$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/499ced6b-eb87-35ad-9374-57894bc8a3b5.roa File: 499ced6b-eb87-35ad-9374-57894bc8a3b5.roa (raw, json) Hash identifier: d2uIMjLwUhLjuRzFZ2gV/MC3qIvRXaSg0wHOKrl+z5M= Subject key identifier: 42:33:B5:02:9A:96:BA:AD:37:22:33:F1:2C:0F:CF:21:47:88:9D:7C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983B54B5DF67404889EC2A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/499ced6b-eb87-35ad-9374-57894bc8a3b5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:b5:4b:5d:f6:74:04:88:9e:c2:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5f2f6a39-40d1-4bf7-84e8-477c18e650c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:7c:d2:de:b1:3a:99:01:e4:df:10:37:6e:7e: 29:d4:3d:02:57:fc:7b:59:d7:fa:09:34:07:4a:20: 30:9b:32:41:bb:67:89:41:2a:bf:11:bb:ed:16:f1: 5e:0d:78:c1:6d:bc:d6:9e:83:85:6e:6f:e3:c6:0e: b4:f4:d8:e4:a2:44:a3:35:56:29:62:22:d5:c0:f2: 56:81:0e:fb:50:3d:37:08:dd:7a:67:f7:c1:e4:cd: bf:3f:29:df:7d:00:83:10:62:27:21:bd:4e:7a:9d: ca:b6:c1:8c:21:22:25:96:12:52:9a:89:40:2d:7f: d3:bd:a1:21:82:a6:18:49:e5:5d:9a:39:f0:39:c1: 5e:63:75:ed:d7:8e:d1:c5:7c:b0:cd:50:88:7d:56: 4d:7c:d0:8e:f4:d4:e4:6f:5b:d3:ca:2b:15:43:63: c1:ef:21:8c:91:b4:ef:5a:3f:98:bf:b0:2c:0f:b6: fe:13:f5:e5:6e:1d:bf:18:19:93:08:c4:b2:90:5e: 3e:33:52:a5:85:55:f3:4f:26:a1:0d:ff:7b:94:b6: 15:3b:3e:49:ff:8d:4c:f9:c2:2b:9d:bd:32:c0:88: 87:67:23:1a:43:97:19:0d:cc:22:0a:2b:c2:c8:db: 28:f1:f1:fb:4f:ce:f0:dd:b8:e3:30:3c:0a:8a:be: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:33:B5:02:9A:96:BA:AD:37:22:33:F1:2C:0F:CF:21:47:88:9D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/499ced6b-eb87-35ad-9374-57894bc8a3b5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:b6:85:ed:99:7a:28:14:34:f6:7e:97:fd:39:29:be:a6:dd: 53:f8:a2:76:9c:7d:4e:69:9a:83:1f:a4:61:dd:0e:b7:cf:60: a6:9c:01:ed:d4:0b:d6:28:76:58:ce:c0:45:07:18:2f:6e:5d: 75:c1:d6:ad:75:96:87:52:9f:90:ba:29:3e:ce:11:15:0f:c4: bb:5a:99:66:8c:2a:56:47:14:34:e4:79:22:c2:72:79:22:97: bd:cc:92:68:cc:63:6b:a9:13:37:1a:85:b8:16:21:2e:b1:15: d1:d9:77:eb:3d:61:aa:49:84:e5:88:85:20:c6:dd:6b:ab:bc: 74:70:b7:5a:bd:35:0d:64:5a:0d:ff:db:13:bf:d9:0e:ed:c6: 0a:8c:58:b5:b3:45:d8:43:b1:a5:55:db:a4:5f:19:1d:3e:e9: 4e:63:3d:48:a1:10:68:e9:b0:a8:76:a5:fe:61:7c:aa:60:60: 37:72:bd:9c:25:e8:0e:e5:6b:63:e8:07:9e:53:08:51:29:ec: f8:d6:a7:8f:60:f9:a5:a2:7e:29:47:a0:69:ed:e1:9c:fc:74: 09:be:9b:75:91:bf:fd:05:b1:77:87:05:b6:0f:da:60:e1:1c: c0:dc:0e:fd:e4:72:b4:06:c3:e4:3a:94:b3:da:d1:51:1f:4b: 50:95:1c:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg7VLXfZ0BIiewqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWYyZjZhMzktNDBkMS00YmY3LTg0ZTgtNDc3YzE4ZTY1MGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1XzS3rE6mQHk3xA3bn4p1D0CV/x7Wdf6CTQH SiAwmzJBu2eJQSq/EbvtFvFeDXjBbbzWnoOFbm/jxg609NjkokSjNVYpYiLVwPJW gQ77UD03CN16Z/fB5M2/PynffQCDEGInIb1Oep3KtsGMISIllhJSmolALX/TvaEh gqYYSeVdmjnwOcFeY3Xt147RxXywzVCIfVZNfNCO9NTkb1vTyisVQ2PB7yGMkbTv Wj+Yv7AsD7b+E/Xlbh2/GBmTCMSykF4+M1KlhVXzTyahDf97lLYVOz5J/41M+cIr nb0ywIiHZyMaQ5cZDcwiCivCyNso8fH7T87w3bjjMDwKir4zewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIztQKalrqtNyIz8SwPzyFHiJ18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDk5Y2VkNmItZWI4Ny0z NWFkLTkzNzQtNTc4OTRiYzhhM2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokgYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMq2he2ZeigUNPZ+l/05Kb6m3VP4onacfU5pmoMfpGHdDrfPYKacAe3U C9YodljOwEUHGC9uXXXB1q11lodSn5C6KT7OERUPxLtamWaMKlZHFDTkeSLCcnki l73MkmjMY2upEzcahbgWIS6xFdHZd+s9YapJhOWIhSDG3WurvHRwt1q9NQ1kWg3/ 2xO/2Q7txgqMWLWzRdhDsaVV26RfGR0+6U5jPUihEGjpsKh2pf5hfKpgYDdyvZwl 6A7la2PoB55TCFEp7PjWp49g+aWifilHoGnt4Zz8dAm+m3WRv/0FsXeHBbYP2mDh HMDcDv3kcrQGw+Q6lLPa0VEfS1CVHI8= -----END CERTIFICATE-----Generated at Sun Oct 4 18:30:09 2026 by rpki-client