$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa File: aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa (raw, json) Hash identifier: S/Q06Q2PukKL1/3ft3/JN4YQKBrLM+FyTWZiFtEtTtQ= Subject key identifier: 1B:84:95:CE:DF:50:E6:14:93:2B:C9:51:8F:16:5C:64:35:4D:60:80 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD53B30EBB5C52A911780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.44.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d5:3b:30:eb:b5:c5:2a:91:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=daffc73d-e637-4f81-8e1f-e73b34b3463d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c5:e3:8e:a8:19:1d:66:de:1d:b3:1e:2a:81: 8c:cc:c4:1a:cc:7a:21:c4:8e:be:71:3c:3c:0d:9b: d4:8d:37:70:6f:19:45:c1:4c:57:0d:bb:ad:6e:a6: c8:10:d8:fc:0d:a9:df:8b:3e:e1:ca:f5:3f:08:90: 09:51:b3:21:b7:7d:2d:1e:81:99:2b:58:21:b1:ce: a1:40:95:03:18:99:a7:43:10:41:77:e4:6a:20:7b: 25:5d:43:88:07:00:1d:0d:6e:a1:2a:d8:95:94:7f: 69:e3:bc:c0:e9:7b:a8:6f:6f:23:08:36:3d:04:27: 00:3f:ff:f8:e7:97:d1:19:0b:f4:b6:78:36:bb:88: 95:0e:fc:58:ae:6f:89:1f:fa:88:e8:cf:af:a6:fd: a5:27:c9:2c:d4:8f:63:6c:ca:96:2f:81:96:44:a1: 77:1a:0b:a1:45:0f:04:7c:41:ba:01:db:34:0f:6a: 77:1c:b2:66:60:06:85:94:e0:55:fe:be:79:16:ed: 10:4f:50:75:1c:d0:8e:7a:81:f7:ad:09:59:88:50: 23:85:b3:4f:80:38:4d:45:2a:3f:7c:7f:9e:5b:c8: 8a:75:71:de:c0:15:24:d3:43:21:d7:5c:df:3a:84: cd:2d:1e:33:f6:27:46:41:4c:54:f3:54:7d:67:e2: c6:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:84:95:CE:DF:50:E6:14:93:2B:C9:51:8F:16:5C:64:35:4D:60:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/aaf57fb6-ab7d-3127-ac8d-c41a6010f479.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.44.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:cf:3f:5e:ab:72:bf:d7:ab:70:28:d8:7d:97:a7:b3:ab:6c: ec:28:af:d8:70:1d:28:31:5c:c0:2c:e2:ac:d8:0e:3b:a2:55: 46:f1:b3:e9:6c:e2:bf:d9:39:64:e9:5c:88:2c:0f:13:37:2a: 10:6d:b8:07:e8:d8:5c:5b:91:25:2e:03:be:fc:67:0d:d5:d8: 3d:10:db:32:ee:fd:d5:b9:01:4e:6e:cf:51:9e:d7:ec:c4:73: 2c:ca:60:a0:6d:f5:e2:ce:80:47:92:60:d5:f2:13:11:6c:e4: 30:51:ea:0b:27:16:74:d6:83:73:22:ef:91:10:ac:aa:10:5f: c6:bf:96:c8:f2:ff:78:9a:45:ee:39:fb:e7:15:ac:64:d2:f4: a8:dd:10:3b:3d:ac:97:a6:61:1b:34:03:6c:3f:9f:11:eb:6b: 23:9c:97:b2:ff:f7:bf:a9:68:3b:ef:b8:36:ba:f6:9b:a8:12: 0a:a0:a2:0b:b6:ae:4c:f6:6e:80:ba:41:fb:e8:59:ed:5d:fb: f2:98:19:dc:f4:94:39:13:77:78:be:63:dd:88:9d:ea:24:12: 7d:90:53:78:70:5e:4b:b5:fe:d9:b2:ba:c8:b8:a3:c6:01:45: ae:c7:44:14:ae:f4:55:73:42:84:7f:31:d8:a7:5e:14:85:36: 2f:4e:52:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNU7MOu1xSqRF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGFmZmM3M2QtZTYzNy00ZjgxLThlMWYtZTczYjM0YjM0NjNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcXjjqgZHWbeHbMeKoGMzMQazHohxI6+cTw8 DZvUjTdwbxlFwUxXDbutbqbIENj8Danfiz7hyvU/CJAJUbMht30tHoGZK1ghsc6h QJUDGJmnQxBBd+RqIHslXUOIBwAdDW6hKtiVlH9p47zA6Xuob28jCDY9BCcAP//4 55fRGQv0tng2u4iVDvxYrm+JH/qI6M+vpv2lJ8ks1I9jbMqWL4GWRKF3GguhRQ8E fEG6Ads0D2p3HLJmYAaFlOBV/r55Fu0QT1B1HNCOeoH3rQlZiFAjhbNPgDhNRSo/ fH+eW8iKdXHewBUk00Mh11zfOoTNLR4z9idGQUxU81R9Z+LG/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuElc7fUOYUkyvJUY8WXGQ1TWCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWFmNTdmYjYtYWI3ZC0z MTI3LWFjOGQtYzQxYTYwMTBmNDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGvPP16rcr/Xq3Ao2H2Xp7OrbOwor9hwHSgxXMAs4qzYDjuiVUbxs+ls 4r/ZOWTpXIgsDxM3KhBtuAfo2FxbkSUuA778Zw3V2D0Q2zLu/dW5AU5uz1Ge1+zE cyzKYKBt9eLOgEeSYNXyExFs5DBR6gsnFnTWg3Mi75EQrKoQX8a/lsjy/3iaRe45 ++cVrGTS9KjdEDs9rJemYRs0A2w/nxHrayOcl7L/97+paDvvuDa69puoEgqgogu2 rkz2boC6QfvoWe1d+/KYGdz0lDkTd3i+Y92IneokEn2QU3hwXku1/tmyusi4o8YB Ra7HRBSu9FVzQoR/MdinXhSFNi9OUr8= -----END CERTIFICATE-----Generated at Mon Oct 20 10:19:55 2025 by rpki-client