$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d2c401e-3e82-3e17-a0c7-d225a42f94a1.roa File: 8d2c401e-3e82-3e17-a0c7-d225a42f94a1.roa (raw, json) Hash identifier: GrQIkWJhItI44nqC/6XMknfW6WYm3M79tcdbKnmjAOM= Subject key identifier: DD:6B:64:5D:FD:5A:9D:38:7F:05:FF:B9:8A:FD:68:3E:6A:AE:35:17 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84113EAAA0A07D1D152CD380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d2c401e-3e82-3e17-a0c7-d225a42f94a1.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 162.72.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:3e:aa:a0:a0:7d:1d:15:2c:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=053dc860-7264-4e60-975b-010836b9a9df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c0:c7:93:47:4b:28:67:c8:15:d2:54:4c:df: 6c:03:44:28:98:25:51:e7:18:cf:b8:8d:1c:5d:74: f0:f7:c5:c3:d1:fb:7b:88:67:77:e4:9a:9c:80:63: 09:3a:37:fd:98:ab:42:cd:1e:4a:50:d8:d9:55:9f: 9c:25:14:c6:27:a7:5f:c0:74:ce:8d:d1:89:89:2b: fe:ec:74:05:e2:85:6f:9b:4c:01:8d:8a:46:89:cc: ac:d3:73:ce:9b:82:24:a0:0e:24:90:db:73:0e:35: 39:68:c7:fe:a8:12:93:5b:f5:dc:85:80:e3:9e:fa: bd:17:af:cd:54:f6:ba:1c:04:3b:96:7e:e9:82:cd: f8:92:71:53:54:d3:05:2c:85:ee:ad:5d:e5:ee:69: e0:cb:f4:15:4f:50:eb:b8:4b:53:5a:44:3a:20:ee: 23:c1:d6:5b:91:12:fb:cd:fa:55:81:dd:17:03:fa: 83:53:27:7b:26:9e:53:8c:76:dd:46:30:58:3b:b3: 33:85:62:f0:22:72:a4:7f:a7:9c:ca:b8:83:49:9d: 3e:91:f4:14:1c:67:fb:75:37:52:12:36:d6:0d:84: 1f:74:75:c7:31:29:31:9e:56:23:18:9d:c0:cf:62: f6:c6:f5:28:8d:ae:b7:fd:60:a0:1e:9a:f9:06:6c: 3c:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:6B:64:5D:FD:5A:9D:38:7F:05:FF:B9:8A:FD:68:3E:6A:AE:35:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8d2c401e-3e82-3e17-a0c7-d225a42f94a1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:1f:68:5d:8c:df:27:2a:7e:c0:17:e1:47:67:7d:79:e3:43: 0a:b2:59:ce:05:b5:48:ec:11:b6:a3:50:32:e2:ad:86:d2:6d: 86:b8:10:a7:31:eb:7a:1a:5d:93:07:8e:80:2e:b9:ad:e8:15: 4a:30:f8:26:bb:44:07:9c:ee:5c:88:0e:c2:ba:4f:e0:09:e3: 04:dc:06:31:0a:6b:33:ed:42:aa:4d:e0:4e:2c:7b:42:4b:c6: a6:d4:5a:92:dd:f2:2b:58:32:e6:6a:40:a5:23:e8:22:56:34: 0c:e1:5e:55:76:c6:52:90:a3:2f:0a:2d:cc:71:74:b6:a9:9e: 83:0e:43:b3:31:95:70:5e:21:0d:20:d0:38:15:86:a8:50:20: e2:f1:9e:f1:a8:ba:5f:36:b8:ab:31:1e:6b:e1:09:26:47:26: 97:7f:ec:94:64:21:5f:b3:cd:75:64:49:8d:06:4b:9f:d7:1c: f2:ff:3c:ff:50:a0:49:71:ae:5c:93:af:eb:16:80:40:e2:36: c2:fc:5c:fb:25:8a:98:af:65:fd:68:bf:aa:ae:c3:13:a0:28: c8:16:0e:a3:5d:32:a5:08:73:5d:d6:cd:f6:59:b1:d8:b8:82: 2f:09:77:88:8e:9a:ed:e8:6e:ce:40:d4:0c:11:fc:0c:a4:09: 60:53:bb:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEET6qoKB9HRUs04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MDUzZGM4NjAtNzI2NC00ZTYwLTk3NWItMDEwODM2YjlhOWRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMDHk0dLKGfIFdJUTN9sA0QomCVR5xjPuI0c XXTw98XD0ft7iGd35JqcgGMJOjf9mKtCzR5KUNjZVZ+cJRTGJ6dfwHTOjdGJiSv+ 7HQF4oVvm0wBjYpGicys03POm4IkoA4kkNtzDjU5aMf+qBKTW/XchYDjnvq9F6/N VPa6HAQ7ln7pgs34knFTVNMFLIXurV3l7mngy/QVT1DruEtTWkQ6IO4jwdZbkRL7 zfpVgd0XA/qDUyd7Jp5TjHbdRjBYO7MzhWLwInKkf6ecyriDSZ0+kfQUHGf7dTdS EjbWDYQfdHXHMSkxnlYjGJ3Az2L2xvUoja63/WCgHpr5Bmw8LwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1rZF39Wp04fwX/uYr9aD5qrjUXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGQyYzQwMWUtM2U4Mi0z ZTE3LWEwYzctZDIyNWE0MmY5NGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABsfaF2M3ycqfsAX4UdnfXnjQwqyWc4FtUjsEbajUDLirYbSbYa4EKcx 63oaXZMHjoAuua3oFUow+Ca7RAec7lyIDsK6T+AJ4wTcBjEKazPtQqpN4E4se0JL xqbUWpLd8itYMuZqQKUj6CJWNAzhXlV2xlKQoy8KLcxxdLapnoMOQ7MxlXBeIQ0g 0DgVhqhQIOLxnvGoul82uKsxHmvhCSZHJpd/7JRkIV+zzXVkSY0GS5/XHPL/PP9Q oElxrlyTr+sWgEDiNsL8XPslipivZf1ov6quwxOgKMgWDqNdMqUIc13WzfZZsdi4 gi8Jd4iOmu3obs5A1AwR/AykCWBTu/Y= -----END CERTIFICATE-----Generated at Fri Jul 25 23:59:21 2025 by rpki-client