$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa File: 3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa (raw, json) Hash identifier: nWkbgVzXVPy8vqiW+ltQSOeFQqIJ1Fq7ODd3/thcpr8= Subject key identifier: 41:9C:85:9D:FC:0A:C7:51:8E:35:75:D7:65:5E:E6:19:6B:E6:D4:DE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD8DBAD2B5044026DD5B40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:8d:ba:d2:b5:04:40:26:dd:5b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=ba14c12a-e84b-42f2-b69a-dffd8e2fc7fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:1a:60:e5:5e:63:db:60:2b:1c:99:a7:f4:41: b4:97:54:b5:0b:0b:e9:48:d9:e1:79:5e:ca:63:4f: 3f:a1:4c:0d:a0:b7:00:1a:de:8e:0c:81:e6:d9:12: fa:23:20:9d:3b:24:5e:0e:89:be:46:e0:b4:ca:b3: 4f:b6:7b:37:33:91:1b:f3:6d:bf:76:12:00:aa:54: 4e:8d:4d:7b:2d:b8:91:a7:9e:94:e3:af:c2:b2:6f: 0c:ea:7f:21:3d:cb:68:93:ab:15:2a:dd:17:32:e5: f5:6e:e3:11:a7:d7:6c:de:00:40:ce:fe:e0:6f:59: 2e:c2:bc:11:bb:e2:86:44:9a:43:00:86:3d:20:50: 26:1d:ad:00:ad:59:46:24:7f:6a:5a:40:3f:2a:05: 74:73:73:a2:eb:f2:83:37:9a:6c:2d:d4:2c:23:4e: 68:dc:20:72:96:96:3a:81:57:88:75:67:44:b8:80: 74:b6:ef:fa:19:0e:45:8a:22:27:64:86:0d:d9:86: 74:16:e0:1f:35:3e:b8:e3:ca:d8:9b:86:c9:82:95: 84:a1:a5:c5:8c:5e:88:24:f3:00:57:fe:64:98:8b: 2d:70:1b:ef:ad:da:31:32:c5:85:fe:6f:af:1f:67: 50:96:91:7c:48:af:a6:47:96:43:5c:5d:4c:59:48: 94:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:9C:85:9D:FC:0A:C7:51:8E:35:75:D7:65:5E:E6:19:6B:E6:D4:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:12:69:bc:db:c3:89:4f:e6:4d:65:90:d8:30:a7:89:28:fc: 65:91:01:3d:ba:3d:e0:5b:65:a5:a8:a0:c6:63:e4:52:96:df: 49:f6:67:b7:6b:2a:55:12:cd:41:c9:c5:8c:d1:01:ce:a1:fc: e3:6b:b3:8f:d5:af:95:fb:7d:fa:81:10:47:16:6a:57:be:b8: dc:eb:fc:96:4d:25:40:af:87:f4:d9:2f:c6:5a:c0:10:26:55: dc:7c:f0:ce:16:2e:81:83:5d:6f:5c:56:35:d4:b5:ea:7f:d1: 9a:64:44:98:89:9d:34:a3:7e:ab:ed:f9:0f:25:05:f5:12:d2: 6a:be:45:49:03:2e:22:ad:0d:52:df:02:8c:d8:76:00:b0:30: 36:71:48:5c:65:45:37:15:e8:af:1a:d9:86:ed:4e:a7:d1:89: 54:a7:b2:48:f8:a2:f3:99:cb:b3:3e:3f:f3:a3:f4:f0:e7:70: 3e:e0:62:24:ab:db:17:ac:3b:c8:ce:06:11:30:81:f2:d6:d2: 0f:da:e0:9e:9c:7c:ab:e3:d4:ff:16:12:ad:df:65:07:e7:89: 8c:8d:54:c9:d6:d2:4a:cb:17:74:e9:07:07:24:a8:5c:3a:d8: ed:1c:60:52:1d:d9:2a:ab:9c:6a:0c:96:4d:b0:32:62:f1:bb: 7a:dc:54:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzY260rUEQCbdW0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YmExNGMxMmEtZTg0Yi00MmYyLWI2OWEtZGZmZDhlMmZjN2ZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRpg5V5j22ArHJmn9EG0l1S1CwvpSNnheV7K Y08/oUwNoLcAGt6ODIHm2RL6IyCdOyReDom+RuC0yrNPtns3M5Eb822/dhIAqlRO jU17LbiRp56U46/Csm8M6n8hPctok6sVKt0XMuX1buMRp9ds3gBAzv7gb1kuwrwR u+KGRJpDAIY9IFAmHa0ArVlGJH9qWkA/KgV0c3Oi6/KDN5psLdQsI05o3CBylpY6 gVeIdWdEuIB0tu/6GQ5FiiInZIYN2YZ0FuAfNT6448rYm4bJgpWEoaXFjF6IJPMA V/5kmIstcBvvrdoxMsWF/m+vH2dQlpF8SK+mR5ZDXF1MWUiUfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGchZ38CsdRjjV112Ve5hlr5tTeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2MzZDA3NWEtMGIzYS0z OWIyLWI4Y2MtZGZkNDkwNDgyOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkSabzbw4lP5k1lkNgwp4ko/GWRAT26PeBbZaWooMZj5FKW30n2Z7dr KlUSzUHJxYzRAc6h/ONrs4/Vr5X7ffqBEEcWale+uNzr/JZNJUCvh/TZL8ZawBAm Vdx88M4WLoGDXW9cVjXUtep/0ZpkRJiJnTSjfqvt+Q8lBfUS0mq+RUkDLiKtDVLf AozYdgCwMDZxSFxlRTcV6K8a2YbtTqfRiVSnskj4ovOZy7M+P/Oj9PDncD7gYiSr 2xesO8jOBhEwgfLW0g/a4J6cfKvj1P8WEq3fZQfniYyNVMnW0krLF3TpBwckqFw6 2O0cYFId2SqrnGoMlk2wMmLxu3rcVFk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:30:21 2025 by rpki-client