$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa File: d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa (raw, json) Hash identifier: p6eFDi0t9ieDjgf+iX1RjmxQx+QH0LYkPRClc3Wg+RI= Subject key identifier: 3A:4D:D3:4C:EA:C9:B4:EE:76:DC:00:70:91:2F:76:F3:4D:38:78:DC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584B64CCDA42B0ABDFCDD65F7E80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa Signing time: Fri 03 Oct 2025 01:00:32 +0000 ROA not before: Fri 03 Oct 2025 01:00:32 +0000 ROA not after: Thu 01 Jan 2026 02:00:32 +0000 asID: 7155 IP address blocks: 72.173.188.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:64:cc:da:42:b0:ab:df:cd:d6:5f:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Oct 3 01:00:32 2025 GMT Not After : Jan 1 02:00:32 2026 GMT Subject: CN=7f5e231f-8236-4b8c-b770-4f3d84cbffde Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:98:ca:c8:ac:4a:7d:38:3f:92:0a:b2:3d:84: 71:a6:3d:84:6e:2b:ab:08:04:19:f7:a0:73:bc:54: 9a:d9:14:31:6d:3d:f4:f6:e7:5b:25:c1:dd:96:df: c2:57:cf:19:6c:32:6a:a6:59:f5:a2:ea:30:d5:ad: da:1f:c4:43:ae:61:ec:80:6f:0c:2a:78:17:53:31: 2f:84:da:ca:50:39:4c:23:2e:44:6f:16:66:ad:07: 6e:89:a4:35:ae:69:25:6f:00:0f:f8:a9:06:f1:77: bb:76:a7:fa:8e:df:a0:1e:92:75:b8:db:25:2c:d2: 75:a6:c0:68:cd:53:0e:a2:0a:1a:e1:2b:4c:15:5e: 4c:c5:bf:59:28:27:fb:a6:d2:49:9a:93:0f:b2:9a: 84:41:41:33:15:06:84:24:64:ff:ff:12:f6:e5:84: 39:56:08:fd:14:cf:65:b1:11:ec:9f:07:00:f7:18: bf:eb:34:b2:ed:be:31:ce:b3:84:89:11:df:b0:af: 9f:d0:05:b8:ed:d8:90:1d:3b:51:ac:30:d0:e0:86: b0:fc:25:91:91:b1:70:b4:85:57:d9:89:76:f6:37: 61:50:60:20:6c:11:f1:ba:8d:0f:3a:28:0f:6b:6f: 39:8c:15:fc:a8:58:93:66:b3:cf:9f:a0:26:d0:cc: 0c:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:4D:D3:4C:EA:C9:B4:EE:76:DC:00:70:91:2F:76:F3:4D:38:78:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d3fcbddc-bf9d-320f-9d65-9a1ec060efab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.188.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:fc:0d:05:92:29:8b:c2:43:a9:8b:bb:8a:f0:24:f3:70:d7: 5d:de:e8:fb:f8:7e:22:e4:40:4e:da:e7:bb:01:5e:fd:79:89: de:81:cc:30:c9:ac:bb:7f:55:6b:70:9a:b6:05:9c:08:d6:2d: d4:7d:a2:0a:a1:08:f0:c7:ad:be:78:28:c5:c5:9c:85:b4:2a: 72:3c:2c:cf:f9:e7:d5:19:b9:7a:ef:4e:8f:0f:e9:73:cb:99: c3:91:79:4d:70:10:ba:73:00:31:43:f7:48:08:e3:26:fa:79: b2:2f:8d:b6:40:be:bb:b2:a1:93:3b:33:ee:2e:1f:07:27:3d: 8a:e7:fc:1a:39:82:1e:3d:0d:7b:da:8e:01:dd:25:f0:f1:2e: 9c:7f:92:f8:9c:c9:1a:e8:9b:3e:ed:5a:52:c9:a6:49:d9:f0: 13:39:cb:49:7a:16:7c:b5:6e:ef:1c:80:0e:c0:b1:6c:dc:fa: 29:76:c9:5a:3d:05:46:87:3e:55:cb:41:8a:86:a3:ed:f7:93: 14:be:98:29:91:8b:66:66:d3:20:50:bb:9b:d3:d1:ea:f9:1b: d4:2a:82:1b:67:7e:bb:62:01:d5:68:a6:5e:51:3e:e1:3c:fa: 82:af:92:2e:b3:06:1a:c0:8c:c9:9a:e3:24:58:08:d7:93:b6: ff:6f:a9:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtkzNpCsKvfzdZffoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI1MTAwMzAxMDAzMloXDTI2MDEwMTAyMDAzMlowLzEtMCsGA1UEAxMk N2Y1ZTIzMWYtODIzNi00YjhjLWI3NzAtNGYzZDg0Y2JmZmRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpjKyKxKfTg/kgqyPYRxpj2EbiurCAQZ96Bz vFSa2RQxbT309udbJcHdlt/CV88ZbDJqpln1ouow1a3aH8RDrmHsgG8MKngXUzEv hNrKUDlMIy5EbxZmrQduiaQ1rmklbwAP+KkG8Xe7dqf6jt+gHpJ1uNslLNJ1psBo zVMOogoa4StMFV5Mxb9ZKCf7ptJJmpMPspqEQUEzFQaEJGT//xL25YQ5Vgj9FM9l sRHsnwcA9xi/6zSy7b4xzrOEiRHfsK+f0AW47diQHTtRrDDQ4Iaw/CWRkbFwtIVX 2Yl29jdhUGAgbBHxuo0POigPa285jBX8qFiTZrPPn6Am0MwM5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpN00zqybTudtwAcJEvdvNNOHjcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDNmY2JkZGMtYmY5ZC0z MjBmLTlkNjUtOWExZWMwNjBlZmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABH8DQWSKYvCQ6mLu4rwJPNw113e6Pv4fiLkQE7a57sBXv15id6BzDDJ rLt/VWtwmrYFnAjWLdR9ogqhCPDHrb54KMXFnIW0KnI8LM/559UZuXrvTo8P6XPL mcOReU1wELpzADFD90gI4yb6ebIvjbZAvruyoZM7M+4uHwcnPYrn/Bo5gh49DXva jgHdJfDxLpx/kvicyRromz7tWlLJpknZ8BM5y0l6Fny1bu8cgA7AsWzc+il2yVo9 BUaHPlXLQYqGo+33kxS+mCmRi2Zm0yBQu5vT0er5G9QqghtnfrtiAdVopl5RPuE8 +oKvki6zBhrAjMma4yRYCNeTtv9vqcI= -----END CERTIFICATE-----Generated at Sun Oct 26 12:04:10 2025 by rpki-client