$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa File: f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa (raw, json) Hash identifier: 6PAijLgXcHHsLKuZ85GgPh6qxeeY3rmPfpI5SOJtww4= Subject key identifier: 21:CF:68:ED:46:87:7C:95:E1:48:8C:8B:EE:A2:31:21:6B:75:60:8C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584A84113E92CA9BEBAF5F431F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 7155 IP address blocks: 162.72.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:3e:92:ca:9b:eb:af:5f:43:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=1e4ef02b-c0a4-4e24-99ef-a7f7c206c355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:43:09:2b:62:cb:d4:48:8f:f2:aa:53:4c:5a: a0:c5:53:27:5b:dc:38:2b:52:65:c3:84:95:b6:c2: 82:34:fb:19:99:00:5a:f4:2c:41:4e:bd:8c:de:47: 08:df:24:f6:a8:32:37:dc:2f:c8:b8:13:e2:2e:e4: c0:25:86:71:92:01:6b:51:34:d6:94:e3:59:f7:77: 4e:2e:e8:62:6b:d2:ce:06:9d:2a:58:56:72:de:a6: f2:78:db:13:ae:f3:51:ce:69:e0:90:3a:c6:95:ae: 24:16:2d:8e:73:1a:d9:8b:83:93:7f:81:cb:b0:b9: 4b:ec:77:3b:a4:20:f4:e5:92:09:2e:1c:4e:55:70: 99:c3:67:17:24:80:a9:53:15:50:cc:c8:97:98:f5: 04:d3:d5:68:58:07:5e:0c:d7:7e:68:35:08:33:cc: d3:7e:a1:28:d7:00:cc:22:98:9d:8f:84:dc:21:57: 56:48:5b:e7:66:af:91:60:e6:c6:39:84:d5:ac:ea: 9c:dc:9b:c9:a2:c0:7d:b4:06:13:3f:d2:66:14:fc: 1d:33:32:45:2b:9b:4d:da:bf:8b:40:05:5b:0f:b5: 75:bb:c2:b7:f4:9c:52:31:69:8d:ca:b6:c0:2b:21: b0:c4:b9:57:79:1b:64:6a:32:d1:54:85:2c:65:cc: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:CF:68:ED:46:87:7C:95:E1:48:8C:8B:EE:A2:31:21:6B:75:60:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f473791c-2386-3aa5-86b3-1766c8d9c5a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ab:26:9f:9e:63:18:c5:e0:ca:07:b3:30:ef:35:1a:66:f3:7d: ec:1e:0d:d7:ac:39:1d:ed:e8:c0:ba:54:87:b1:23:cf:74:34: 55:2a:b9:c7:0b:df:3e:9b:f0:da:32:ec:f8:0b:00:a7:0f:04: 7d:03:2a:3f:0d:90:d4:5c:99:52:34:b8:85:38:f6:5d:c3:b3: 74:eb:ca:f0:4b:3e:d2:28:87:94:09:43:c8:14:81:21:74:0c: 43:d9:10:38:0a:f3:a0:b5:c7:5c:83:33:02:ad:2a:4a:69:7c: 4e:ab:02:f5:53:ba:27:25:48:dc:ee:b0:0e:da:e8:df:14:2c: 06:89:ce:83:5b:2e:65:eb:98:ec:4f:1e:a3:7b:46:53:d4:5e: b9:60:89:36:b3:d6:42:40:35:7d:ca:9e:4d:6d:a7:63:6c:ac: e5:75:09:7a:a2:2d:22:1c:67:81:20:33:7e:b8:b1:4f:9d:87: 92:49:32:6f:d2:02:b6:4e:92:0e:fa:43:8c:9f:26:45:f0:e6: ba:f3:09:66:9d:3a:80:35:ec:9c:42:5d:e1:61:4c:cc:2e:de: 8c:d8:74:55:59:d8:18:0d:e2:ef:f5:cc:23:38:3a:cd:8e:53: 05:61:09:01:b9:f7:4c:dc:6f:14:42:9f:a5:fc:49:4c:fd:6b: 6a:c1:50:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEET6Sypvrr19DHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MWU0ZWYwMmItYzBhNC00ZTI0LTk5ZWYtYTdmN2MyMDZjMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0MJK2LL1EiP8qpTTFqgxVMnW9w4K1Jlw4SV tsKCNPsZmQBa9CxBTr2M3kcI3yT2qDI33C/IuBPiLuTAJYZxkgFrUTTWlONZ93dO Luhia9LOBp0qWFZy3qbyeNsTrvNRzmngkDrGla4kFi2OcxrZi4OTf4HLsLlL7Hc7 pCD05ZIJLhxOVXCZw2cXJICpUxVQzMiXmPUE09VoWAdeDNd+aDUIM8zTfqEo1wDM Ipidj4TcIVdWSFvnZq+RYObGOYTVrOqc3JvJosB9tAYTP9JmFPwdMzJFK5tN2r+L QAVbD7V1u8K39JxSMWmNyrbAKyGwxLlXeRtkajLRVIUsZcycmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHPaO1Gh3yV4UiMi+6iMSFrdWCMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjQ3Mzc5MWMtMjM4Ni0z YWE1LTg2YjMtMTc2NmM4ZDljNWE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokiHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKsmn55jGMXgygezMO81GmbzfeweDdesOR3t6MC6VIexI890NFUquccL 3z6b8Noy7PgLAKcPBH0DKj8NkNRcmVI0uIU49l3Ds3TryvBLPtIoh5QJQ8gUgSF0 DEPZEDgK86C1x1yDMwKtKkppfE6rAvVTuiclSNzusA7a6N8ULAaJzoNbLmXrmOxP HqN7RlPUXrlgiTaz1kJANX3Knk1tp2NsrOV1CXqiLSIcZ4EgM364sU+dh5JJMm/S ArZOkg76Q4yfJkXw5rrzCWadOoA17JxCXeFhTMwu3ozYdFVZ2BgN4u/1zCM4Os2O UwVhCQG590zcbxRCn6X8SUz9a2rBUBw= -----END CERTIFICATE-----Generated at Sat Jul 26 00:03:18 2025 by rpki-client