$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa File: 0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa (raw, json) Hash identifier: oTzmu/Cqzb83ivRW8WhfRiQVqWzBCSERP0vBo1MUJAE= Subject key identifier: 3D:60:B5:69:F7:81:CA:CC:56:EE:2F:6C:2D:32:FF:A3:03:36:A1:8B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411F4711B205355ADEC40C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 162.72.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:f4:71:1b:20:53:55:ad:ec:40:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=a68c73ff-1550-4b0b-9ab6-333002b552bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:0e:4b:f5:fc:f8:25:64:ad:77:df:f5:1a:6a: 24:74:87:7a:0a:a8:f2:66:58:1d:87:91:a1:a4:54: f7:6d:0a:57:12:95:a7:bf:61:80:cc:fa:74:b0:48: d8:25:4d:df:69:db:80:5a:19:eb:b7:2d:9d:7e:4d: 46:20:57:1c:1d:dd:7f:b0:9a:5c:0c:f9:ad:ea:67: 98:9b:d3:b8:b6:a4:c7:e6:3b:89:d1:58:a7:bc:65: ec:8b:69:7d:b3:28:38:ef:25:bb:b3:2f:49:c5:53: 80:77:81:8f:d5:ac:49:4e:9d:7f:dc:e7:75:fb:4a: 43:c6:41:50:36:df:57:75:3f:7c:b6:95:a0:1f:9c: c6:be:4a:42:10:1a:5b:6f:bd:01:d8:1d:59:ae:ad: 8d:9d:36:48:ef:11:01:a6:a8:1f:b7:0d:f2:61:a8: 17:63:d2:79:83:26:9e:0a:cb:e8:12:f0:ff:b3:6e: 9c:97:92:ee:38:f9:8f:1e:44:a2:f7:6c:5f:67:7a: 59:ec:20:d5:95:2d:35:aa:84:5a:ca:08:fd:a0:bb: 18:c2:39:2c:85:86:f3:ec:da:aa:bd:d6:d3:7e:bd: 42:4a:7e:f8:76:64:ce:27:18:d5:e4:95:a2:a9:a9: e3:bd:f8:f7:22:9e:fa:07:96:c1:d8:41:0a:f0:b0: 86:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:60:B5:69:F7:81:CA:CC:56:EE:2F:6C:2D:32:FF:A3:03:36:A1:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0af0af65-ec7c-3e4a-971f-f9d097296c5e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a4:60:35:a5:ab:8f:97:8c:6b:5c:cf:f5:be:49:ba:b7:ed: 48:0a:bb:6b:32:ef:1d:99:79:1a:e4:16:ea:52:04:6c:25:20: 7f:ad:46:87:15:4e:3d:4d:72:90:d3:d5:f3:2d:7e:f3:38:69: f0:8c:af:99:3b:0c:0e:d5:7f:68:63:fa:a1:ee:93:a9:19:e4: 05:1a:23:a3:4b:ab:9e:cc:fe:a3:ec:00:ff:2e:6a:5d:aa:1b: ce:0e:61:c7:dd:17:65:17:9f:7a:65:0d:2a:3c:57:0d:09:09: 60:70:ab:3c:36:a4:33:de:4c:f4:d5:f2:00:73:36:46:78:76: 86:f6:da:03:8f:d0:cd:fa:4a:e2:e8:24:ee:a3:e3:66:27:9a: a0:24:48:9e:24:46:1d:e3:c0:50:ff:be:2d:a6:fe:b4:d1:11: a1:f4:b1:d8:cd:37:f8:13:87:ff:a4:a1:4a:cf:3d:8f:24:23: 3d:94:42:66:f4:ed:45:e1:8c:7b:9e:48:74:7c:8b:b1:b8:ae: ea:70:53:c8:62:c2:a1:d0:23:5e:8f:92:ac:38:20:d1:df:ca: 69:6a:cb:51:27:2b:01:82:de:9d:7f:47:98:e5:ec:bf:51:2b: 3e:26:25:b0:6b:03:a7:40:96:ec:d9:ec:73:0a:1d:cd:46:4d: c4:ee:7e:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfRxGyBTVa3sQMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YTY4YzczZmYtMTU1MC00YjBiLTlhYjYtMzMzMDAyYjU1MmJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4w5L9fz4JWStd9/1GmokdId6CqjyZlgdh5Gh pFT3bQpXEpWnv2GAzPp0sEjYJU3faduAWhnrty2dfk1GIFccHd1/sJpcDPmt6meY m9O4tqTH5juJ0VinvGXsi2l9syg47yW7sy9JxVOAd4GP1axJTp1/3Od1+0pDxkFQ Nt9XdT98tpWgH5zGvkpCEBpbb70B2B1Zrq2NnTZI7xEBpqgftw3yYagXY9J5gyae CsvoEvD/s26cl5LuOPmPHkSi92xfZ3pZ7CDVlS01qoRaygj9oLsYwjkshYbz7Nqq vdbTfr1CSn74dmTOJxjV5JWiqanjvfj3Ip76B5bB2EEK8LCGMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD1gtWn3gcrMVu4vbC0y/6MDNqGLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGFmMGFmNjUtZWM3Yy0z ZTRhLTk3MWYtZjlkMDk3Mjk2YzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHekYDWlq4+XjGtcz/W+Sbq37UgKu2sy7x2ZeRrkFupSBGwlIH+tRocV Tj1NcpDT1fMtfvM4afCMr5k7DA7Vf2hj+qHuk6kZ5AUaI6NLq57M/qPsAP8ual2q G84OYcfdF2UXn3plDSo8Vw0JCWBwqzw2pDPeTPTV8gBzNkZ4dob22gOP0M36SuLo JO6j42YnmqAkSJ4kRh3jwFD/vi2m/rTREaH0sdjNN/gTh/+koUrPPY8kIz2UQmb0 7UXhjHueSHR8i7G4rupwU8hiwqHQI16Pkqw4INHfymlqy1EnKwGC3p1/R5jl7L9R Kz4mJbBrA6dAluzZ7HMKHc1GTcTufic= -----END CERTIFICATE-----Generated at Sat Jul 26 00:01:56 2025 by rpki-client