$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c865b22-7382-32fa-86c2-5265a6651fc7.roa File: 9c865b22-7382-32fa-86c2-5265a6651fc7.roa (raw, json) Hash identifier: JlevondLRvz0asySDbjqC9oUWjsKjEf8409ke2d67tw= Subject key identifier: 1F:47:A8:0E:6D:78:EA:F5:BE:BA:48:F9:80:49:51:70:D3:42:F9:ED Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A8411B106C82F950C8F920380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c865b22-7382-32fa-86c2-5265a6651fc7.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 72.173.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:b1:06:c8:2f:95:0c:8f:92:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=8c382fd8-fc0e-4276-8ab8-36f34e6f58dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:b1:09:08:c9:95:9d:95:a0:b0:d0:5b:3b:2c: c5:a9:3e:a0:31:43:1e:4c:02:43:d8:ac:1c:90:24: b5:be:55:44:c0:6b:07:84:34:ea:04:2f:52:ca:53: 4e:a6:f8:d5:f6:03:d9:64:a1:60:a7:1c:0d:53:63: ea:52:f9:61:85:36:34:68:9a:2e:39:5e:05:05:cf: 37:68:e5:41:67:35:52:48:41:6b:3f:1d:e8:10:2f: 5b:36:e1:1f:6e:51:f3:1b:c8:3f:03:1f:12:0f:17: b5:47:cb:90:ae:21:86:88:85:3c:8b:40:0f:40:d6: d5:c3:0a:f7:91:e4:06:e2:de:59:1e:24:84:9f:64: b0:c0:25:89:63:94:30:23:a0:5c:a8:cd:80:d5:69: a2:77:e3:8e:d0:2f:88:57:ce:dd:a0:5f:25:93:97: 80:3c:bd:b5:f5:4f:13:94:fa:fa:df:78:7d:de:7d: 10:e6:b2:ae:6a:17:53:b2:0e:39:ee:33:07:fb:6d: 9e:93:fa:32:1a:62:3d:b2:29:72:8d:65:5d:73:e4: d7:1e:70:dc:d1:54:ca:4e:03:0b:4a:83:e7:77:50: 08:c3:0c:ed:73:4a:66:bc:2f:90:51:e7:38:44:e8: 68:8d:2f:52:0a:8f:35:c2:0d:e9:f1:c6:be:24:f3: 58:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:47:A8:0E:6D:78:EA:F5:BE:BA:48:F9:80:49:51:70:D3:42:F9:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9c865b22-7382-32fa-86c2-5265a6651fc7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:83:42:3b:03:da:5b:56:bb:fe:2c:11:6e:19:f3:b5:71:82: 5a:6b:d6:c0:c0:ea:90:28:d0:4b:f0:87:d8:1f:4a:b7:21:4d: 7c:84:6f:59:52:5e:d3:9f:25:3e:61:9f:40:1d:c1:76:e4:4a: af:4e:7a:84:a3:68:ff:b5:e3:2a:eb:f4:2c:de:8b:c2:58:40: 15:33:be:14:df:ee:b6:ce:78:bc:49:54:f6:a6:f8:d3:85:2a: 30:2c:b5:68:73:ec:90:20:7a:0e:d1:97:c6:fc:94:bd:66:36: 9c:ea:ec:2d:4e:be:4b:ba:ab:f0:bd:64:d4:ed:a6:09:b7:7f: 1b:1a:45:83:4e:00:06:d3:60:f5:8f:c2:aa:e6:0f:cb:5e:e4: 85:ab:8f:d8:81:c4:06:62:5a:5b:82:67:cc:57:54:f3:95:7d: ec:17:27:41:f2:4c:ef:df:52:47:15:02:83:97:ff:da:71:dc: b0:49:cb:a0:8f:fb:3a:84:47:4e:b5:5e:c3:7f:83:22:ae:84: 20:e7:38:54:14:ed:93:5c:48:94:e0:c5:9c:9a:ac:26:66:c7: 7e:11:cd:39:e3:1a:79:dc:db:6e:54:9b:71:b4:b8:79:08:58: e6:7c:30:8b:3a:f5:90:c0:6b:9a:b1:72:85:2a:1a:75:03:90: 5a:ed:59:7b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEbEGyC+VDI+SA4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk OGMzODJmZDgtZmMwZS00Mjc2LThhYjgtMzZmMzRlNmY1OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLEJCMmVnZWgsNBbOyzFqT6gMUMeTAJD2Kwc kCS1vlVEwGsHhDTqBC9SylNOpvjV9gPZZKFgpxwNU2PqUvlhhTY0aJouOV4FBc83 aOVBZzVSSEFrPx3oEC9bNuEfblHzG8g/Ax8SDxe1R8uQriGGiIU8i0APQNbVwwr3 keQG4t5ZHiSEn2SwwCWJY5QwI6BcqM2A1Wmid+OO0C+IV87doF8lk5eAPL219U8T lPr633h93n0Q5rKuahdTsg457jMH+22ek/oyGmI9silyjWVdc+TXHnDc0VTKTgML SoPnd1AIwwztc0pmvC+QUec4ROhojS9SCo81wg3p8ca+JPNYLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9HqA5teOr1vrpI+YBJUXDTQvntMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOWM4NjViMjItNzM4Mi0z MmZhLTg2YzItNTI2NWE2NjUxZmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFyDQjsD2ltWu/4sEW4Z87Vxglpr1sDA6pAo0Evwh9gfSrchTXyEb1lS XtOfJT5hn0AdwXbkSq9OeoSjaP+14yrr9Czei8JYQBUzvhTf7rbOeLxJVPam+NOF KjAstWhz7JAgeg7Rl8b8lL1mNpzq7C1Ovku6q/C9ZNTtpgm3fxsaRYNOAAbTYPWP wqrmD8te5IWrj9iBxAZiWluCZ8xXVPOVfewXJ0HyTO/fUkcVAoOX/9px3LBJy6CP +zqER061XsN/gyKuhCDnOFQU7ZNcSJTgxZyarCZmx34RzTnjGnnc225Um3G0uHkI WOZ8MIs69ZDAa5qxcoUqGnUDkFrtWXs= -----END CERTIFICATE-----Generated at Sat Jul 26 00:09:59 2025 by rpki-client