$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa File: 07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa (raw, json) Hash identifier: brKPkb10pipMzoz6iGfWYaRoXXqcLbxe5m4yREnKOww= Subject key identifier: C8:EF:9E:84:42:23:1B:47:72:38:EF:E7:AC:B3:06:27:66:5B:5A:E0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCDAAF1DC0CC14343C5100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:da:af:1d:c0:cc:14:34:3c:51:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7ae1ee67-d6ef-4d03-8410-1ac0c0dc2b5f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:4e:3d:05:f5:c4:eb:2a:ac:05:9e:09:24:c1: 30:e6:66:39:88:f9:84:c2:15:15:bd:44:45:11:68: d5:54:a9:4f:87:27:e8:45:d5:21:1c:32:13:21:a5: 1d:3e:ae:15:88:02:45:c9:ab:a6:fd:b4:04:e3:78: 45:ef:66:5c:35:4b:bf:95:09:f4:e5:8d:03:b5:33: 74:6f:78:8e:cb:83:3e:e6:ca:88:60:22:e5:86:e5: 12:91:2b:c1:d2:6b:e4:96:f4:97:cc:6f:cd:60:52: aa:b4:fc:30:7a:c9:a5:c9:a6:a9:eb:b3:ae:1c:54: d6:69:14:2e:e1:81:27:2d:ca:d5:22:93:a9:7d:ea: b4:1b:29:ef:36:12:ec:fc:49:e9:fd:4c:91:03:e3: db:3d:ba:b9:3a:81:35:45:69:24:cc:ff:b3:8e:90: 22:ac:2a:c7:a3:37:9d:25:6b:48:a9:36:48:df:03: 32:b4:b5:7c:62:3f:ab:e9:23:8c:63:dd:d6:d1:6c: fe:0d:1b:6d:5a:8b:7e:63:ce:37:69:24:5d:2c:88: a2:b6:a1:7d:b4:98:42:de:43:39:c4:9b:37:4f:1e: 4f:f9:21:dd:a3:ac:bc:8c:8d:67:c3:82:20:25:d9: 7a:61:ed:2f:7b:71:a1:6b:3f:cf:a7:38:45:64:fc: bf:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:EF:9E:84:42:23:1B:47:72:38:EF:E7:AC:B3:06:27:66:5B:5A:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:ce:ca:0e:4f:cb:b5:59:c4:84:5d:47:d4:b2:40:46:f7:b1: a5:3b:c4:a2:92:c3:e5:be:b5:e0:6e:a5:d2:32:82:db:05:83: 2e:16:fd:13:c3:37:ec:ce:cb:78:4c:ce:2a:a2:17:4a:de:04: 63:73:a2:ef:62:60:5a:b1:7d:19:2b:c8:d0:5a:04:84:d2:d2: 31:62:38:64:e0:9c:aa:2d:11:8b:09:20:e6:a9:4c:77:e2:6f: 2c:ff:c5:de:90:d6:77:5f:10:5a:6e:18:75:bf:97:cf:49:2a: ee:9d:80:bc:90:38:11:79:8c:82:d5:f1:1c:07:96:70:6d:20: 6c:fd:8f:cb:8f:03:c4:13:f4:83:ae:2e:c7:01:36:54:65:f6: 95:91:a5:c6:7d:cd:cc:6e:34:1d:de:e7:78:0f:7d:cc:ad:ba: 2d:25:37:a4:3c:e4:35:d0:88:84:dc:10:67:17:e4:92:cb:9f: b5:33:90:47:d2:3d:b4:e5:fc:44:bc:fe:ab:3f:b5:d3:da:0a: bb:fc:5a:11:07:40:fb:ee:57:b8:6b:60:4d:20:69:70:28:77: 06:c7:03:ae:a7:13:d6:1f:0a:27:dd:ec:74:ea:5d:d9:9d:67: e4:d9:2d:41:88:27:47:14:12:bf:e2:8d:5c:6e:c3:4a:9b:ad: 41:2f:8f:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNqvHcDMFDQ8UQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2FlMWVlNjctZDZlZi00ZDAzLTg0MTAtMWFjMGMwZGMyYjVmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhE49BfXE6yqsBZ4JJMEw5mY5iPmEwhUVvURF EWjVVKlPhyfoRdUhHDITIaUdPq4ViAJFyaum/bQE43hF72ZcNUu/lQn05Y0DtTN0 b3iOy4M+5sqIYCLlhuUSkSvB0mvklvSXzG/NYFKqtPwwesmlyaap67OuHFTWaRQu 4YEnLcrVIpOpfeq0GynvNhLs/Enp/UyRA+PbPbq5OoE1RWkkzP+zjpAirCrHozed JWtIqTZI3wMytLV8Yj+r6SOMY93W0Wz+DRttWot+Y843aSRdLIiitqF9tJhC3kM5 xJs3Tx5P+SHdo6y8jI1nw4IgJdl6Ye0ve3Ghaz/PpzhFZPy/6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMjvnoRCIxtHcjjv56yzBidmW1rgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDdkYTkyNTgtNWZkNC0z NGRmLThkM2QtZmUwYmMwZjVjNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3Oyg5Py7VZxIRdR9SyQEb3saU7xKKSw+W+teBupdIygtsFgy4W/RPD N+zOy3hMziqiF0reBGNzou9iYFqxfRkryNBaBITS0jFiOGTgnKotEYsJIOapTHfi byz/xd6Q1ndfEFpuGHW/l89JKu6dgLyQOBF5jILV8RwHlnBtIGz9j8uPA8QT9IOu LscBNlRl9pWRpcZ9zcxuNB3e53gPfcytui0lN6Q85DXQiITcEGcX5JLLn7UzkEfS PbTl/ES8/qs/tdPaCrv8WhEHQPvuV7hrYE0gaXAodwbHA66nE9YfCifd7HTqXdmd Z+TZLUGIJ0cUEr/ijVxuw0qbrUEvj/Y= -----END CERTIFICATE-----Generated at Sun Oct 26 09:59:55 2025 by rpki-client