$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/801b785e-68a2-3b93-87f4-61701a220a16.roa File: 801b785e-68a2-3b93-87f4-61701a220a16.roa (raw, json) Hash identifier: ICeMzOaZaaSP7IkxT3++kOzZOe/sF0Gl/kwamFJtSYc= Subject key identifier: DC:E6:62:73:FE:39:59:0F:13:B2:48:2D:FA:F2:E6:CA:0F:86:30:4E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CD0F52ACB75FF75F1C0D80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/801b785e-68a2-3b93-87f4-61701a220a16.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 162.72.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cd:0f:52:ac:b7:5f:f7:5f:1c:0d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=677a1b21-7ee6-4134-98ae-b5bf7c8d01e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:50:e5:30:4e:a1:4c:f8:32:70:8f:12:45:22: 35:40:27:16:a2:d9:61:25:1a:e6:08:38:19:a3:96: 13:e5:d2:e1:f5:03:b1:d1:28:81:b1:6c:59:a9:7a: 6d:1b:cb:aa:cf:fd:ca:40:d3:b1:04:db:f7:9e:53: e3:96:d7:51:9d:f5:c8:04:0a:e2:9c:31:63:e2:03: 3a:c7:62:62:90:94:2e:e9:10:cc:af:c5:fc:ea:b3: fc:b8:95:1f:93:ef:df:0b:93:f8:d9:aa:94:67:61: 3d:2e:a8:f2:2b:c4:31:b2:f2:7f:8b:62:20:ef:cd: 5e:15:b4:14:51:6b:be:b2:13:bb:10:5a:bd:8f:c8: 58:ff:21:1c:67:01:e7:a0:d6:8b:2f:4e:f4:63:85: 5e:40:6a:8f:87:f8:4a:c6:b1:81:94:41:ad:93:a9: b0:56:74:f9:dc:90:1a:c0:93:29:3c:71:0f:d6:11: b3:37:2e:0e:5f:89:6b:16:38:90:00:5e:7c:4e:b8: 0f:ec:d4:07:d0:a8:3c:39:97:64:e0:0f:06:87:11: 09:9a:d7:dc:95:f6:cf:3d:53:c1:fe:5e:76:b4:d4: 88:b2:5e:22:4d:35:aa:9e:10:2d:d1:59:77:cb:98: 70:17:f7:bf:c1:f7:98:d9:ba:96:14:31:cb:1f:46: 3c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:E6:62:73:FE:39:59:0F:13:B2:48:2D:FA:F2:E6:CA:0F:86:30:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/801b785e-68a2-3b93-87f4-61701a220a16.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:02:39:bc:f6:24:b7:bf:66:e7:a6:d7:36:90:76:42:bd:2b: b6:79:a8:20:dd:8e:ec:c0:c4:8d:51:d9:9a:db:ee:d8:0f:79: 31:38:9d:72:17:05:7a:3d:c3:62:bb:d9:31:26:68:56:db:64: a8:f5:0a:5c:21:78:25:d4:0b:6f:5c:e4:08:99:03:f8:c4:46: 38:77:fb:33:2b:4e:61:a6:8a:87:87:2a:29:1d:95:08:e4:31: 17:d9:9d:df:77:fb:c1:d8:78:d1:ec:08:fa:8d:14:d9:89:a5: 23:cf:4b:05:e2:f9:e0:8e:05:58:a3:10:b8:96:e3:4c:a8:68: 8a:5e:4d:62:14:ad:92:ab:0c:bf:ab:d5:bc:c2:c8:69:f0:ea: ee:36:f2:88:69:ce:02:64:50:d9:2c:ff:81:9b:aa:4a:d1:74: 22:00:cd:3d:4e:93:93:d8:e0:19:d5:67:a8:45:4c:6a:e4:e9: 93:8b:fc:83:b4:1b:2d:7f:f7:d4:41:82:c7:82:68:33:5c:98: 27:28:8e:0e:2c:17:3b:2b:a7:e8:b0:d4:e3:72:c9:a0:72:ed: 18:ae:5e:1a:b7:af:7a:fb:35:6d:f4:67:7a:ee:60:ec:ed:40: 96:c3:f2:f2:64:d9:4a:8e:37:bb:63:4b:bb:f1:d3:55:97:49: b1:5b:86:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzQ9SrLdf918cDYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk Njc3YTFiMjEtN2VlNi00MTM0LTk4YWUtYjViZjdjOGQwMWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1DlME6hTPgycI8SRSI1QCcWotlhJRrmCDgZ o5YT5dLh9QOx0SiBsWxZqXptG8uqz/3KQNOxBNv3nlPjltdRnfXIBArinDFj4gM6 x2JikJQu6RDMr8X86rP8uJUfk+/fC5P42aqUZ2E9LqjyK8QxsvJ/i2Ig781eFbQU UWu+shO7EFq9j8hY/yEcZwHnoNaLL070Y4VeQGqPh/hKxrGBlEGtk6mwVnT53JAa wJMpPHEP1hGzNy4OX4lrFjiQAF58TrgP7NQH0Kg8OZdk4A8GhxEJmtfclfbPPVPB /l52tNSIsl4iTTWqnhAt0Vl3y5hwF/e/wfeY2bqWFDHLH0Y8cQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNzmYnP+OVkPE7JILfry5soPhjBOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODAxYjc4NWUtNjhhMi0z YjkzLTg3ZjQtNjE3MDFhMjIwYTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGYCObz2JLe/Zuem1zaQdkK9K7Z5qCDdjuzAxI1R2Zrb7tgPeTE4nXIX BXo9w2K72TEmaFbbZKj1ClwheCXUC29c5AiZA/jERjh3+zMrTmGmioeHKikdlQjk MRfZnd93+8HYeNHsCPqNFNmJpSPPSwXi+eCOBVijELiW40yoaIpeTWIUrZKrDL+r 1bzCyGnw6u428ohpzgJkUNks/4GbqkrRdCIAzT1Ok5PY4BnVZ6hFTGrk6ZOL/IO0 Gy1/99RBgseCaDNcmCcojg4sFzsrp+iw1ONyyaBy7RiuXhq3r3r7NW30Z3ruYOzt QJbD8vJk2UqON7tjS7vx01WXSbFbhow= -----END CERTIFICATE-----Generated at Sun Oct 26 10:03:31 2025 by rpki-client