$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6e89f95-7353-3b90-b984-8fc385e68474.roa File: c6e89f95-7353-3b90-b984-8fc385e68474.roa (raw, json) Hash identifier: oPi7fIMkt3qbYHICdvIUup4/JXRAvVnhnCzop2ZDQ2g= Subject key identifier: 11:C0:5C:8A:F7:3A:45:D2:A7:58:E7:52:78:40:BF:4A:CD:43:62:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD86CA8CC4DCFA5ADABB0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6e89f95-7353-3b90-b984-8fc385e68474.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d8:6c:a8:cc:4d:cf:a5:ad:ab:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=2d3681db-c55e-4594-a372-c9ebe52d869d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:8b:4e:00:bf:da:d4:f9:c9:bc:b3:e8:5e:07: 2b:a9:75:3d:a5:8d:b4:52:b7:68:53:a3:5f:cb:2a: 8b:9c:13:d9:6f:ac:82:a0:2c:e0:9b:48:70:20:60: 58:a1:94:91:25:bf:99:5c:04:69:aa:2d:a0:7e:f3: 9f:88:a5:c2:bc:09:ae:fe:c0:d4:8c:e0:c3:45:3a: c9:39:99:9b:55:de:74:7a:a6:8b:44:d0:37:b5:91: dc:b9:f9:52:dc:ed:f3:83:76:98:75:c9:38:5b:cc: 43:21:7b:26:f2:48:f8:1c:32:4a:98:de:52:27:4c: 66:7a:c6:16:0d:bc:fa:ac:f1:e1:d9:e0:e3:7d:71: 64:59:e3:cc:90:2f:7c:03:c0:21:df:20:b9:3a:74: 4e:03:2d:9a:a0:83:06:c4:2b:99:ed:4b:2e:70:24: ee:5d:6a:ac:28:03:91:be:bf:a7:b6:8d:5f:d4:9d: 04:78:d3:dc:ff:79:f0:2f:ed:6c:a9:59:52:1d:45: 6f:f5:4d:18:c0:7d:1d:cf:1a:9a:20:76:11:38:5a: b7:2b:4f:22:e5:1a:a5:9e:1a:57:7a:31:0e:63:5d: 98:03:55:27:df:28:61:11:dc:d1:0d:fe:55:78:1d: 3e:b8:fc:43:92:ca:f7:69:96:33:3f:15:84:97:1d: 28:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C0:5C:8A:F7:3A:45:D2:A7:58:E7:52:78:40:BF:4A:CD:43:62:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6e89f95-7353-3b90-b984-8fc385e68474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:df:5d:ac:f8:8b:90:3f:ae:15:8a:8a:24:a9:e4:93:e4:1f: 59:8d:dc:e9:44:0a:cd:1e:e1:2b:d4:9a:05:86:e7:4f:5f:20: 58:8d:3a:db:15:81:74:e7:38:da:24:ad:9d:94:8a:d0:18:43: 22:19:da:37:42:b8:08:65:bc:5c:30:c7:c0:f3:b0:0b:f6:43: 42:10:c3:dd:01:95:52:52:fe:20:fd:ed:fd:ff:6a:15:42:23: 98:49:c7:27:b9:9c:6a:02:dd:41:31:2a:21:57:02:9c:9b:16: 8a:13:47:09:d6:0c:09:85:87:98:81:53:77:87:a5:8e:33:2b: 95:69:bf:94:93:9f:4f:c1:a1:2c:54:13:22:e8:da:c1:e2:2f: 13:30:7f:3d:37:ab:02:58:89:00:60:56:32:66:fa:78:4b:a6: 05:91:83:d2:4c:c8:ec:29:64:1d:9d:74:0b:b4:ae:4d:f5:44: 87:23:ef:b6:d7:e4:44:11:29:1e:eb:10:ec:d3:e4:b5:26:90: e7:34:65:ef:84:f2:ee:05:0e:52:c8:19:7c:46:84:3a:32:a3: 10:4a:28:87:cb:76:6e:b8:eb:3a:6d:01:fe:c7:f5:b8:a9:53: 16:f1:a0:6b:14:c3:9e:2d:dc:55:95:d2:4f:b7:fd:5d:54:74: 42:be:88:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNhsqMxNz6Wtq7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk MmQzNjgxZGItYzU1ZS00NTk0LWEzNzItYzllYmU1MmQ4NjlkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4tOAL/a1PnJvLPoXgcrqXU9pY20UrdoU6Nf yyqLnBPZb6yCoCzgm0hwIGBYoZSRJb+ZXARpqi2gfvOfiKXCvAmu/sDUjODDRTrJ OZmbVd50eqaLRNA3tZHcuflS3O3zg3aYdck4W8xDIXsm8kj4HDJKmN5SJ0xmesYW Dbz6rPHh2eDjfXFkWePMkC98A8Ah3yC5OnROAy2aoIMGxCuZ7UsucCTuXWqsKAOR vr+nto1f1J0EeNPc/3nwL+1sqVlSHUVv9U0YwH0dzxqaIHYROFq3K08i5RqlnhpX ejEOY12YA1Un3yhhEdzRDf5VeB0+uPxDksr3aZYzPxWElx0ovwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHAXIr3OkXSp1jnUnhAv0rNQ2LxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZlODlmOTUtNzM1My0z YjkwLWI5ODQtOGZjMzg1ZTY4NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALLfXaz4i5A/rhWKiiSp5JPkH1mN3OlECs0e4SvUmgWG509fIFiNOtsV gXTnONokrZ2UitAYQyIZ2jdCuAhlvFwwx8DzsAv2Q0IQw90BlVJS/iD97f3/ahVC I5hJxye5nGoC3UExKiFXApybFooTRwnWDAmFh5iBU3eHpY4zK5Vpv5STn0/BoSxU EyLo2sHiLxMwfz03qwJYiQBgVjJm+nhLpgWRg9JMyOwpZB2ddAu0rk31RIcj77bX 5EQRKR7rEOzT5LUmkOc0Ze+E8u4FDlLIGXxGhDoyoxBKKIfLdm646zptAf7H9bip UxbxoGsUw54t3FWV0k+3/V1UdEK+iEY= -----END CERTIFICATE-----Generated at Mon Oct 20 00:04:56 2025 by rpki-client