$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/928f7196-ca89-37a0-bc57-2ed202593726.roa File: 928f7196-ca89-37a0-bc57-2ed202593726.roa (raw, json) Hash identifier: qfZe+WnJK7kppTwflleXCNqboW2bDiaX5ZnHU34MLkA= Subject key identifier: DA:27:90:52:E4:3D:85:8C:C8:F8:1E:82:52:C8:C4:01:92:D5:1C:29 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDD31EF5E742D66F89B700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/928f7196-ca89-37a0-bc57-2ed202593726.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 162.72.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:d3:1e:f5:e7:42:d6:6f:89:b7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=3d309ad7-e203-4aae-8321-e4050764f413 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:89:a1:ba:15:6e:ea:7b:77:b2:ab:c7:89:9c: f0:6b:01:b7:52:21:93:db:1a:4f:80:89:77:9c:a1: ca:3f:db:55:b1:bc:cc:95:b5:a8:7b:3c:4c:58:6e: 67:a8:92:eb:92:bf:f6:b5:48:c3:c9:f8:84:90:8f: d9:b5:bb:3d:13:15:e6:6c:2a:d4:2b:bf:21:32:3e: ba:2b:85:87:7a:7b:7e:1a:45:ec:cd:9c:56:08:56: 39:66:e0:57:74:7c:d3:56:ad:6d:ca:c9:d9:48:62: 21:d6:13:5f:f3:dc:22:8d:a5:83:2a:eb:f7:54:01: d1:05:31:3c:b2:c9:ed:41:ef:21:90:88:71:6d:56: 07:29:a0:19:0f:70:ec:50:5a:5b:47:04:a5:8a:55: c1:a8:0d:c5:43:96:fe:1a:65:60:97:64:d5:a4:14: a5:48:71:7d:93:28:76:cd:2f:29:20:af:a4:36:47: a1:75:72:0d:52:af:4b:ce:c5:0a:58:e2:b4:d4:13: 82:1f:ce:9a:02:14:64:82:65:82:cf:5a:f5:38:b1: 55:f2:93:09:aa:8f:85:ec:b3:81:cb:6e:f1:52:bf: 5e:fa:01:d5:ee:5b:b0:84:03:c3:9e:6b:a6:02:1b: 10:d0:7c:c2:28:d2:5d:0f:49:f8:d9:0f:f5:36:3a: 11:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:27:90:52:E4:3D:85:8C:C8:F8:1E:82:52:C8:C4:01:92:D5:1C:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/928f7196-ca89-37a0-bc57-2ed202593726.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:fe:60:0a:49:e0:6b:03:54:77:66:87:b4:1f:11:df:cf:fd: 57:16:cf:45:0f:5d:51:c4:f8:b5:62:14:dc:be:fa:4f:83:e4: 11:cc:2e:91:94:14:e3:44:8b:89:0d:f1:d8:c0:54:3f:a1:21: 70:80:a7:3c:bc:d0:12:aa:0a:a4:46:5d:09:78:41:83:ad:ce: c7:90:45:ac:c9:14:22:35:3f:e0:53:b5:d6:47:bc:04:ca:5a: e0:59:a0:76:14:53:9e:19:3b:e2:a2:da:4d:0b:ab:df:0f:8e: 49:fe:15:be:90:6b:b9:5c:c3:3f:cf:ed:53:7a:7d:83:64:f2: be:3b:09:11:8c:75:bb:52:3e:5c:31:a1:0c:0a:c8:0a:26:b9: 53:6f:a7:14:00:9e:c6:d4:01:fc:6d:fc:7d:08:ef:96:05:c1: 53:27:e7:33:12:2f:7f:75:49:27:f5:66:d0:7e:de:04:eb:a8: 95:1d:6b:7d:69:12:46:2a:13:e7:7c:18:49:32:07:04:39:0d: 5b:04:f0:5a:f8:08:b3:df:dd:91:e1:e8:7b:9d:fc:a4:9c:8c: 3e:0d:b6:b7:88:79:c5:79:d4:c4:aa:ed:78:e0:4e:bb:ed:4f: ed:5c:04:dd:d3:16:fe:c7:8e:29:c4:99:e2:bb:22:9c:a2:e3: 45:4e:05:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzdMe9edC1m+JtwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk M2QzMDlhZDctZTIwMy00YWFlLTgzMjEtZTQwNTA3NjRmNDEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YmhuhVu6nt3sqvHiZzwawG3UiGT2xpPgIl3 nKHKP9tVsbzMlbWoezxMWG5nqJLrkr/2tUjDyfiEkI/Ztbs9ExXmbCrUK78hMj66 K4WHent+GkXszZxWCFY5ZuBXdHzTVq1tysnZSGIh1hNf89wijaWDKuv3VAHRBTE8 ssntQe8hkIhxbVYHKaAZD3DsUFpbRwSlilXBqA3FQ5b+GmVgl2TVpBSlSHF9kyh2 zS8pIK+kNkehdXINUq9LzsUKWOK01BOCH86aAhRkgmWCz1r1OLFV8pMJqo+F7LOB y27xUr9e+gHV7luwhAPDnmumAhsQ0HzCKNJdD0n42Q/1NjoR5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNonkFLkPYWMyPgeglLIxAGS1RwpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTI4ZjcxOTYtY2E4OS0z N2EwLWJjNTctMmVkMjAyNTkzNzI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH+YApJ4GsDVHdmh7QfEd/P/VcWz0UPXVHE+LViFNy++k+D5BHMLpGU FONEi4kN8djAVD+hIXCApzy80BKqCqRGXQl4QYOtzseQRazJFCI1P+BTtdZHvATK WuBZoHYUU54ZO+Ki2k0Lq98Pjkn+Fb6Qa7lcwz/P7VN6fYNk8r47CRGMdbtSPlwx oQwKyAomuVNvpxQAnsbUAfxt/H0I75YFwVMn5zMSL391SSf1ZtB+3gTrqJUda31p EkYqE+d8GEkyBwQ5DVsE8Fr4CLPf3ZHh6Hud/KScjD4NtreIecV51MSq7XjgTrvt T+1cBN3TFv7HjinEmeK7Ipyi40VOBYc= -----END CERTIFICATE-----Generated at Sun Oct 19 23:59:39 2025 by rpki-client