$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa File: 237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa (raw, json) Hash identifier: DQKqVELJ9lCn4L2VygH2EZ57kYhTs6RGVmDY4Futr8A= Subject key identifier: 40:7E:35:EF:1D:32:FD:FF:6D:BF:38:7B:CF:41:74:F1:46:C1:30:5A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B12587F949301597C9680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:12:58:7f:94:93:01:59:7c:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b0d65a0c-87ca-4f25-acf0-a332128bae16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fb:c6:ab:02:e3:de:01:1c:5e:5c:a9:60:31: 67:70:92:5c:0c:d5:92:cf:32:5f:2e:57:11:8c:03: 3b:ec:29:ca:51:cb:ba:a2:be:16:9a:a3:e3:61:ac: b3:88:fd:bb:e4:05:5c:15:17:95:ec:bb:5c:6a:28: 14:62:c6:a5:c4:5e:da:11:93:a4:8c:2e:6b:a4:a3: 65:16:81:0d:5f:81:21:ec:ef:78:c5:f9:50:1d:d2: 14:e7:06:66:9c:0f:15:2e:95:34:d6:43:90:f8:e6: e2:6d:24:ec:58:83:5a:48:a8:60:b4:b8:ed:5a:fc: a4:08:f2:14:92:f4:43:ba:9e:3a:ec:06:f4:5e:2c: 97:9b:e7:12:80:02:31:a6:dc:0b:bf:e9:88:e8:ab: db:88:63:ee:a5:16:bd:7d:c3:1a:05:07:41:72:72: 4a:07:5f:54:d6:56:74:3e:bd:cd:6f:71:c9:ef:12: 99:d0:2c:b8:08:b4:5c:2c:7c:06:35:52:11:05:62: c8:18:51:0d:2a:40:b3:33:9c:2e:9e:94:53:d2:46: cd:fb:7c:8e:d4:1a:b2:30:0f:f3:92:59:69:d0:cb: 64:d0:84:09:68:2d:43:f2:df:95:cb:52:9b:34:d5: 5c:4b:a1:35:a2:38:a1:c1:23:f2:99:2d:df:f1:1c: e6:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:7E:35:EF:1D:32:FD:FF:6D:BF:38:7B:CF:41:74:F1:46:C1:30:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/237c1d0d-ca7b-31f9-a58b-7ac7af3c5fcb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:cf:da:61:36:f7:02:87:69:4f:4b:a8:54:3e:45:c0:07:e6: 8c:40:bf:1a:bf:bc:32:e1:10:4a:11:00:27:ad:3f:f4:ea:be: d1:58:34:c6:c8:40:f9:87:a7:90:dd:9d:ad:02:ed:c9:1c:82: fb:a1:07:46:7a:88:f7:e1:d3:e5:ed:23:0e:97:ba:e7:c9:76: a9:86:33:8c:2a:89:72:99:82:a5:1b:ee:24:18:c5:1a:bd:15: e2:60:c7:e8:70:65:e1:6e:01:9d:a1:8c:63:b9:ef:22:eb:1c: a3:bf:d4:a5:c1:41:75:7e:77:4c:ac:0f:97:46:09:8e:0e:6d: fa:d9:dd:12:b3:d6:e9:94:87:10:65:59:22:cc:82:4d:7f:69: 95:dd:99:76:a0:8d:5c:be:e5:fb:10:4a:e3:11:8b:bb:2e:7d: 94:ee:56:37:2c:e0:7b:97:13:c3:06:e6:dd:c7:f2:9e:4b:25: 7c:61:6a:63:98:6b:9d:c1:3b:ee:64:c6:a9:0b:28:6b:fe:39: 20:e1:5c:d6:79:ab:46:dc:b9:33:c3:ce:65:9f:c1:0e:7d:81: 69:03:50:7d:18:d5:75:d1:cd:54:51:8e:f6:aa:ce:2c:0c:92: b1:27:ed:2e:35:65:f1:a7:e7:03:0d:1a:dc:a2:25:79:0c:9a: 71:b3:ec:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JexJYf5STAVl8loAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjBkNjVhMGMtODdjYS00ZjI1LWFjZjAtYTMzMjEyOGJhZTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fvGqwLj3gEcXlypYDFncJJcDNWSzzJfLlcR jAM77CnKUcu6or4WmqPjYayziP275AVcFReV7LtcaigUYsalxF7aEZOkjC5rpKNl FoENX4Eh7O94xflQHdIU5wZmnA8VLpU01kOQ+ObibSTsWINaSKhgtLjtWvykCPIU kvRDup467Ab0XiyXm+cSgAIxptwLv+mI6KvbiGPupRa9fcMaBQdBcnJKB19U1lZ0 Pr3Nb3HJ7xKZ0Cy4CLRcLHwGNVIRBWLIGFENKkCzM5wunpRT0kbN+3yO1BqyMA/z kllp0Mtk0IQJaC1D8t+Vy1KbNNVcS6E1ojihwSPymS3f8RzmaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEB+Ne8dMv3/bb84e89BdPFGwTBaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM3YzFkMGQtY2E3Yi0z MWY5LWE1OGItN2FjN2FmM2M1ZmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3xMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADP2mE29wKHaU9LqFQ+RcAH5oxAvxq/vDLhEEoRACetP/TqvtFYNMbI QPmHp5Ddna0C7ckcgvuhB0Z6iPfh0+XtIw6XuufJdqmGM4wqiXKZgqUb7iQYxRq9 FeJgx+hwZeFuAZ2hjGO57yLrHKO/1KXBQXV+d0ysD5dGCY4ObfrZ3RKz1umUhxBl WSLMgk1/aZXdmXagjVy+5fsQSuMRi7sufZTuVjcs4HuXE8MG5t3H8p5LJXxhamOY a53BO+5kxqkLKGv+OSDhXNZ5q0bcuTPDzmWfwQ59gWkDUH0Y1XXRzVRRjvaqziwM krEn7S41ZfGn5wMNGtyiJXkMmnGz7LE= -----END CERTIFICATE-----Generated at Sun Sep 27 11:19:41 2026 by rpki-client