$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa77e14e-ae33-38da-969d-aba0dcf37c47.roa File: fa77e14e-ae33-38da-969d-aba0dcf37c47.roa (raw, json) Hash identifier: JKD/I/zSOA5C6iSvF/uKOwS8yx0hgbumwM5HBefIJro= Subject key identifier: 4E:AC:C5:15:69:BC:FF:BD:C0:D1:35:EC:02:CF:13:C9:1E:3D:BB:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCD49325363E4BE7841880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa77e14e-ae33-38da-969d-aba0dcf37c47.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:d4:93:25:36:3e:4b:e7:84:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=c3ca78f8-c2a9-463c-9d48-f19b75f7224e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:31:b6:6c:13:3b:e4:4a:03:17:36:52:84:30: a6:28:60:39:b3:7f:ac:3e:ac:a2:0f:df:4c:20:a3: f5:1d:12:a3:d5:3f:c6:6f:a3:20:23:96:65:7f:46: 71:6e:d4:9d:84:6d:06:a0:6f:6f:89:20:ec:73:b7: 2a:5b:19:5c:60:e5:af:c3:d9:61:46:56:53:4c:02: a1:81:cd:46:f2:ff:2d:17:37:17:08:34:d9:d2:87: 6c:17:fd:53:ae:50:e9:a9:23:f1:3b:37:d4:8c:b0: 46:63:20:f2:38:97:a1:72:c7:ed:6a:a7:4c:b4:6a: fe:3b:9d:82:80:b6:76:77:3d:de:29:78:2d:a0:40: 51:83:0e:73:ef:86:d9:39:d8:e4:e5:9a:4a:bd:1a: a8:65:76:af:cc:80:08:a0:c2:35:4a:26:04:a3:59: 22:c9:a1:77:df:cb:71:df:a3:bf:9f:bb:a8:34:d1: dd:dc:f2:f3:8a:5f:15:38:4e:b5:14:97:3c:e4:98: b1:4d:79:9c:85:50:8d:0d:7e:8c:6f:e2:17:6f:d0: dd:e2:43:e9:2d:08:13:4a:8c:be:f1:2e:48:45:60: 0c:56:a9:3f:52:27:9c:5c:3f:ea:51:7f:f8:ad:ab: 74:d0:8a:ee:b3:d7:8e:a5:d6:74:70:0c:f0:1e:31: 3b:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:AC:C5:15:69:BC:FF:BD:C0:D1:35:EC:02:CF:13:C9:1E:3D:BB:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa77e14e-ae33-38da-969d-aba0dcf37c47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1b:fb:db:6d:2f:49:13:14:5c:5a:35:fc:83:f6:37:5a:f8: 4b:ef:56:e2:bd:14:f9:10:96:6b:d8:fa:d7:48:86:0b:f7:ab: a6:bf:5a:b5:7f:24:26:2c:d4:eb:6a:8e:4f:5a:ce:2e:38:05: 03:6c:21:35:99:5a:f7:01:bc:2c:15:99:78:c2:73:0b:e4:67: 0d:cb:d6:3f:50:ff:0b:82:0c:b7:fb:c5:eb:51:d3:7f:88:3e: 7a:63:05:22:8c:76:68:c6:a7:bd:f4:eb:d3:65:2c:90:a5:67: 8b:8f:27:1b:18:f1:26:c4:11:18:c8:52:58:25:8c:57:5a:f8: da:a7:ef:1f:72:1c:a8:7d:d1:e4:56:11:da:87:31:19:be:03: b3:94:db:55:25:43:f0:e0:7f:23:c9:f6:00:3b:ec:ed:4a:71: d8:74:ce:52:a9:b7:a9:06:dc:89:ee:43:7a:f5:9a:60:d1:94: 7d:fe:a1:b8:00:bb:1c:22:d2:68:7a:96:d3:a7:72:d6:6f:18: db:51:df:8f:63:a2:ad:6b:6c:53:27:03:23:1e:21:3e:30:c5: 30:60:82:00:df:d1:cb:c9:b2:ed:cd:0a:86:eb:37:c8:89:4f: 9d:a8:84:9e:ed:66:a9:c0:f1:da:8c:71:98:75:5d:5c:f6:bb: ca:cf:c6:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNSTJTY+S+eEGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk YzNjYTc4ZjgtYzJhOS00NjNjLTlkNDgtZjE5Yjc1ZjcyMjRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDG2bBM75EoDFzZShDCmKGA5s3+sPqyiD99M IKP1HRKj1T/Gb6MgI5Zlf0ZxbtSdhG0GoG9viSDsc7cqWxlcYOWvw9lhRlZTTAKh gc1G8v8tFzcXCDTZ0odsF/1TrlDpqSPxOzfUjLBGYyDyOJehcsftaqdMtGr+O52C gLZ2dz3eKXgtoEBRgw5z74bZOdjk5ZpKvRqoZXavzIAIoMI1SiYEo1kiyaF338tx 36O/n7uoNNHd3PLzil8VOE61FJc85JixTXmchVCNDX6Mb+IXb9Dd4kPpLQgTSoy+ 8S5IRWAMVqk/UiecXD/qUX/4rat00Irus9eOpdZ0cAzwHjE7YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE6sxRVpvP+9wNE17ALPE8kePbtxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmE3N2UxNGUtYWUzMy0z OGRhLTk2OWQtYWJhMGRjZjM3YzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIb+9ttL0kTFFxaNfyD9jda+EvvVuK9FPkQlmvY+tdIhgv3q6a/WrV/ JCYs1Otqjk9azi44BQNsITWZWvcBvCwVmXjCcwvkZw3L1j9Q/wuCDLf7xetR03+I PnpjBSKMdmjGp73069NlLJClZ4uPJxsY8SbEERjIUlgljFda+Nqn7x9yHKh90eRW EdqHMRm+A7OU21UlQ/DgfyPJ9gA77O1Kcdh0zlKpt6kG3InuQ3r1mmDRlH3+obgA uxwi0mh6ltOnctZvGNtR349joq1rbFMnAyMeIT4wxTBgggDf0cvJsu3NCobrN8iJ T52ohJ7tZqnA8dqMcZh1XVz2u8rPxv8= -----END CERTIFICATE-----Generated at Mon Oct 20 05:25:23 2025 by rpki-client