$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbcac386-96a1-3fa6-ad8a-d3a4320deaf9.roa File: bbcac386-96a1-3fa6-ad8a-d3a4320deaf9.roa (raw, json) Hash identifier: 9T/R0RcOErsrkQMFU1+iPEUcoqyARKl34VTw1bc3bkU= Subject key identifier: 8D:37:0F:98:6F:64:D9:CA:4E:25:84:EA:02:85:2D:19:7D:60:BD:82 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584AC9DB9AAC38E99D67F0A62A00 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbcac386-96a1-3fa6-ad8a-d3a4320deaf9.roa Signing time: Fri 08 Aug 2025 13:00:40 +0000 ROA not before: Fri 08 Aug 2025 13:00:40 +0000 ROA not after: Thu 06 Nov 2025 14:00:40 +0000 asID: 12222 IP address blocks: 72.246.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c9:db:9a:ac:38:e9:9d:67:f0:a6:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Aug 8 13:00:40 2025 GMT Not After : Nov 6 14:00:40 2025 GMT Subject: CN=e5b2fcc3-4533-47c6-ac75-d9bc6f1a882b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:a6:6c:b0:4b:ad:16:82:0e:e4:c6:c4:7e:88: b6:92:62:96:44:05:dd:7f:5a:8a:bc:d5:da:cd:ff: 8a:35:25:e8:e8:0b:ca:d5:5b:0b:6e:0b:e2:9b:af: 29:e5:07:db:b6:81:36:60:f5:31:a6:25:83:f2:84: 55:d7:43:82:9c:da:57:f7:7b:98:53:2a:69:03:4c: 05:90:12:60:d7:46:fd:af:b3:8a:a0:9e:79:59:28: 33:58:dc:9d:12:de:96:d5:7f:98:fa:9b:83:5c:e0: 52:9e:ce:18:1e:f1:71:db:b8:7a:f9:ee:24:b4:b9: ee:9a:74:14:07:71:ca:ce:59:c9:b8:d0:2d:cf:67: 5f:fa:8c:03:76:09:01:0c:41:3c:8f:50:14:29:19: 11:fc:9f:b7:c3:17:05:4d:09:5e:b7:df:ef:67:3c: 40:d4:55:d1:91:72:f4:4e:7d:b0:a5:0d:40:e0:df: d1:b1:8d:0a:59:04:1b:b2:66:72:49:b9:7d:b7:a2: 50:ad:e0:47:df:a4:75:ca:fe:82:06:1b:d7:ac:d2: e5:5d:b8:c9:c8:c4:49:25:03:bb:6f:33:1a:1a:f0: a9:b1:f3:ff:a5:44:56:9d:e4:4c:4f:68:58:5c:b3: 83:59:60:54:3b:20:b1:44:9c:de:2e:a9:34:fc:47: 29:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:37:0F:98:6F:64:D9:CA:4E:25:84:EA:02:85:2D:19:7D:60:BD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/bbcac386-96a1-3fa6-ad8a-d3a4320deaf9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 72.246.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:62:e6:7e:ef:94:ca:90:a6:f9:ad:a2:be:eb:df:2b:63:21: d7:67:6d:5b:e1:25:f3:e9:75:1f:b6:00:d4:a7:27:0e:91:93: 57:51:56:9f:d7:4a:d9:34:37:db:53:49:9b:b9:5a:bf:81:9d: 10:cb:c9:a4:b3:ec:7c:79:81:bc:ec:e1:f8:bb:3b:d8:78:66: 89:b5:95:37:3b:54:45:7b:66:0e:4c:29:65:bf:9f:a4:d7:36: 4d:b1:b0:5c:55:4c:09:6d:7c:ee:13:f9:37:90:9a:f6:3d:94: ca:78:33:3a:79:af:b5:7b:91:67:76:0c:d7:66:11:d0:9e:fc: 5f:b9:bd:0e:f2:d7:65:ab:c0:17:84:9d:0d:37:c7:4f:e6:83: 2c:83:be:3c:1c:40:c3:18:e6:59:8a:43:0b:a5:d6:00:93:9f: c6:d2:0c:ff:4d:be:46:31:a4:78:61:0c:38:4b:76:e4:f8:b5: bd:e2:62:f7:10:ea:a2:71:88:a7:40:8a:4b:99:38:62:06:79: 8b:03:ac:2a:e8:0f:52:13:14:e9:db:14:f1:69:4f:2f:ab:35: f9:d1:d0:e9:e0:43:31:82:37:f9:17:b8:8b:a8:fd:72:0e:dd: 7d:a0:11:d2:b1:a6:19:17:60:8d:b1:44:37:9c:ae:8b:ec:a8: a1:b3:c0:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErJ25qsOOmdZ/CmKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI1MDgwODEzMDA0MFoXDTI1MTEwNjE0MDA0MFowLzEtMCsGA1UEAxMk ZTViMmZjYzMtNDUzMy00N2M2LWFjNzUtZDliYzZmMWE4ODJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy6ZssEutFoIO5MbEfoi2kmKWRAXdf1qKvNXa zf+KNSXo6AvK1VsLbgvim68p5QfbtoE2YPUxpiWD8oRV10OCnNpX93uYUyppA0wF kBJg10b9r7OKoJ55WSgzWNydEt6W1X+Y+puDXOBSns4YHvFx27h6+e4ktLnumnQU B3HKzlnJuNAtz2df+owDdgkBDEE8j1AUKRkR/J+3wxcFTQlet9/vZzxA1FXRkXL0 Tn2wpQ1A4N/RsY0KWQQbsmZySbl9t6JQreBH36R1yv6CBhvXrNLlXbjJyMRJJQO7 bzMaGvCpsfP/pURWneRMT2hYXLODWWBUOyCxRJzeLqk0/EcpmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI03D5hvZNnKTiWE6gKFLRl9YL2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYmJjYWMzODYtOTZhMS0z ZmE2LWFkOGEtZDNhNDMyMGRlYWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPYCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFVi5n7vlMqQpvmtor7r3ytjIddnbVvhJfPpdR+2ANSnJw6Rk1dRVp/X Stk0N9tTSZu5Wr+BnRDLyaSz7Hx5gbzs4fi7O9h4Zom1lTc7VEV7Zg5MKWW/n6TX Nk2xsFxVTAltfO4T+TeQmvY9lMp4Mzp5r7V7kWd2DNdmEdCe/F+5vQ7y12WrwBeE nQ03x0/mgyyDvjwcQMMY5lmKQwul1gCTn8bSDP9NvkYxpHhhDDhLduT4tb3iYvcQ 6qJxiKdAikuZOGIGeYsDrCroD1ITFOnbFPFpTy+rNfnR0OngQzGCN/kXuIuo/XIO 3X2gEdKxphkXYI2xRDecrovsqKGzwEA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:07:07 2025 by rpki-client