$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa File: a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa (raw, json) Hash identifier: M7/Psrk0i7leqTX85MWrUKyEQ6qkbRWngDZO7hNRscI= Subject key identifier: 7C:A8:51:F1:90:38:95:3F:9A:03:42:54:D8:4C:59:0A:54:48:43:02 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD3D78EB28F8EDEB50860 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d3:d7:8e:b2:8f:8e:de:b5:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c984917e-a3c7-4ab9-be5c-7329ae966d02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:7f:1a:0d:2c:3f:39:5c:8a:36:41:f9:7a:4c: c6:ca:d1:f3:c1:eb:df:7f:07:49:37:87:ea:ce:3f: 11:34:f4:86:35:fc:e4:3e:60:0f:3a:53:75:df:ed: 1a:1a:f4:94:fa:26:3d:30:43:1b:f5:a6:15:7b:b6: 62:c3:8e:3c:7e:8e:be:6c:bd:71:ed:ad:03:45:21: d5:da:b5:5a:d5:fb:f4:b3:15:1c:25:12:80:1b:ca: e6:49:37:2b:88:f8:3e:fd:30:b9:c4:95:9e:63:74: 88:84:76:d1:aa:5c:58:7b:de:b3:ca:1e:e0:67:73: b5:65:f0:39:53:1d:84:72:9c:19:c4:94:a1:66:85: 48:2c:31:76:91:c4:cc:cc:fc:6a:50:86:30:31:9a: 44:7a:c9:72:fa:77:7b:74:76:59:d0:87:dd:95:9f: da:c1:c4:bb:5b:8f:94:e5:54:5a:72:13:4d:f2:fb: b3:7f:c6:25:78:7d:f7:19:0b:6c:f5:75:59:c1:f5: fe:83:51:c1:dd:c7:e2:bf:1c:13:79:f9:95:fe:0a: 7a:e5:7f:37:2a:d5:68:3c:c2:cd:a2:cd:ac:30:b4: bd:85:51:91:33:48:87:74:90:14:fb:ed:cb:0e:7d: e7:cf:4d:30:1b:e8:d5:a5:67:ab:6a:ac:14:84:ee: 58:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:A8:51:F1:90:38:95:3F:9A:03:42:54:D8:4C:59:0A:54:48:43:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a2d9e3b7-6b4f-382d-bf49-48b64be62bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:12:83:83:64:43:38:63:d2:b7:3f:61:3e:ee:1a:6b:54:d1: b0:0b:91:c4:a5:91:48:9e:de:0f:f6:5a:fb:28:0e:e1:c7:ad: 61:69:65:8a:2a:a8:e7:55:71:54:57:18:27:b7:aa:5d:a7:99: 38:95:3d:6a:4c:84:0d:2f:ce:e6:5d:b6:d3:f5:aa:08:b7:4c: f5:4b:ee:6d:3a:41:77:cf:f3:f3:c1:6c:6a:63:19:05:ea:ae: f4:8b:d0:0a:ef:2b:2b:c1:45:cc:df:dc:e4:4c:b8:1f:b5:32: 86:41:8a:5c:e7:21:93:04:8b:86:75:b3:3a:1e:da:2f:3a:1a: c1:c9:27:68:f0:73:f3:b0:2b:9c:b0:cd:d6:b2:c4:c2:ef:1b: 62:83:3c:6c:79:87:69:bd:c2:ce:d1:19:89:eb:26:18:d2:72: 2f:77:f8:69:d5:ad:17:37:be:38:85:ba:e2:d3:4a:95:8d:23: 98:ab:da:77:d9:82:8e:12:2e:51:97:6f:cb:6f:45:72:38:a7: 63:80:d5:08:05:59:4d:5d:af:20:b2:e2:f7:a3:74:8f:68:e0: 46:b0:94:85:d2:0d:3c:35:92:21:5e:cc:99:d3:61:eb:6c:f1: 5e:47:e9:41:38:d1:05:00:f8:bd:d9:8f:a4:39:52:80:b8:f2: af:a4:c1:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNPXjrKPjt61CGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Yzk4NDkxN2UtYTNjNy00YWI5LWJlNWMtNzMyOWFlOTY2ZDAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp38aDSw/OVyKNkH5ekzGytHzwevffwdJN4fq zj8RNPSGNfzkPmAPOlN13+0aGvSU+iY9MEMb9aYVe7Ziw448fo6+bL1x7a0DRSHV 2rVa1fv0sxUcJRKAG8rmSTcriPg+/TC5xJWeY3SIhHbRqlxYe96zyh7gZ3O1ZfA5 Ux2EcpwZxJShZoVILDF2kcTMzPxqUIYwMZpEesly+nd7dHZZ0IfdlZ/awcS7W4+U 5VRachNN8vuzf8YleH33GQts9XVZwfX+g1HB3cfivxwTefmV/gp65X83KtVoPMLN os2sMLS9hVGRM0iHdJAU++3LDn3nz00wG+jVpWeraqwUhO5Y/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHyoUfGQOJU/mgNCVNhMWQpUSEMCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTJkOWUzYjctNmI0Zi0z ODJkLWJmNDktNDhiNjRiZTYyYmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJYSg4NkQzhj0rc/YT7uGmtU0bALkcSlkUie3g/2WvsoDuHHrWFpZYoq qOdVcVRXGCe3ql2nmTiVPWpMhA0vzuZdttP1qgi3TPVL7m06QXfP8/PBbGpjGQXq rvSL0ArvKyvBRczf3ORMuB+1MoZBilznIZMEi4Z1szoe2i86GsHJJ2jwc/OwK5yw zdayxMLvG2KDPGx5h2m9ws7RGYnrJhjSci93+GnVrRc3vjiFuuLTSpWNI5ir2nfZ go4SLlGXb8tvRXI4p2OA1QgFWU1dryCy4vejdI9o4EawlIXSDTw1kiFezJnTYets 8V5H6UE40QUA+L3Zj6Q5UoC48q+kwV0= -----END CERTIFICATE-----Generated at Sun Oct 19 23:48:34 2025 by rpki-client