71:c8:0a:53:19:40:df:17:e0:4a:44:fe:57:e3:4c:18:35: 35:d7:da:8d:ab:64:3d:12:86:bf:f6:6d:84:5c:42:68:35:c5: 62:c2:ab:ac:b6:41:23:ff:8c:87:3c:64:45:e3:ec:ed:d9:76: ad:de:7f:fd:6f:d6:9c:fc:92:9b:86:df:12:ac:f1:f7:eb:9b: a8:d2:e1:32:5e:ae:30:b4:05:32:fd:53:45:53:7b:4e:c8:63: 0d:b3:08:81:a7:35:b4:37:40:b7:25:43:b8:ee:19:ee:5f:e2: 1d:3e:07:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNxZMb5SC+XQUgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmMyYjJiMTgtYjA3ZC00NDA0LWIwNjgtNzlkM2E3MWFmNDFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDXBnP/IsUC0PSVKuxgOnaLlGXdz1kLLBMJW 3cCvBpivIR2v7OxSrgzpLYEv4QwqUb+IChmvhg6hiNbbrKHWjvM/AM/J60NM+Isv e3pbaEwCYWB4hpGHK1mp001hNJmelRKE/v0GNDnuWEi8VHciEtHjlKJAz8fctn7C zaO1CaFHzfwCrWMtAWwg/UMe0HJNia3gL+FlUZolEw9Nmd/4Jbq2WfmsU9MATGqK wlpS07XkLf8cRIokGFscHoWK61IrhTxjYEVkHgnkfNxJO5a9yk4myehCMmUz//bU c8qKu+oTaVyHaMgEeMHUS4yQLaZL1xnuJG390EcQm3ieNw16XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPOcNgdCzyKyYTaODB2cyIbNxW1sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzUyNDkwZjgtM2JiYy0z YzI0LTkxNzUtNzlkMzdiMmIwYjQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK31MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZ5NmA5O+sCuYJH81eqqwwaeTiaklZVb7EhHuiKGrRuxkTX5JqJUFFW nba7EXwqQm/vy4XyIZTGbwAAPrxRA0l4kfhk4KwBzyGOh020Baf0R/6kUEkMsHYg Dj4CL10AQBN0Rl1T2x205TWusVF3RydJF+uibVUDWjbzGwJaQXgvDW0JslDnVRXR ldwOjPb9zddxyApTGUDfF+BKRP5X40wYNTXX2o2rZD0Shr/2bYRcQmg1xWLCq6y2 QSP/jIc8ZEXj7O3Zdq3ef/1v1pz8kpuG3xKs8ffrm6jS4TJerjC0BTL9U0VTe07I Yw2zCIGnNbQ3QLclQ7juGe5f4h0+B4g= -----END CERTIFICATE-----Generated at Sun Oct 19 23:52:54 2025 by rpki-client