$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa File: c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa (raw, json) Hash identifier: uvZ1rdltf0jDf6FBQqTC1SxpybY24mm7ENf3s6R1+aA= Subject key identifier: 53:14:17:68:1A:6B:9A:1A:35:CA:4C:6E:83:33:15:D0:86:03:71:18 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD8E8CFE5EC1F000AA380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d8:e8:cf:e5:ec:1f:00:0a:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=8a73a65e-77bb-4dc1-89e6-db553ca3a883 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:9b:ff:4e:64:5e:72:26:6d:92:12:19:f9:00: 94:60:81:4b:40:4e:37:05:f6:cb:f8:2d:b3:7f:7b: 1d:bc:fc:cf:b4:a4:4f:c2:e2:5a:d4:93:59:49:68: 54:e6:fd:e8:78:31:d3:12:1e:98:72:f7:81:3c:2c: 70:c6:95:fa:de:a4:17:82:0e:5b:f2:47:7e:bb:f9: b2:29:35:80:8b:40:0f:d1:f3:95:63:bf:b8:2f:4c: 3f:8f:6a:75:fa:01:27:7c:d3:8b:0f:67:3c:92:aa: 38:56:5e:ab:a5:ba:02:4a:37:b7:0c:68:81:04:78: 0f:6e:4d:a0:8c:bc:04:44:7d:96:0c:4d:81:fe:fa: 53:c6:b4:98:ce:b6:9a:07:58:78:7c:10:e9:89:e5: 03:00:99:6c:d9:df:06:ab:ed:8d:c1:f7:64:d6:d8: 94:d6:56:9a:8b:dc:4e:5f:51:2e:2b:a2:be:e3:a3: a9:29:9c:a0:15:b8:19:c8:7d:c7:0c:79:73:4b:78: ac:b9:12:12:69:2d:18:11:33:b0:ad:df:e6:3e:da: 76:6f:b3:8a:99:d6:53:5b:bf:a6:31:76:ca:e0:33: d7:8d:e6:bf:72:32:99:55:fe:d8:5d:65:4f:df:35: 67:82:09:c3:b2:12:8b:00:c9:f1:0e:d2:03:92:7a: ed:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:14:17:68:1A:6B:9A:1A:35:CA:4C:6E:83:33:15:D0:86:03:71:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:3d:14:7b:f9:1e:57:97:dd:22:87:9f:bd:53:7b:33:06:65: 2f:f0:5d:4c:36:a6:b5:95:28:9b:38:c6:08:f0:a7:3f:76:ee: dc:2e:8c:e2:d4:62:38:c3:11:93:13:6a:b8:7e:c6:04:29:a3: e7:30:81:69:4e:28:cb:c6:ec:7a:de:8b:28:c5:d5:c8:cd:06: 66:54:98:2a:44:e2:df:90:ee:de:98:be:28:92:f5:11:96:e6: fd:1a:b4:05:68:76:af:6a:57:85:d6:37:8e:1a:79:b0:af:6e: 16:ce:91:af:2c:c2:28:ee:c8:22:b3:97:c1:20:e5:f4:a6:40: 64:9f:ec:bd:da:72:38:24:98:00:22:90:b7:f7:b2:3a:3a:a7: ae:d2:a9:e7:7f:e9:51:44:06:44:e3:b1:8a:ad:c0:2b:70:2a: 7a:64:4c:c5:5b:c6:86:e5:21:de:f3:53:a3:f9:17:88:76:b4: ad:70:da:27:54:81:1c:89:5f:80:b8:03:6c:7a:a6:0c:f1:df: 7e:04:aa:8d:e8:65:2d:e8:05:10:11:bc:0e:fb:20:ee:f0:16: 43:3a:b2:27:cd:62:40:38:a9:e0:81:09:23:22:13:81:9d:cf: 5f:62:0a:e9:67:61:56:fb:e3:51:cc:9e:4c:d4:4e:78:06:31: 1d:ac:22:18 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNjoz+XsHwAKo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OGE3M2E2NWUtNzdiYi00ZGMxLTg5ZTYtZGI1NTNjYTNhODgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlpv/TmReciZtkhIZ+QCUYIFLQE43BfbL+C2z f3sdvPzPtKRPwuJa1JNZSWhU5v3oeDHTEh6YcveBPCxwxpX63qQXgg5b8kd+u/my KTWAi0AP0fOVY7+4L0w/j2p1+gEnfNOLD2c8kqo4Vl6rpboCSje3DGiBBHgPbk2g jLwERH2WDE2B/vpTxrSYzraaB1h4fBDpieUDAJls2d8Gq+2Nwfdk1tiU1laai9xO X1EuK6K+46OpKZygFbgZyH3HDHlzS3isuRISaS0YETOwrd/mPtp2b7OKmdZTW7+m MXbK4DPXjea/cjKZVf7YXWVP3zVnggnDshKLAMnxDtIDknrtIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMUF2gaa5oaNcpMboMzFdCGA3EYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhYTNkZWUtYmMzMS0z MmEyLThiODEtOTYwNDc5OGU3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACo9FHv5HleX3SKHn71TezMGZS/wXUw2prWVKJs4xgjwpz927twujOLU YjjDEZMTarh+xgQpo+cwgWlOKMvG7HreiyjF1cjNBmZUmCpE4t+Q7t6YviiS9RGW 5v0atAVodq9qV4XWN44aebCvbhbOka8swijuyCKzl8Eg5fSmQGSf7L3acjgkmAAi kLf3sjo6p67Sqed/6VFEBkTjsYqtwCtwKnpkTMVbxoblId7zU6P5F4h2tK1w2idU gRyJX4C4A2x6pgzx334Eqo3oZS3oBRARvA77IO7wFkM6sifNYkA4qeCBCSMiE4Gd z19iCulnYVb741HMnkzUTngGMR2sIhg= -----END CERTIFICATE-----Generated at Mon Oct 20 22:40:31 2025 by rpki-client