$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa File: 3871f96f-736a-3cfc-8ab8-e605674052b8.roa (raw, json) Hash identifier: 8UGUQZY35DAUvwDqDV24XjF93VYxEIfsPzDyp0WgrZY= Subject key identifier: CF:6F:75:82:A7:32:92:C7:5A:78:E8:0B:EF:75:67:DB:13:92:72:63 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD90DC9F5C8146D2F58A80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:90:dc:9f:5c:81:46:d2:f5:8a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=bffb7de1-af25-416c-9b15-e547a245350e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:21:db:84:6c:5c:1d:e2:0a:62:0a:8e:2f: da:ac:8c:ec:36:88:55:ce:44:12:26:6f:98:e1:f6: f5:2e:e1:76:2d:c3:4c:7f:f5:28:c5:3c:66:c3:b7: dd:df:0c:5b:65:dc:0a:50:1f:2a:ef:0b:ab:78:dd: 3b:d9:1b:3b:1a:75:4f:50:50:bf:34:9d:e4:a2:ae: 76:75:93:a3:be:c5:12:89:b3:09:16:1d:23:9e:92: 50:a9:c3:87:92:18:4d:2d:75:84:72:3a:2e:c5:43: a4:4d:00:f6:d5:94:67:f0:f1:43:13:f8:a1:57:0f: 96:ee:03:e6:64:5b:82:06:d5:df:ac:d6:a6:67:47: 10:f7:f7:60:9c:ed:93:87:76:bf:48:bd:12:73:44: f7:75:e9:84:bd:7f:a2:1c:a1:04:fb:8c:aa:6c:12: 27:65:35:7b:94:fc:de:03:5a:5a:ed:cf:67:14:e3: 44:ed:8f:9c:44:26:67:d9:14:de:db:2f:b1:74:48: 1b:dd:18:47:13:30:93:de:e5:86:ff:d2:a1:94:1e: 63:ca:f4:5d:d0:1f:b3:5d:87:6a:ec:f3:e2:36:1a: de:aa:61:de:06:24:50:99:7b:07:b6:39:da:66:8d: b0:c7:a3:f9:e0:4a:cd:8d:44:fe:23:ca:6f:3f:ff: 4f:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6F:75:82:A7:32:92:C7:5A:78:E8:0B:EF:75:67:DB:13:92:72:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:6b:54:d2:57:27:6a:d1:83:2f:ac:8e:48:b7:d4:91:70:78: 8e:3f:53:15:a2:21:87:33:57:ad:e0:8b:54:da:62:2e:68:f0: 49:41:c1:40:db:d2:ce:6f:60:06:1c:98:8d:6c:b3:0b:28:07: 85:cf:02:c3:c6:45:10:3d:76:a7:15:70:7f:f6:32:96:5d:f5: 5e:66:6d:fa:de:93:0b:63:7a:cb:71:d5:5e:0f:ed:3c:54:e9: 5a:62:49:a2:c5:f3:ef:66:45:64:8e:d8:25:28:c1:0d:ad:64: 3a:09:f2:f7:46:5b:3c:99:db:b0:ab:f2:60:48:a3:d9:d1:4f: 2d:7e:73:54:ee:b8:41:5a:6b:8b:37:d3:f9:91:2e:3b:37:05: b6:86:44:1b:43:3e:51:21:53:80:d6:d6:ce:df:4a:00:5c:21: e2:f4:4b:c6:52:08:b4:d5:3e:08:ce:ba:62:9f:0a:36:77:84: 6a:78:cb:17:70:57:e1:4e:26:a0:db:e8:45:36:8b:87:49:f9: 08:b1:06:47:69:bd:0c:74:43:79:12:75:71:b1:f9:df:02:91: d6:e1:4f:a7:05:47:10:2c:c9:79:cb:f8:3b:8b:b5:25:c2:c7: bd:87:36:56:1c:a9:c0:92:0a:67:17:33:75:5f:3c:9b:63:b3: f2:ad:67:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzZDcn1yBRtL1ioAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmZmYjdkZTEtYWYyNS00MTZjLTliMTUtZTU0N2EyNDUzNTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXIh24RsXB3iCmIKji/arIzsNohVzkQSJm+Y 4fb1LuF2LcNMf/UoxTxmw7fd3wxbZdwKUB8q7wureN072Rs7GnVPUFC/NJ3koq52 dZOjvsUSibMJFh0jnpJQqcOHkhhNLXWEcjouxUOkTQD21ZRn8PFDE/ihVw+W7gPm ZFuCBtXfrNamZ0cQ9/dgnO2Th3a/SL0Sc0T3demEvX+iHKEE+4yqbBInZTV7lPze A1pa7c9nFONE7Y+cRCZn2RTe2y+xdEgb3RhHEzCT3uWG/9KhlB5jyvRd0B+zXYdq 7PPiNhreqmHeBiRQmXsHtjnaZo2wx6P54ErNjUT+I8pvP/9PRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9vdYKnMpLHWnjoC+91Z9sTknJjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzg3MWY5NmYtNzM2YS0z Y2ZjLThhYjgtZTYwNTY3NDA1MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZrVNJXJ2rRgy+sjki31JFweI4/UxWiIYczV63gi1TaYi5o8ElBwUDb 0s5vYAYcmI1sswsoB4XPAsPGRRA9dqcVcH/2MpZd9V5mbfrekwtjestx1V4P7TxU 6VpiSaLF8+9mRWSO2CUowQ2tZDoJ8vdGWzyZ27Cr8mBIo9nRTy1+c1TuuEFaa4s3 0/mRLjs3BbaGRBtDPlEhU4DW1s7fSgBcIeL0S8ZSCLTVPgjOumKfCjZ3hGp4yxdw V+FOJqDb6EU2i4dJ+QixBkdpvQx0Q3kSdXGx+d8CkdbhT6cFRxAsyXnL+DuLtSXC x72HNlYcqcCSCmcXM3VfPJtjs/KtZ3M= -----END CERTIFICATE-----Generated at Mon Oct 20 07:09:14 2025 by rpki-client