$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51a001cc-e0ad-3db7-9ba2-cafe522e6bee.roa File: 51a001cc-e0ad-3db7-9ba2-cafe522e6bee.roa (raw, json) Hash identifier: IkpHgXIeCvpF5tUwEyVYxicPI68yMLklaaYo5XgranQ= Subject key identifier: A6:3B:D1:3E:AC:A9:16:FA:AA:A4:5C:B4:97:C8:DC:AA:A4:4D:7E:C7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411F78F159ADF3D32080880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51a001cc-e0ad-3db7-9ba2-cafe522e6bee.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 162.72.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:f7:8f:15:9a:df:3d:32:08:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=c0c1f2b4-9558-45cd-9cfe-fd11bd8446b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:a3:6b:94:d1:d3:a9:25:06:7e:5c:0f:1a:63: e5:cc:12:25:95:88:0a:1a:97:8d:ca:ea:11:75:5c: 48:e6:70:46:d3:2e:b3:13:a9:26:4f:b2:0a:5e:c1: 4e:53:11:5a:39:2e:91:0d:d1:48:0a:e9:d9:a7:44: 4a:40:7c:42:ba:84:49:88:b6:24:4d:be:7e:d2:3c: ca:02:af:12:1a:53:a3:43:48:d4:b1:94:68:26:99: 32:6b:1e:33:1d:3e:13:6e:22:77:6d:56:60:3c:80: c3:da:18:7d:05:54:4e:3e:2a:e9:b3:18:74:48:3d: d6:86:ab:5d:68:2c:e8:ea:7d:05:74:8b:23:76:50: b9:e3:a1:a3:85:95:c4:1f:e5:ad:f8:32:97:42:6f: 3d:5d:54:9d:d4:7e:4e:aa:6e:b1:28:cd:40:a2:4e: c1:6a:4c:a1:e9:e6:3c:8f:3a:b3:55:5b:9c:b0:db: d5:9c:d5:5f:85:3c:b5:5d:e0:fd:e7:5a:20:55:ae: ca:7e:dd:bb:a1:3a:54:b7:15:43:51:fb:e0:96:6e: 8b:4c:5e:fe:67:44:38:a3:da:81:69:9d:15:dc:9c: 32:de:b8:21:80:68:d7:39:a1:59:80:c5:8e:75:56: 19:0b:e8:5e:e9:b5:f6:6f:ad:91:3d:05:3e:ca:13: dd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:3B:D1:3E:AC:A9:16:FA:AA:A4:5C:B4:97:C8:DC:AA:A4:4D:7E:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/51a001cc-e0ad-3db7-9ba2-cafe522e6bee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:d9:75:88:e6:b4:0e:17:85:92:61:63:32:fa:23:aa:eb:82: 30:86:db:58:5f:4d:0c:3b:9c:b7:e3:e7:ba:8c:ed:2c:8a:f7: 04:43:08:47:c1:65:cd:a4:58:43:dc:e8:b3:f2:d3:53:eb:68: dc:38:62:d2:17:0e:c0:47:3b:db:1d:9f:e1:6d:31:5e:74:73: d8:fd:b2:7d:d7:d7:38:ff:60:ab:61:86:c3:43:79:1f:96:90: 11:ec:3a:18:e7:c1:a4:7b:79:e6:1a:c2:fc:4f:25:4d:12:31: db:a7:dd:25:35:fc:85:86:16:9c:37:02:ff:55:0c:50:2d:83: 5c:7f:b5:0b:25:29:3e:f7:9d:e1:b3:bb:73:b9:3f:5b:c0:18: 16:e5:33:df:be:4b:6d:ed:19:09:99:df:63:66:c4:85:39:41: 0f:67:d0:91:d0:b8:8b:bb:2c:4c:d2:b2:f3:f1:85:c2:4a:c0: f8:d9:97:95:01:d6:4c:84:ad:2f:fe:8c:a2:c7:7e:25:c1:e2: aa:2e:36:93:11:7a:6f:ef:1c:ed:89:21:26:45:7c:c5:6e:f7: 13:2f:8c:66:b2:7a:c6:c0:65:b4:c4:cf:78:25:d6:6b:6c:85: f8:35:9e:5d:58:49:65:dd:dd:c7:8e:8f:a4:f3:e1:91:18:09: b6:50:68:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfePFZrfPTIICIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk YzBjMWYyYjQtOTU1OC00NWNkLTljZmUtZmQxMWJkODQ0NmI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKNrlNHTqSUGflwPGmPlzBIllYgKGpeNyuoR dVxI5nBG0y6zE6kmT7IKXsFOUxFaOS6RDdFICunZp0RKQHxCuoRJiLYkTb5+0jzK Aq8SGlOjQ0jUsZRoJpkyax4zHT4TbiJ3bVZgPIDD2hh9BVROPirpsxh0SD3Whqtd aCzo6n0FdIsjdlC546GjhZXEH+Wt+DKXQm89XVSd1H5Oqm6xKM1Aok7Bakyh6eY8 jzqzVVucsNvVnNVfhTy1XeD951ogVa7Kft27oTpUtxVDUfvglm6LTF7+Z0Q4o9qB aZ0V3Jwy3rghgGjXOaFZgMWOdVYZC+he6bX2b62RPQU+yhPdKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKY70T6sqRb6qqRctJfI3KqkTX7HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTFhMDAxY2MtZTBhZC0z ZGI3LTliYTItY2FmZTUyMmU2YmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfZdYjmtA4XhZJhYzL6I6rrgjCG21hfTQw7nLfj57qM7SyK9wRDCEfB Zc2kWEPc6LPy01PraNw4YtIXDsBHO9sdn+FtMV50c9j9sn3X1zj/YKthhsNDeR+W kBHsOhjnwaR7eeYawvxPJU0SMdun3SU1/IWGFpw3Av9VDFAtg1x/tQslKT73neGz u3O5P1vAGBblM9++S23tGQmZ32NmxIU5QQ9n0JHQuIu7LEzSsvPxhcJKwPjZl5UB 1kyErS/+jKLHfiXB4qouNpMRem/vHO2JISZFfMVu9xMvjGayesbAZbTEz3gl1mts hfg1nl1YSWXd3ceOj6Tz4ZEYCbZQaJI= -----END CERTIFICATE-----Generated at Sat Jul 26 11:12:40 2025 by rpki-client