$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b380a35-bfe8-313e-91f4-1bcec229e986.roa File: 2b380a35-bfe8-313e-91f4-1bcec229e986.roa (raw, json) Hash identifier: fEIPmRqG8ULZx6mySZzwMwOkgLNBIRmPIESfkcehl+o= Subject key identifier: 81:0E:66:6B:55:B9:32:CC:9C:D1:D4:50:15:83:B5:7D:C2:19:EA:93 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD8AA1C3CCBFB0AF288100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b380a35-bfe8-313e-91f4-1bcec229e986.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:8a:a1:c3:cc:bf:b0:af:28:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=dc868a3c-1a56-40df-bbdc-821c5cc011cf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ed:e5:63:a9:7e:04:85:ee:1a:e5:d9:66:3e: c7:e5:6a:60:fb:50:e9:a1:40:8a:f7:4e:ec:7c:a8: 24:71:cc:ec:3d:11:d2:e4:69:88:00:f3:05:7c:87: e5:54:02:0e:26:28:0e:3b:97:2a:a7:42:ac:c7:bb: e9:c6:df:19:49:d1:e0:82:16:cd:75:de:db:ca:20: b6:83:c5:e0:d6:00:91:10:fb:d5:8f:20:59:a5:ad: e5:b8:3d:c9:94:b5:96:b0:c2:5b:e8:ed:54:e2:b6: cd:b8:31:8c:c5:5f:ab:81:78:2e:a3:fb:4b:45:ef: ee:03:80:db:8b:9b:db:66:c0:c0:38:4c:58:1e:f9: 58:49:f3:21:49:a7:81:50:ca:f0:d4:19:a4:f8:69: 89:bd:15:cb:38:e9:6b:44:0c:03:88:f7:43:3a:68: 16:e7:b0:12:82:83:79:cc:54:22:84:87:dc:92:06: c8:a0:8d:68:fa:47:81:36:4b:ac:76:3c:5b:d1:3d: 70:56:db:fb:5d:f0:0d:dc:c6:bc:80:94:f2:ed:49: df:0c:03:c4:7c:70:36:30:d1:92:8c:93:10:d1:0d: 3e:93:e4:a7:b4:de:f5:10:bd:41:cb:4f:f1:a6:8f: 04:ef:fb:47:33:ab:df:53:d5:78:f4:1d:1b:3c:00: 04:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0E:66:6B:55:B9:32:CC:9C:D1:D4:50:15:83:B5:7D:C2:19:EA:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2b380a35-bfe8-313e-91f4-1bcec229e986.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:ce:4e:6b:f2:5b:96:f0:ea:c3:c9:5a:f1:ed:e8:e4:f0:5c: c1:e8:c0:00:1d:21:d8:cb:65:bd:1a:da:5e:ce:96:87:bf:14: 1b:a4:66:2d:92:fe:0f:bb:3f:10:05:62:5c:bb:8f:16:b8:d1: ee:6a:f6:76:4d:cb:ed:27:6a:4c:3b:a7:87:29:cd:52:2a:47: 05:03:0f:d4:28:92:f4:46:5d:dc:8d:89:57:18:11:11:cd:d0: 6e:43:a1:73:7e:68:ce:cd:6f:77:7f:7e:b3:74:40:56:8b:38: 17:b1:3c:79:c8:79:d7:0b:83:45:81:dd:e4:b1:10:32:ae:3e: fc:37:72:54:13:ad:9a:d4:81:a7:0a:a9:57:04:77:4f:29:82: 81:41:6c:7a:fe:55:bb:59:19:b3:52:09:e0:5e:1b:ad:dd:84: fd:be:ce:81:08:ea:3b:cb:bd:74:cd:5d:15:b5:b7:f0:8a:22: 14:f7:af:0f:31:4a:4e:39:94:66:3f:a1:51:a4:25:43:1a:b9: 40:9f:92:54:6b:dd:6b:c5:70:85:c6:82:c8:a1:e2:2b:c8:e9: 74:07:2a:26:b3:a1:21:94:6c:a0:8e:08:9c:d0:9b:b8:e7:91: fd:0b:de:eb:f9:4c:95:4e:50:0a:bd:f4:82:ea:40:a0:e5:08: af:6a:50:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzYqhw8y/sK8ogQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk ZGM4NjhhM2MtMWE1Ni00MGRmLWJiZGMtODIxYzVjYzAxMWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+3lY6l+BIXuGuXZZj7H5Wpg+1DpoUCK907s fKgkcczsPRHS5GmIAPMFfIflVAIOJigOO5cqp0Ksx7vpxt8ZSdHgghbNdd7byiC2 g8Xg1gCREPvVjyBZpa3luD3JlLWWsMJb6O1U4rbNuDGMxV+rgXguo/tLRe/uA4Db i5vbZsDAOExYHvlYSfMhSaeBUMrw1Bmk+GmJvRXLOOlrRAwDiPdDOmgW57ASgoN5 zFQihIfckgbIoI1o+keBNkusdjxb0T1wVtv7XfAN3Ma8gJTy7UnfDAPEfHA2MNGS jJMQ0Q0+k+SntN71EL1By0/xpo8E7/tHM6vfU9V49B0bPAAEywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEOZmtVuTLMnNHUUBWDtX3CGeqTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmIzODBhMzUtYmZlOC0z MTNlLTkxZjQtMWJjZWMyMjllOTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvOTmvyW5bw6sPJWvHt6OTwXMHowAAdIdjLZb0a2l7Oloe/FBukZi2S /g+7PxAFYly7jxa40e5q9nZNy+0nakw7p4cpzVIqRwUDD9QokvRGXdyNiVcYERHN 0G5DoXN+aM7Nb3d/frN0QFaLOBexPHnIedcLg0WB3eSxEDKuPvw3clQTrZrUgacK qVcEd08pgoFBbHr+VbtZGbNSCeBeG63dhP2+zoEI6jvLvXTNXRW1t/CKIhT3rw8x Sk45lGY/oVGkJUMauUCfklRr3WvFcIXGgsih4ivI6XQHKiazoSGUbKCOCJzQm7jn kf0L3uv5TJVOUAq99ILqQKDlCK9qUHY= -----END CERTIFICATE-----Generated at Sun Oct 26 09:59:58 2025 by rpki-client