$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa File: 38432c1c-cf0c-3467-9f51-62e4ba11f084.roa (raw, json) Hash identifier: YdFbgMbGV8dNUyOmGUzy/oYesJAu2V6hLboTSRZITTI= Subject key identifier: 44:47:16:9F:3B:1B:10:9D:D4:7A:55:AC:C5:C4:B6:15:3C:34:C2:49 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0FA9ABA270AD775DA400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0f:a9:ab:a2:70:ad:77:5d:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=98489257-0488-4222-89e3-5538f97bf584 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:f8:d6:7b:26:39:1d:3a:00:26:f7:b2:87:bd: e1:4c:9d:d4:a5:97:f9:d3:39:cd:a2:4b:85:03:9f: 73:1b:54:8c:8f:d8:10:e0:15:7b:d1:46:a9:d8:c7: cb:8b:d8:44:49:ce:00:20:e1:c8:76:2a:21:d1:aa: e4:e4:f7:ae:d8:04:c0:1d:d1:a7:5e:79:7b:4b:8c: e2:8a:cc:60:89:a2:3c:57:c7:aa:36:f5:35:f5:18: 63:d4:a8:9c:04:25:41:c4:99:80:f8:40:de:76:a6: ee:6b:1a:c7:c1:9e:06:27:f8:58:7d:24:ad:72:79: 4b:b1:fe:ec:2a:e6:ab:fb:83:37:57:c3:da:46:f4: 17:6d:d3:a2:4d:bf:96:d9:16:00:25:7e:c9:d5:30: 77:3b:89:26:61:97:29:1d:8b:35:15:ae:8d:20:16: 85:af:85:f6:33:83:18:20:7e:e4:38:b7:b3:69:2e: 9b:7a:79:48:81:fc:d3:83:27:b7:78:a2:60:ea:7f: f2:1a:c7:68:5e:16:7e:55:12:4c:62:32:32:a2:c9: 10:27:ab:66:00:a4:2a:a9:4b:5c:d1:7c:9d:da:24: 7b:e9:d8:b2:ff:76:b8:d0:24:44:e1:65:98:34:0c: b4:a6:15:09:cb:56:b7:bb:c5:08:cf:9c:af:47:38: 59:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:47:16:9F:3B:1B:10:9D:D4:7A:55:AC:C5:C4:B6:15:3C:34:C2:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/38432c1c-cf0c-3467-9f51-62e4ba11f084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:76:f6:49:68:25:00:4e:84:da:6b:5d:40:2c:2f:b2:de:63: 69:c8:7f:4a:1a:bd:95:9a:31:c3:45:65:6d:7d:23:60:8f:9f: 08:da:ea:ef:13:4a:09:34:fd:b5:ea:73:3a:ec:d2:6e:4c:9c: d7:7c:59:88:3e:88:26:1a:94:df:55:4f:d1:d2:a8:58:55:17: ee:ee:d6:83:2d:18:e7:31:3e:1e:89:40:19:87:b7:8d:af:60: dd:52:df:df:c0:a5:33:3f:58:b3:b7:5d:7b:cc:73:ee:78:81: de:25:ee:c4:10:18:30:11:ff:49:ae:39:50:ee:69:12:9f:2a: 08:1c:67:44:72:a4:ba:5a:a4:23:e6:b8:51:64:61:e1:aa:95: 19:08:02:ad:23:10:b8:45:87:a1:40:59:0d:00:ac:4e:2f:dc: 77:cc:dc:70:d8:b3:b0:f5:84:fb:5b:40:c5:35:c5:c2:3d:6f: 27:1a:bb:d6:c4:9f:00:c8:34:c1:e4:68:95:19:d3:da:0e:a4: 44:37:b7:ea:5e:3f:29:24:51:5e:fc:13:e9:e0:fc:90:4d:02: a1:95:44:e5:61:24:02:c7:70:58:1a:e1:ac:7d:68:bf:0b:f7: bf:52:df:09:c4:51:f7:7f:bc:26:be:6c:41:e5:3f:07:18:fb: 4b:0c:ef:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jew+pq6JwrXddpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTg0ODkyNTctMDQ4OC00MjIyLTg5ZTMtNTUzOGY5N2JmNTg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7PjWeyY5HToAJveyh73hTJ3UpZf50znNokuF A59zG1SMj9gQ4BV70Uap2MfLi9hESc4AIOHIdioh0ark5Peu2ATAHdGnXnl7S4zi isxgiaI8V8eqNvU19Rhj1KicBCVBxJmA+EDedqbuaxrHwZ4GJ/hYfSStcnlLsf7s Kuar+4M3V8PaRvQXbdOiTb+W2RYAJX7J1TB3O4kmYZcpHYs1Fa6NIBaFr4X2M4MY IH7kOLezaS6benlIgfzTgye3eKJg6n/yGsdoXhZ+VRJMYjIyoskQJ6tmAKQqqUtc 0Xyd2iR76diy/3a40CRE4WWYNAy0phUJy1a3u8UIz5yvRzhZGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERHFp87GxCd1HpVrMXEthU8NMJJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzg0MzJjMWMtY2YwYy0z NDY3LTlmNTEtNjJlNGJhMTFmMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3NMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB29kloJQBOhNprXUAsL7LeY2nIf0oavZWaMcNFZW19I2CPnwja6u8T Sgk0/bXqczrs0m5MnNd8WYg+iCYalN9VT9HSqFhVF+7u1oMtGOcxPh6JQBmHt42v YN1S39/ApTM/WLO3XXvMc+54gd4l7sQQGDAR/0muOVDuaRKfKggcZ0RypLpapCPm uFFkYeGqlRkIAq0jELhFh6FAWQ0ArE4v3HfM3HDYs7D1hPtbQMU1xcI9bycau9bE nwDINMHkaJUZ09oOpEQ3t+pePykkUV78E+ng/JBNAqGVROVhJALHcFga4ax9aL8L 979S3wnEUfd/vCa+bEHlPwcY+0sM7/4= -----END CERTIFICATE-----Generated at Tue Oct 6 23:26:38 2026 by rpki-client