$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa File: 2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa (raw, json) Hash identifier: 9PQg+TFZv7pkWp0Np5fsF5n+czbRni1FU5fWFgFJ/eY= Subject key identifier: D3:4D:D0:F6:21:CB:55:B5:20:4B:7B:E3:35:3C:CD:43:08:DB:38:F1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498328DB3C8B806AA6ADE780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.88.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:28:db:3c:8b:80:6a:a6:ad:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b86a2d3e-2835-4a1d-a3dd-007a9cfe37ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:db:ac:3a:4a:e3:e0:58:d7:b2:15:f8:e5:31: 67:00:37:6e:4b:f5:53:6e:a7:71:9d:d5:eb:0e:6a: 6e:67:88:74:fe:f4:03:18:f7:47:3d:63:bf:2a:3e: ee:62:cc:87:7b:0b:fa:76:8c:72:b9:87:68:29:81: 61:6b:9d:3c:7c:73:90:b6:5c:4e:16:33:3e:57:55: 88:f4:45:7a:5c:2d:a4:e3:61:f2:8a:f1:b1:75:af: 8c:95:1a:cf:77:c3:cc:08:a4:a0:b8:8d:28:c4:30: d5:c1:30:14:03:ca:b6:ac:83:fb:98:78:a9:39:4d: f9:85:8a:16:b2:f1:80:f5:5e:d8:9a:4b:30:fa:45: 75:dc:59:d8:3d:87:d0:12:5e:c4:bf:7e:78:dd:c5: 3d:df:d0:47:37:df:73:a8:f7:70:e3:74:da:4e:bf: 26:d6:2e:db:d6:5d:f3:1a:f5:18:97:33:f9:59:67: e8:a7:83:06:b0:92:e4:6e:7f:3f:8d:fe:8a:43:1c: b4:df:38:4a:93:8e:ba:85:48:21:bb:36:17:e0:cb: 5f:52:f8:3e:87:6d:bc:9f:0b:64:de:27:23:32:7d: c9:6f:7c:da:3a:d3:b4:3a:bb:17:b9:ba:ec:e3:90: 8b:3b:21:6a:19:bd:98:fa:b5:6a:94:91:ba:78:9d: 9c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:4D:D0:F6:21:CB:55:B5:20:4B:7B:E3:35:3C:CD:43:08:DB:38:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ddbd044-d13c-3ce2-ad22-3cb285d68a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.88.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ad:50:5f:cb:da:c4:fe:c7:32:4f:7e:88:7e:71:9b:2e:6f: 7b:70:74:b6:8e:c6:c7:fd:fa:ff:55:ba:31:c4:35:b3:a7:cd: aa:c2:df:4c:d7:05:87:c8:80:83:65:d7:4d:dd:95:f5:b5:98: 98:87:8a:3a:14:e4:2b:aa:d5:ce:0b:21:c7:44:0a:dd:b2:e3: df:81:36:88:05:8c:63:88:9b:58:9c:37:c9:ad:3f:41:09:6f: 74:8f:ed:da:39:c4:f0:76:ca:14:ea:85:cb:a4:a9:74:30:b0: ee:dd:95:df:92:bf:ce:5a:bd:05:5d:4e:30:97:e3:fd:2b:81: ec:9c:40:cc:a4:ed:fc:d9:7e:0b:34:78:1a:12:e2:25:50:d5: e3:03:35:ea:29:4f:82:a1:90:52:87:d3:06:1e:9a:ff:be:95: 67:12:f6:fa:98:5a:49:27:d9:5d:31:1c:4c:68:62:8c:ab:f7: c8:b4:06:a6:07:69:85:f4:a4:55:4b:5a:b9:8e:84:51:d4:f7: 76:a1:a0:85:5c:a2:a3:84:35:5a:44:2a:98:56:23:cd:12:ad: 81:8a:c8:a2:e5:18:99:cb:e1:8a:50:93:ae:22:2f:17:71:14: 3f:26:2d:d2:eb:06:42:90:39:b8:4e:6e:1e:86:01:d1:62:7d: a8:ee:36:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyjbPIuAaqat54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Yjg2YTJkM2UtMjgzNS00YTFkLWEzZGQtMDA3YTljZmUzN2JhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdusOkrj4FjXshX45TFnADduS/VTbqdxndXr DmpuZ4h0/vQDGPdHPWO/Kj7uYsyHewv6doxyuYdoKYFha508fHOQtlxOFjM+V1WI 9EV6XC2k42HyivGxda+MlRrPd8PMCKSguI0oxDDVwTAUA8q2rIP7mHipOU35hYoW svGA9V7Ymksw+kV13FnYPYfQEl7Ev3543cU939BHN99zqPdw43TaTr8m1i7b1l3z GvUYlzP5WWfop4MGsJLkbn8/jf6KQxy03zhKk466hUghuzYX4MtfUvg+h228nwtk 3icjMn3Jb3zaOtO0OrsXubrs45CLOyFqGb2Y+rVqlJG6eJ2chQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNNN0PYhy1W1IEt74zU8zUMI2zjxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmRkYmQwNDQtZDEzYy0z Y2UyLWFkMjItM2NiMjg1ZDY4YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1YMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAButUF/L2sT+xzJPfoh+cZsub3twdLaOxsf9+v9VujHENbOnzarC30zX BYfIgINl103dlfW1mJiHijoU5Cuq1c4LIcdECt2y49+BNogFjGOIm1icN8mtP0EJ b3SP7do5xPB2yhTqhcukqXQwsO7dld+Sv85avQVdTjCX4/0rgeycQMyk7fzZfgs0 eBoS4iVQ1eMDNeopT4KhkFKH0wYemv++lWcS9vqYWkkn2V0xHExoYoyr98i0BqYH aYX0pFVLWrmOhFHU93ahoIVcoqOENVpEKphWI80SrYGKyKLlGJnL4YpQk64iLxdx FD8mLdLrBkKQObhObh6GAdFifajuNkc= -----END CERTIFICATE-----Generated at Sun Sep 27 12:31:12 2026 by rpki-client