$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa File: 7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa (raw, json) Hash identifier: gP2lMAIkXdWIJwp0afd97/+Lv+zAxUAv0oti2yfsy0Q= Subject key identifier: F1:4A:A0:C4:9E:E1:60:25:D9:D2:15:DE:B5:6E:78:CE:53:6F:91:1C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD419AFE551FFB2FED930 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.7.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d4:19:af:e5:51:ff:b2:fe:d9:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=4d61d2cf-373f-4b89-ae5a-b1fb96b0853e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:18:a3:a4:dd:3d:44:41:94:60:55:dd:6c:bf: 7f:a6:d0:ee:b4:ec:0d:a2:9a:4e:99:9c:5e:46:2d: 8c:e8:32:41:5c:e1:d0:9a:04:38:e8:9c:59:96:83: b5:a9:6e:65:d3:2a:bf:e4:f4:64:91:4a:2b:62:9e: a9:28:37:46:91:a5:04:ed:bf:c8:ec:e2:e6:71:00: f0:36:9a:f2:92:f1:38:2f:4c:7e:0b:f9:b8:e4:f0: cb:f5:7e:e7:ad:a1:6b:9d:08:e2:03:1f:72:b4:1d: 6f:fa:c2:7c:4a:40:cd:b1:f9:61:51:92:cd:de:fd: 2d:ad:0c:00:51:e6:63:11:36:f5:81:5a:5e:dd:f4: e2:fe:79:d0:2a:3b:0b:14:57:e4:dd:94:94:9c:80: c7:39:b7:94:dc:40:01:e0:82:83:d0:ed:a4:c1:be: 14:dc:ad:10:24:ee:6d:36:76:e1:91:b2:5a:94:04: 83:55:d9:06:47:1d:41:a8:69:6c:e1:30:34:b1:89: d5:aa:cb:a8:f5:00:73:12:02:a5:67:cc:32:dc:c6: 8a:f4:e0:64:7d:56:96:ca:86:82:4e:65:87:d9:80: 44:03:5a:8b:18:d4:fd:e4:22:6e:ef:c8:29:a3:cb: 35:e2:fa:18:1d:55:cd:6f:00:49:4f:62:d0:00:bb: ae:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:4A:A0:C4:9E:E1:60:25:D9:D2:15:DE:B5:6E:78:CE:53:6F:91:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a3a9f2c-bf7c-34db-899c-5e26acb8575e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.7.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:62:b2:56:14:b6:64:e7:2e:3a:58:70:69:88:42:66:4f:df: 5e:59:69:3e:a8:31:2e:f4:fd:62:4a:32:eb:9b:df:b6:d4:0a: 35:81:d1:9f:af:08:56:06:21:c5:3d:7a:f3:39:95:9b:0e:fa: a0:93:e3:50:96:95:68:5b:70:e6:36:c6:19:a0:b6:a9:f5:f4: 1e:0a:cc:51:3b:52:1b:da:7c:7f:62:38:06:4d:a6:71:a4:fb: f7:6e:09:e8:76:b3:46:fa:29:52:c3:93:63:e1:24:05:48:69: 10:ea:9a:5d:7c:a9:5a:c0:5f:34:30:9d:20:20:c5:74:b4:71: c4:2d:3b:04:6b:6c:df:da:51:a9:6a:bf:6f:99:04:8c:26:6d: 44:2a:61:aa:68:4c:06:e5:be:80:ab:51:00:f5:ac:97:f2:b1: df:0b:07:4e:85:ba:78:1a:e6:ed:46:1e:d5:af:6f:7a:dc:2e: 88:b5:6e:e2:b1:2f:d3:cf:37:1e:4d:24:82:ec:69:3f:81:29: b3:cc:08:74:a9:5f:61:af:1c:63:7a:f1:f3:cf:13:34:9a:27: 44:d9:b4:1f:ed:14:32:97:a4:2c:d3:39:17:37:27:43:05:2d: e1:93:79:12:ac:5f:33:bf:ba:e5:13:af:14:07:bd:02:79:b3: 95:e3:69:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNQZr+VR/7L+2TAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk NGQ2MWQyY2YtMzczZi00Yjg5LWFlNWEtYjFmYjk2YjA4NTNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxijpN09REGUYFXdbL9/ptDutOwNoppOmZxe Ri2M6DJBXOHQmgQ46JxZloO1qW5l0yq/5PRkkUorYp6pKDdGkaUE7b/I7OLmcQDw NprykvE4L0x+C/m45PDL9X7nraFrnQjiAx9ytB1v+sJ8SkDNsflhUZLN3v0trQwA UeZjETb1gVpe3fTi/nnQKjsLFFfk3ZSUnIDHObeU3EAB4IKD0O2kwb4U3K0QJO5t NnbhkbJalASDVdkGRx1BqGls4TA0sYnVqsuo9QBzEgKlZ8wy3MaK9OBkfVaWyoaC TmWH2YBEA1qLGNT95CJu78gpo8s14voYHVXNbwBJT2LQALuuRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFKoMSe4WAl2dIV3rVueM5Tb5EcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2EzYTlmMmMtYmY3Yy0z NGRiLTg5OWMtNWUyNmFjYjg1NzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdislYUtmTnLjpYcGmIQmZP315ZaT6oMS70/WJKMuub37bUCjWB0Z+v CFYGIcU9evM5lZsO+qCT41CWlWhbcOY2xhmgtqn19B4KzFE7UhvafH9iOAZNpnGk +/duCeh2s0b6KVLDk2PhJAVIaRDqml18qVrAXzQwnSAgxXS0ccQtOwRrbN/aUalq v2+ZBIwmbUQqYapoTAblvoCrUQD1rJfysd8LB06Funga5u1GHtWvb3rcLoi1buKx L9PPNx5NJILsaT+BKbPMCHSpX2GvHGN68fPPEzSaJ0TZtB/tFDKXpCzTORc3J0MF LeGTeRKsXzO/uuUTrxQHvQJ5s5Xjab0= -----END CERTIFICATE-----Generated at Mon Oct 20 09:46:59 2025 by rpki-client