$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa File: cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa (raw, json) Hash identifier: B2d67H/Gw4SoXAQllTtK+/Q1A2q+wWF+vAnW8ToUjFg= Subject key identifier: C9:B9:3E:06:BD:43:DF:09:BE:2E:FD:58:43:B7:76:D3:98:B1:05:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CDCC85360FBD0D69CCCC80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 162.72.34.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:cc:85:36:0f:bd:0d:69:cc:cc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cf694ca5-3c44-416b-9335-6aa677ab32c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a6:dd:be:a2:8b:19:04:41:86:0d:22:ab:2c: e7:cb:43:fa:8e:db:d4:fa:66:45:ba:56:f6:b6:a0: 49:5d:31:6e:18:ed:ca:91:45:ab:6d:15:18:84:d2: 18:91:be:1c:cf:09:0f:7a:6d:b0:c8:f8:4c:26:e8: d9:d8:2a:12:e7:1a:a9:41:5b:f2:ac:61:e1:8f:c4: 52:e0:c8:ef:e6:d8:4e:2c:ad:ce:4b:1c:34:7d:06: 82:af:44:7b:9a:48:4e:72:93:e2:e8:0e:3e:5d:1a: 2c:cc:3d:0c:6a:82:d6:fe:6c:c3:8b:39:e9:52:86: a4:38:00:2e:1a:6c:d9:a3:21:e1:ac:7d:16:b0:b1: ea:b4:c4:ac:6d:c5:55:a9:8d:4e:86:64:e2:24:20: 01:19:8f:30:2a:a5:96:d8:a5:c6:ec:d4:32:ff:f7: 14:58:95:87:fa:3e:a0:9c:f4:8f:9e:b9:3e:a0:79: 98:66:53:a3:c6:8e:09:bd:3d:7b:71:c8:09:17:7c: 7e:7c:b3:87:ad:0b:4f:5d:c0:69:c7:b4:d1:97:09: bb:af:eb:dc:69:2e:ad:e2:e0:1b:66:e2:dd:c8:8e: 46:f2:b0:4d:c2:00:d5:68:fa:10:3f:b7:77:ef:67: 2a:a5:f1:71:84:2a:8f:3b:b3:f9:81:00:ed:c8:0b: 7d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:B9:3E:06:BD:43:DF:09:BE:2E:FD:58:43:B7:76:D3:98:B1:05:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cf1c1470-e8b6-31f4-ade1-0dff95c999da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.34.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:7a:f5:7a:18:e1:d0:45:b8:1f:25:8e:0c:87:3e:82:12:6e: 98:67:d1:36:41:0c:1b:56:a4:a5:f2:83:df:36:97:ac:d6:e7: 77:f2:e9:05:d5:fd:d4:1b:06:37:bc:0b:eb:69:22:85:54:4b: b8:62:63:26:44:c4:c4:c5:7b:18:a6:45:5d:6a:9e:ae:c7:44: db:d7:4b:f9:5a:d3:b4:15:fb:56:c5:2e:7b:04:23:3b:88:70: de:6b:b2:cc:d2:ac:32:f5:00:c3:7f:31:0f:f9:08:67:18:14: e6:d6:ff:8c:fe:10:f2:a9:ae:43:70:a8:62:86:fe:4a:33:c3: 10:0a:a0:e4:bc:98:35:d7:d4:86:95:4a:7b:40:19:dd:f6:cc: 07:4a:39:bb:f4:53:7a:a6:6f:1c:57:7f:9f:0c:f9:82:c2:8a: 9d:16:62:78:0d:31:90:7b:eb:87:57:4e:8d:e8:2e:d7:b9:84: 91:41:11:14:d3:bd:b8:14:ef:42:63:f1:55:85:17:eb:d7:b5: d3:14:07:60:81:a1:19:9f:37:bc:86:44:b2:47:b8:d7:45:73: d2:b0:62:0a:92:c6:93:0b:80:62:80:10:19:eb:78:97:7d:67: 3a:53:b3:2a:e2:d6:24:a0:c6:be:71:1a:63:2c:b4:4c:ff:6c: c8:90:0c:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzcyFNg+9DWnMzIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2Y2OTRjYTUtM2M0NC00MTZiLTkzMzUtNmFhNjc3YWIzMmM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6bdvqKLGQRBhg0iqyzny0P6jtvU+mZFulb2 tqBJXTFuGO3KkUWrbRUYhNIYkb4czwkPem2wyPhMJujZ2CoS5xqpQVvyrGHhj8RS 4Mjv5thOLK3OSxw0fQaCr0R7mkhOcpPi6A4+XRoszD0MaoLW/mzDiznpUoakOAAu GmzZoyHhrH0WsLHqtMSsbcVVqY1OhmTiJCABGY8wKqWW2KXG7NQy//cUWJWH+j6g nPSPnrk+oHmYZlOjxo4JvT17ccgJF3x+fLOHrQtPXcBpx7TRlwm7r+vcaS6t4uAb ZuLdyI5G8rBNwgDVaPoQP7d372cqpfFxhCqPO7P5gQDtyAt9UQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMm5Pga9Q98Jvi79WEO3dtOYsQWTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2YxYzE0NzAtZThiNi0z MWY0LWFkZTEtMGRmZjk1Yzk5OWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALF69XoY4dBFuB8ljgyHPoISbphn0TZBDBtWpKXyg982l6zW53fy6QXV /dQbBje8C+tpIoVUS7hiYyZExMTFeximRV1qnq7HRNvXS/la07QV+1bFLnsEIzuI cN5rsszSrDL1AMN/MQ/5CGcYFObW/4z+EPKprkNwqGKG/kozwxAKoOS8mDXX1IaV SntAGd32zAdKObv0U3qmbxxXf58M+YLCip0WYngNMZB764dXTo3oLte5hJFBERTT vbgU70Jj8VWFF+vXtdMUB2CBoRmfN7yGRLJHuNdFc9KwYgqSxpMLgGKAEBnreJd9 ZzpTsyri1iSgxr5xGmMstEz/bMiQDFM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:52:51 2025 by rpki-client