$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa File: cd00562d-c510-3278-bc5b-277689f9a48d.roa (raw, json) Hash identifier: D+TwK8k0aGoGYgn/iD+jEWYs1SyUh90y7/5oqR4uolE= Subject key identifier: 2D:60:56:C0:F3:7F:8C:EA:DD:7C:82:AE:7E:A8:97:A5:6C:54:96:8A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD9EADA57C95A0C8E0580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.173.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d9:ea:da:57:c9:5a:0c:8e:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=98c52470-29b1-49fd-b63a-c275010e0663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:24:3c:04:35:56:15:3e:0b:df:a9:02:94:a8: 3a:fd:d2:dc:81:44:8c:87:8f:8e:57:24:e0:f1:3c: 92:6e:2a:81:ee:ff:04:ea:bd:c1:d0:a2:f2:6c:10: bc:1c:c8:88:e6:26:fc:a5:62:56:32:01:38:56:2c: 9c:75:ce:70:03:c2:3e:fc:0f:e0:59:9d:e9:e6:01: 14:c6:83:c3:27:fe:69:4b:b7:e0:75:37:78:40:ff: 30:a9:3c:4a:14:3c:2d:79:8a:16:b3:eb:0b:4d:2d: f2:b8:a1:b1:16:44:0a:d7:2e:77:c6:8a:b5:3b:34: 3d:0d:e9:cb:0a:b1:fa:5a:ba:55:bc:88:19:57:0f: a1:e7:00:a0:65:b3:4f:04:03:0c:b9:d1:4f:fc:47: 5c:fe:0b:da:de:d4:ac:c1:62:c3:25:2e:e4:f7:b5: 6f:f9:ca:d3:cc:08:fc:dc:33:6b:5e:e0:73:d0:85: 21:99:71:b4:5b:9e:5f:4a:1d:09:c7:15:e7:4f:41: 3b:10:26:1b:2c:9e:90:e6:c2:ae:65:eb:26:f8:a6: 0c:d9:52:6b:52:47:18:b1:b1:90:90:b7:ca:c1:ae: 9a:49:7b:33:40:14:5e:53:ae:ce:e1:6a:20:ba:eb: 2e:c7:c8:73:55:b0:e2:a0:51:47:0b:18:86:8b:bf: db:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:60:56:C0:F3:7F:8C:EA:DD:7C:82:AE:7E:A8:97:A5:6C:54:96:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cd00562d-c510-3278-bc5b-277689f9a48d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.173.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ba:bc:c4:c7:21:9f:d2:c5:ce:c7:dc:5c:6f:d3:f5:72:1e: 24:64:3e:b6:f8:a9:1d:dc:7f:9f:85:d1:23:82:3c:30:bc:95: 17:fa:65:7c:64:31:2f:7c:07:39:2e:0e:50:c2:c4:de:44:88: 14:b4:52:a3:15:25:db:5f:84:59:0e:d9:42:a7:c1:83:3b:4a: f6:aa:78:a3:9e:39:79:00:92:df:b5:51:41:ad:cb:10:f3:5e: bd:d5:d9:06:b5:e3:fe:7c:fb:77:b2:57:a8:f0:27:b6:70:04: 24:9f:74:06:a0:70:ae:04:eb:bd:30:1a:f1:21:c5:c3:64:0c: e8:cf:22:eb:47:2b:e8:67:6a:56:e1:a0:63:4a:5e:e0:25:a1: 49:4e:bd:b7:19:f1:06:c1:43:ae:2e:29:88:5d:13:be:cf:11: 71:4e:41:67:87:4f:83:d9:b1:fd:5a:6e:ee:fe:f1:67:f5:2a: 04:6d:45:39:a8:39:9d:64:fa:ab:05:f1:1e:27:86:c2:be:28: 60:fb:48:c5:47:cd:40:d4:e2:3e:ef:c9:21:20:f6:4e:18:2d: 5f:ee:fc:44:94:9b:5c:db:02:26:42:c8:3b:fd:87:e2:46:5a: c7:a9:73:11:6a:5a:05:78:99:7b:7f:b1:4e:35:cb:f1:c4:64: a4:1d:11:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNnq2lfJWgyOBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk OThjNTI0NzAtMjliMS00OWZkLWI2M2EtYzI3NTAxMGUwNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiiQ8BDVWFT4L36kClKg6/dLcgUSMh4+OVyTg 8TySbiqB7v8E6r3B0KLybBC8HMiI5ib8pWJWMgE4Viycdc5wA8I+/A/gWZ3p5gEU xoPDJ/5pS7fgdTd4QP8wqTxKFDwteYoWs+sLTS3yuKGxFkQK1y53xoq1OzQ9DenL CrH6WrpVvIgZVw+h5wCgZbNPBAMMudFP/Edc/gva3tSswWLDJS7k97Vv+crTzAj8 3DNrXuBz0IUhmXG0W55fSh0JxxXnT0E7ECYbLJ6Q5sKuZesm+KYM2VJrUkcYsbGQ kLfKwa6aSXszQBReU67O4Woguusux8hzVbDioFFHCxiGi7/bawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1gVsDzf4zq3XyCrn6ol6VsVJaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2QwMDU2MmQtYzUxMC0z Mjc4LWJjNWItMjc3Njg5ZjlhNDhkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHu6vMTHIZ/Sxc7H3Fxv0/VyHiRkPrb4qR3cf5+F0SOCPDC8lRf6ZXxk MS98BzkuDlDCxN5EiBS0UqMVJdtfhFkO2UKnwYM7SvaqeKOeOXkAkt+1UUGtyxDz Xr3V2Qa14/58+3eyV6jwJ7ZwBCSfdAagcK4E670wGvEhxcNkDOjPIutHK+hnalbh oGNKXuAloUlOvbcZ8QbBQ64uKYhdE77PEXFOQWeHT4PZsf1abu7+8Wf1KgRtRTmo OZ1k+qsF8R4nhsK+KGD7SMVHzUDU4j7vySEg9k4YLV/u/ESUm1zbAiZCyDv9h+JG WsepcxFqWgV4mXt/sU41y/HEZKQdEbM= -----END CERTIFICATE-----Generated at Mon Oct 20 02:51:48 2025 by rpki-client