$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88127b1f-2f64-332f-963a-4c8619087663.roa File: 88127b1f-2f64-332f-963a-4c8619087663.roa (raw, json) Hash identifier: kzTdMwmhBLoY4Dmrgu1t7KnlHxlcNOjN7plEQk44wDc= Subject key identifier: 8B:12:B0:17:46:EB:2E:5C:04:09:44:F3:98:F4:8B:7C:50:BC:B5:80 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDCEF7E084FB981DEEF0C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88127b1f-2f64-332f-963a-4c8619087663.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 162.72.95.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:ce:f7:e0:84:fb:98:1d:ee:f0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=f008f8e0-5efb-4b8f-8358-a526fcc57a0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:0f:cb:30:cb:77:8b:d4:ac:66:ac:8c:97:be: b1:7a:37:4d:10:ef:10:46:67:68:b4:7c:aa:d1:b2: c9:67:4c:82:37:8d:1b:99:f5:25:12:5d:b6:e5:65: 71:13:3f:30:7d:ef:e1:93:34:6d:35:15:32:e1:54: b2:ad:92:92:7a:af:48:7f:21:33:f3:1f:84:52:25: 41:f4:d3:b3:ef:80:fc:50:8a:c8:90:cc:6e:47:94: ec:f5:7a:ca:b7:9c:76:0b:76:53:8c:bf:b7:e4:43: 90:90:7e:7b:f7:89:1e:8a:86:cf:7f:07:8a:c2:0a: be:43:c7:1a:9a:35:f8:73:15:b3:0b:e1:bc:b2:7f: b8:ba:fb:91:0b:23:7e:27:5d:62:bc:b5:c2:20:06: 9f:fc:a6:52:d4:f7:df:69:64:97:8b:84:70:f5:12: b0:82:02:6e:48:99:91:4e:0f:29:e1:9e:ce:f1:b6: 45:46:35:93:1b:cf:de:86:1d:b3:9c:30:cf:ab:a6: 34:de:7f:51:ec:db:43:bb:1b:bb:18:80:4c:b2:97: a4:d3:01:86:5a:02:49:7d:e1:2e:15:8c:fe:5b:9d: 18:b4:df:97:31:e7:81:7b:48:bb:07:bf:40:2c:00: 56:77:96:47:63:b9:0b:20:10:80:f7:d2:f5:c0:e8: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:12:B0:17:46:EB:2E:5C:04:09:44:F3:98:F4:8B:7C:50:BC:B5:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/88127b1f-2f64-332f-963a-4c8619087663.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.95.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:21:d1:cd:52:3a:3a:49:a5:98:80:da:21:74:15:8c:9c:b9: 71:6b:90:f1:1d:89:53:7b:d6:a7:3d:36:48:e7:1f:a2:9f:38: ed:61:69:38:72:06:5b:d1:41:b5:a5:9e:04:a7:c5:a7:3c:bd: b8:7d:70:e1:f6:28:6b:dd:86:75:93:04:ba:78:c0:bb:18:e4: b1:ba:7a:1b:87:89:13:fb:ee:9c:2e:d7:55:37:6c:22:c1:b2: 3b:8e:6c:70:af:e2:6e:6f:c9:c8:f6:c1:a0:3f:d9:f7:a6:ce: cb:15:92:82:f1:d7:67:9f:a5:d1:e9:f9:dc:06:bd:ee:91:a8: 95:2b:c9:04:16:ec:a0:a6:36:83:74:81:bc:43:11:30:aa:5f: 09:84:6d:5f:a3:cf:8c:0c:ba:2c:cd:1d:2b:f4:d8:95:5c:8f: 59:a0:36:f3:99:af:9d:53:79:f1:55:33:d4:e8:d4:01:48:f5: 18:1a:0e:31:91:b5:9d:b6:ea:e9:e1:2c:c2:f9:e6:6b:45:88: 01:77:5d:17:af:e8:d2:c5:c3:f8:64:fc:0f:02:7c:77:e2:a8: 65:48:60:f4:77:17:2b:d6:51:3d:c5:9f:6a:28:49:f9:73:e8: a4:c6:54:46:99:2e:31:e3:8d:e2:f7:b5:de:e4:50:c2:65:02: 3c:6d:d2:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzc734IT7mB3u8MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZjAwOGY4ZTAtNWVmYi00YjhmLTgzNTgtYTUyNmZjYzU3YTBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA/LMMt3i9SsZqyMl76xejdNEO8QRmdotHyq 0bLJZ0yCN40bmfUlEl225WVxEz8wfe/hkzRtNRUy4VSyrZKSeq9IfyEz8x+EUiVB 9NOz74D8UIrIkMxuR5Ts9XrKt5x2C3ZTjL+35EOQkH5794keiobPfweKwgq+Q8ca mjX4cxWzC+G8sn+4uvuRCyN+J11ivLXCIAaf/KZS1PffaWSXi4Rw9RKwggJuSJmR Tg8p4Z7O8bZFRjWTG8/ehh2znDDPq6Y03n9R7NtDuxu7GIBMspek0wGGWgJJfeEu FYz+W50YtN+XMeeBe0i7B79ALABWd5ZHY7kLIBCA99L1wOhXnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIsSsBdG6y5cBAlE85j0i3xQvLWAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODgxMjdiMWYtMmY2NC0z MzJmLTk2M2EtNGM4NjE5MDg3NjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF4h0c1SOjpJpZiA2iF0FYycuXFrkPEdiVN71qc9NkjnH6KfOO1haThy BlvRQbWlngSnxac8vbh9cOH2KGvdhnWTBLp4wLsY5LG6ehuHiRP77pwu11U3bCLB sjuObHCv4m5vycj2waA/2femzssVkoLx12efpdHp+dwGve6RqJUryQQW7KCmNoN0 gbxDETCqXwmEbV+jz4wMuizNHSv02JVcj1mgNvOZr51TefFVM9To1AFI9RgaDjGR tZ226unhLML55mtFiAF3XRev6NLFw/hk/A8CfHfiqGVIYPR3FyvWUT3Fn2ooSflz 6KTGVEaZLjHjjeL3td7kUMJlAjxt0us= -----END CERTIFICATE-----Generated at Mon Oct 20 07:14:53 2025 by rpki-client