$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa File: 989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa (raw, json) Hash identifier: 1Q05XueHqbhnEkgzHLVtstSRHDIJokEqTj1iXdXlGls= Subject key identifier: 95:87:85:F7:C5:90:05:DD:89:63:CE:68:B0:37:61:AC:27:2A:EF:FA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411F7140FBA8E8A0ED9BD00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 162.72.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:f7:14:0f:ba:8e:8a:0e:d9:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=3fd8104f-ebc3-4460-a82e-0205e7d4ca02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e6:97:27:d6:bb:4f:90:41:3a:ba:42:85:eb: 38:07:e8:a5:24:88:2c:f9:0f:4c:74:df:5d:4c:da: 23:7c:cd:12:ec:70:b1:f5:43:e8:73:6a:3c:84:d0: 75:e9:3a:db:f7:d1:26:53:c2:62:b1:90:be:95:b5: d6:08:97:26:73:e7:de:09:50:d6:5b:92:21:22:c4: 44:de:73:b3:31:bd:b3:a8:03:52:d8:0a:b7:f1:2b: b8:a9:ca:4c:3e:f7:9b:a8:74:27:c3:c6:43:9d:74: 3e:84:61:c1:60:c7:4e:f6:25:78:b7:71:44:b7:02: af:00:9e:2e:9b:7e:4f:5a:b1:d2:21:ea:a1:1d:e3: 97:35:84:1a:1d:10:c4:e6:83:3a:7b:e2:f1:b2:11: 00:18:51:17:7d:a0:0e:82:98:68:f7:b7:d5:b2:9d: d2:aa:d9:18:bf:e8:37:67:81:a8:60:eb:f4:f9:f7: b8:40:40:3b:f0:40:6d:b9:76:91:04:8c:68:1c:4c: 62:ad:72:96:b5:40:cf:f3:81:4c:46:a2:d4:aa:99: cd:9f:a8:7e:36:f7:68:9a:79:26:2b:e1:f0:08:91: ac:d9:f4:f2:86:3f:61:cc:fe:1e:4d:b4:4e:94:bb: 99:09:74:13:7d:d5:ea:f0:36:f3:53:31:e4:b5:9c: 16:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:87:85:F7:C5:90:05:DD:89:63:CE:68:B0:37:61:AC:27:2A:EF:FA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/989c2d08-9ac8-3dfe-b8bd-d27575604f5c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:09:96:f5:2c:56:8f:8b:57:b3:00:03:47:47:cb:97:fc:5a: 2e:2e:26:c6:2a:3b:6b:9d:fc:b6:5c:35:5d:02:58:a9:71:d0: e2:d1:5a:5f:ea:8d:49:ba:ff:c6:43:71:53:b7:d9:1e:a9:4e: f9:0a:92:2b:a3:bf:4c:46:c2:c1:00:43:f2:59:e6:13:f3:15: 36:d9:2b:12:86:58:ff:12:63:e5:db:b5:74:b1:dd:a6:24:48: 4d:a3:7c:7e:d3:d8:ba:fa:c3:3a:ec:35:57:63:3b:95:99:f3: f6:e7:6d:6f:2b:fd:e8:fd:0a:d2:e1:10:75:4e:6a:1f:b9:72: 94:7e:61:de:29:cc:a8:17:b7:8e:c4:47:c8:08:20:5a:07:88: a2:6d:56:66:17:f5:80:b5:37:ff:de:7d:67:8a:e4:db:1a:65: af:07:95:0a:27:bf:06:fa:5c:f4:30:c7:a0:7b:80:0c:9f:a9: 3c:d9:ec:8b:a4:d0:3a:26:90:8b:6e:81:96:64:ca:72:7d:a6: 47:92:09:2f:12:7b:f2:ce:28:97:28:c4:32:03:33:5e:78:d4: 85:39:b3:62:e5:14:73:6a:bb:dd:04:f3:21:6f:f4:fd:c7:bd: 8a:c3:39:25:f6:14:f6:1c:df:6c:c4:84:69:eb:db:8d:25:3a: 7f:5a:17:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEfcUD7qOig7ZvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk M2ZkODEwNGYtZWJjMy00NDYwLWE4MmUtMDIwNWU3ZDRjYTAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+aXJ9a7T5BBOrpChes4B+ilJIgs+Q9MdN9d TNojfM0S7HCx9UPoc2o8hNB16Trb99EmU8JisZC+lbXWCJcmc+feCVDWW5IhIsRE 3nOzMb2zqANS2Aq38Su4qcpMPvebqHQnw8ZDnXQ+hGHBYMdO9iV4t3FEtwKvAJ4u m35PWrHSIeqhHeOXNYQaHRDE5oM6e+LxshEAGFEXfaAOgpho97fVsp3SqtkYv+g3 Z4GoYOv0+fe4QEA78EBtuXaRBIxoHExirXKWtUDP84FMRqLUqpnNn6h+Nvdomnkm K+HwCJGs2fTyhj9hzP4eTbROlLuZCXQTfdXq8DbzUzHktZwWWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJWHhffFkAXdiWPOaLA3YawnKu/6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTg5YzJkMDgtOWFjOC0z ZGZlLWI4YmQtZDI3NTc1NjA0ZjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokihMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQJlvUsVo+LV7MAA0dHy5f8Wi4uJsYqO2ud/LZcNV0CWKlx0OLRWl/q jUm6/8ZDcVO32R6pTvkKkiujv0xGwsEAQ/JZ5hPzFTbZKxKGWP8SY+XbtXSx3aYk SE2jfH7T2Lr6wzrsNVdjO5WZ8/bnbW8r/ej9CtLhEHVOah+5cpR+Yd4pzKgXt47E R8gIIFoHiKJtVmYX9YC1N//efWeK5NsaZa8HlQonvwb6XPQwx6B7gAyfqTzZ7Iuk 0DomkItugZZkynJ9pkeSCS8Se/LOKJcoxDIDM1541IU5s2LlFHNqu90E8yFv9P3H vYrDOSX2FPYc32zEhGnr240lOn9aF5E= -----END CERTIFICATE-----Generated at Sat Jul 26 11:36:06 2025 by rpki-client