$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa File: 0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa (raw, json) Hash identifier: IgvWbXkNYPucrJlcHnxrULwvJ12ytWXzhZBPbPlJCpk= Subject key identifier: 30:A9:4B:97:34:13:56:DC:07:82:DC:3D:AE:20:8A:1C:A6:17:6D:92 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AFE83C2BF1193032A2880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:fe:83:c2:bf:11:93:03:2a:28:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9690d22-c0f3-48c4-89d0-04e5b432d5b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:f2:98:da:9c:a2:02:ef:2d:3a:d6:6e:a4:20: dc:5a:03:d7:1d:88:75:41:fd:d2:63:90:0c:5f:31: bf:1b:b5:44:b7:1f:36:a6:a7:0f:38:0f:5d:0b:fd: 7b:36:ce:33:30:df:8e:34:c0:34:2f:1c:28:c5:0e: c4:20:96:33:ae:df:ff:c1:e3:fa:da:41:4e:b6:af: 65:ed:c9:30:3f:72:22:12:8d:dd:ca:67:ff:f4:b3: c3:e2:73:8c:bb:ea:a4:18:27:28:6b:79:5d:72:d9: 7a:93:93:df:4b:8b:2f:ba:1e:a4:a8:5b:3d:79:fd: c6:41:18:88:6f:cc:67:a0:13:1b:22:7b:1a:b5:2e: 3b:53:e0:aa:9b:5e:7b:98:b3:38:0a:50:b8:ad:67: 97:94:ee:39:79:a3:03:aa:50:39:53:ca:26:7d:17: 32:88:ac:4e:03:e2:cc:5e:97:be:12:00:06:48:f8: 2c:32:d0:7f:8a:ee:46:d4:b2:62:36:04:2e:4e:81: d2:37:2a:bd:2c:ea:5e:86:3f:12:c0:d4:6c:3a:32: f9:63:65:f1:dc:03:aa:23:db:e2:1b:b8:dd:e8:57: 84:e7:47:dd:5f:91:6e:13:42:64:43:e9:c1:c4:37: a3:5d:cb:49:11:db:72:c5:90:50:6b:6c:78:53:d0: 94:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A9:4B:97:34:13:56:DC:07:82:DC:3D:AE:20:8A:1C:A6:17:6D:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0b6651e3-8bd9-30cf-b7f6-8b27f0ce5636.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cb:89:60:79:6d:69:03:bf:5e:6e:92:0d:2d:c1:42:96:b1:f7: d6:f8:f6:e8:e5:8c:22:e1:a3:24:db:dd:20:b6:04:61:8c:b3: f2:f1:d0:12:e3:c1:56:81:77:81:8e:34:88:de:56:e3:c1:ca: 9c:74:13:1c:90:bc:52:57:41:eb:0b:e3:7d:c2:a1:ec:5c:24: 37:93:e8:66:d6:e6:de:08:5b:ff:7e:9f:89:0b:1b:36:da:0a: 80:8a:3f:82:da:3d:e2:a2:50:c7:a1:1c:be:0d:8a:08:fd:32: dc:d8:a5:fb:b1:a0:90:72:19:ae:4d:5d:a1:ed:11:26:2e:69: 0e:a6:ae:5c:86:1b:3b:cf:22:68:bf:3c:23:09:6f:3f:fe:6e: 2a:c1:eb:3d:04:45:7d:cf:3f:32:52:09:ac:37:bd:80:9a:94: f4:b2:8d:17:6e:a8:4e:86:1c:53:17:f9:12:18:b6:ec:ab:03: 5f:be:d1:29:7f:28:ee:56:e3:aa:8a:7b:5a:d3:8f:53:fa:17: 3a:15:84:62:11:32:7a:1c:d5:46:b1:ff:05:42:a2:c2:2e:5f: 84:b5:6a:24:1c:fe:be:b7:16:0e:be:5d:f4:99:d9:aa:74:fd: 5f:4c:c0:6b:a4:a2:1b:4b:f6:89:23:38:a8:89:26:96:89:ba: 61:2a:8c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jev6Dwr8RkwMqKIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yzk2OTBkMjItYzBmMy00OGM0LTg5ZDAtMDRlNWI0MzJkNWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj/KY2pyiAu8tOtZupCDcWgPXHYh1Qf3SY5AM XzG/G7VEtx82pqcPOA9dC/17Ns4zMN+ONMA0LxwoxQ7EIJYzrt//weP62kFOtq9l 7ckwP3IiEo3dymf/9LPD4nOMu+qkGCcoa3ldctl6k5PfS4svuh6kqFs9ef3GQRiI b8xnoBMbInsatS47U+Cqm157mLM4ClC4rWeXlO45eaMDqlA5U8omfRcyiKxOA+LM Xpe+EgAGSPgsMtB/iu5G1LJiNgQuToHSNyq9LOpehj8SwNRsOjL5Y2Xx3AOqI9vi G7jd6FeE50fdX5FuE0JkQ+nBxDejXctJEdtyxZBQa2x4U9CUiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCpS5c0E1bcB4LcPa4gihymF22SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGI2NjUxZTMtOGJkOS0z MGNmLWI3ZjYtOGIyN2YwY2U1NjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0EMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMuJYHltaQO/Xm6SDS3BQpax99b49ujljCLhoyTb3SC2BGGMs/Lx0BLj wVaBd4GONIjeVuPBypx0ExyQvFJXQesL433CoexcJDeT6GbW5t4IW/9+n4kLGzba CoCKP4LaPeKiUMehHL4Nigj9MtzYpfuxoJByGa5NXaHtESYuaQ6mrlyGGzvPImi/ PCMJbz/+birB6z0ERX3PPzJSCaw3vYCalPSyjRduqE6GHFMX+RIYtuyrA1++0Sl/ KO5W46qKe1rTj1P6FzoVhGIRMnoc1Uax/wVCosIuX4S1aiQc/r63Fg6+XfSZ2ap0 /V9MwGukohtL9okjOKiJJpaJumEqjJc= -----END CERTIFICATE-----Generated at Thu Oct 8 11:55:40 2026 by rpki-client