$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa File: 129dca48-db60-34d2-801e-0d7c82dc0f87.roa (raw, json) Hash identifier: TqimeSWz6e6mkzVRV/848EJ07fCEG1mp1rp+850U7yE= Subject key identifier: E4:DA:62:78:DC:0F:FE:F5:E3:C1:2C:91:18:4D:CA:74:CE:55:70:A5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD8BE5657DCE648494D680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:8b:e5:65:7d:ce:64:84:94:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=cd9f4da6-bb88-43a5-9f27-6f5cc3c62124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:37:e9:c3:5d:93:42:90:a4:8e:8f:d9:45:89: d0:f9:fa:37:2f:ca:38:c7:54:37:77:73:41:33:60: 54:4f:b9:ed:6b:0f:21:5b:d1:d2:70:f1:e2:a5:93: 64:bb:37:f9:0e:79:c6:80:2c:00:db:4d:1f:aa:65: 2d:a0:a2:52:c0:ec:93:46:ab:ee:3f:23:f0:ec:f9: 3e:8b:e8:64:c5:37:1c:bf:d0:b3:7b:78:6d:59:dc: 63:59:67:3c:b4:e1:3e:2e:8f:4b:1f:ed:29:fd:66: e4:ba:bd:93:54:30:5a:ae:b6:6e:42:7d:c8:8f:57: 0a:c3:fc:72:e3:57:bd:1a:1c:8c:36:c7:6f:40:70: 7b:7e:75:92:45:1e:c7:2a:72:b7:c7:db:a1:29:c2: f1:e1:85:df:90:03:b2:03:86:29:0b:f2:b5:d9:1f: d4:bb:83:80:9f:2d:c6:55:0c:18:4f:f9:4c:3e:41: 21:fd:38:bd:ca:b0:67:a5:38:a8:ec:53:ab:d8:62: 5d:83:9c:78:7d:5a:67:0c:0f:ae:8e:94:97:5c:2f: 69:0c:a5:f9:89:a8:87:d7:48:be:91:14:69:04:bd: f3:7e:9a:37:4e:63:81:99:9c:39:55:aa:af:99:70: 99:0e:ac:d0:8e:d7:33:17:cb:73:a6:14:e7:22:6d: 5f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:DA:62:78:DC:0F:FE:F5:E3:C1:2C:91:18:4D:CA:74:CE:55:70:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/129dca48-db60-34d2-801e-0d7c82dc0f87.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c7:2e:09:2d:e0:de:b8:d1:3c:6f:b9:89:f6:89:55:0d:44:0f: 84:a7:08:44:0b:ea:6a:e3:dc:88:8c:c6:0f:6a:21:ae:59:4b: d8:01:71:a6:43:72:b7:e4:25:24:c2:b8:49:ac:58:f2:73:20: 86:cf:0f:8e:0c:4a:64:4d:a1:62:58:66:91:4f:15:f5:77:b6: 5e:47:46:8c:41:7f:08:c0:f0:b6:0f:49:12:64:26:85:00:ad: a2:64:f5:70:ce:65:fb:f1:6b:be:5e:cc:0e:4e:e1:db:a5:b7: 11:f3:ff:4a:a7:0a:f9:5c:26:9c:df:40:44:f4:bd:7d:54:f1: ee:3a:dd:ec:88:81:ef:9a:3e:20:6b:73:50:66:d8:ea:71:99: d3:96:93:e0:97:e4:8a:6c:11:7c:43:e5:c7:9e:dd:ab:1a:61: 81:da:7b:7f:ca:86:4e:fc:94:8d:1f:92:f2:04:50:eb:02:58: 57:07:25:79:6d:7f:24:0a:1e:10:78:22:f0:02:e6:d4:3e:8e: 59:52:a6:fc:bb:7c:f7:f6:56:58:8d:06:38:7b:e0:8e:9a:f3: 16:61:cc:0c:73:99:27:2f:89:f2:3e:1d:b3:aa:72:ad:f6:41: 70:1e:8f:29:10:ce:6c:04:45:b1:57:f5:0d:13:e5:28:1c:dc: 2d:07:f6:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYvlZX3OZISU1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Y2Q5ZjRkYTYtYmI4OC00M2E1LTlmMjctNmY1Y2MzYzYyMTI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArjfpw12TQpCkjo/ZRYnQ+fo3L8o4x1Q3d3NB M2BUT7ntaw8hW9HScPHipZNkuzf5DnnGgCwA200fqmUtoKJSwOyTRqvuPyPw7Pk+ i+hkxTccv9Cze3htWdxjWWc8tOE+Lo9LH+0p/Wbkur2TVDBarrZuQn3Ij1cKw/xy 41e9GhyMNsdvQHB7fnWSRR7HKnK3x9uhKcLx4YXfkAOyA4YpC/K12R/Uu4OAny3G VQwYT/lMPkEh/Ti9yrBnpTio7FOr2GJdg5x4fVpnDA+ujpSXXC9pDKX5iaiH10i+ kRRpBL3zfpo3TmOBmZw5VaqvmXCZDqzQjtczF8tzphTnIm1fowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTaYnjcD/7148EskRhNynTOVXClMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTI5ZGNhNDgtZGI2MC0z NGQyLTgwMWUtMGQ3YzgyZGMwZjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK07MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMcuCS3g3rjRPG+5ifaJVQ1ED4SnCEQL6mrj3IiMxg9qIa5ZS9gBcaZD crfkJSTCuEmsWPJzIIbPD44MSmRNoWJYZpFPFfV3tl5HRoxBfwjA8LYPSRJkJoUA raJk9XDOZfvxa75ezA5O4dultxHz/0qnCvlcJpzfQET0vX1U8e463eyIge+aPiBr c1Bm2OpxmdOWk+CX5IpsEXxD5cee3asaYYHae3/Khk78lI0fkvIEUOsCWFcHJXlt fyQKHhB4IvAC5tQ+jllSpvy7fPf2VliNBjh74I6a8xZhzAxzmScvifI+HbOqcq32 QXAejykQzmwERbFX9Q0T5Sgc3C0H9j0= -----END CERTIFICATE-----Generated at Sun Oct 26 12:01:28 2025 by rpki-client