$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa File: 4ff9a155-2a75-33cb-a2a0-853e282a294b.roa (raw, json) Hash identifier: A0ZHg0ZbvPZgXT9KeiPC/phLE6amNzKKhq43Zwa8Fqw= Subject key identifier: DC:71:F0:B8:F2:4D:3D:B2:BD:11:1D:E6:A8:E3:6F:C0:A9:CD:F7:4D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B124D1C245CC9EEE27910 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.238.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:12:4d:1c:24:5c:c9:ee:e2:79:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4bea3a94-0565-4cef-b93e-2a30c7e15dd9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:13:12:58:f3:f4:4e:2b:91:55:fa:5b:28:5e: b9:40:f0:7c:51:93:ec:26:3c:06:94:9c:63:7b:1d: 41:1c:fc:7d:7c:4f:f6:47:48:14:51:04:fe:a2:f7: 23:af:7f:dd:36:a2:b3:05:7a:d0:c7:1f:c2:0b:ac: f6:d8:11:0d:2e:bd:f1:f1:26:f0:3d:b9:7b:ed:46: 56:e9:73:92:8a:cf:ad:d3:ad:0f:78:98:bb:5b:43: 18:36:c1:42:5f:37:f3:cc:03:39:53:b1:ab:e7:2a: 2e:ca:f7:86:6c:cc:a2:7c:84:6a:9f:4f:93:de:f8: a3:c3:c8:35:f8:e1:96:d2:e8:88:e8:76:dc:18:55: 00:d7:2b:84:3d:10:46:7a:8d:75:70:40:f1:0a:7f: 2b:27:c6:d9:23:f6:1f:8d:4b:b7:14:28:57:d8:11: 98:41:fd:cc:8a:ba:eb:0a:18:b5:3e:1d:f6:c7:3f: a6:20:e1:75:4a:29:26:0f:84:79:0f:d5:f7:50:59: 85:4c:9e:7b:cb:01:97:a3:0c:40:5a:65:97:a2:af: f4:b6:b1:5c:e3:a9:15:8b:c4:a1:3f:47:d5:f9:05: 88:93:fd:d2:b3:74:df:cd:ab:48:84:37:5e:ba:b5: 26:71:35:17:04:85:3d:1c:fd:13:20:03:ea:4f:7a: b2:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:71:F0:B8:F2:4D:3D:B2:BD:11:1D:E6:A8:E3:6F:C0:A9:CD:F7:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4ff9a155-2a75-33cb-a2a0-853e282a294b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.238.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:0b:55:4e:03:49:3d:a1:0a:0d:8a:c6:ee:6a:40:a9:fd:0b: ec:1a:34:c7:9b:6c:d2:69:dd:c2:e4:1c:1f:a9:22:0f:be:2e: 41:37:88:d0:f4:02:5d:7d:a2:08:db:c9:ff:fd:71:2e:06:ed: d6:33:d8:35:07:af:5e:ee:7e:d0:17:9a:be:85:08:3a:c5:ea: 82:68:50:bf:c9:df:35:7e:5d:30:8a:a2:b1:08:cc:94:69:96: d0:59:3a:ef:62:6c:82:8a:29:01:18:5e:b9:04:fd:8a:a9:fd: 45:08:53:e2:24:d3:d3:00:95:e4:e7:15:59:0c:98:55:92:7c: 3b:1c:67:a5:33:6b:5d:00:69:8e:58:4c:d8:97:d5:6e:e5:4e: cc:b1:90:3a:35:c4:7d:01:12:e9:37:b0:83:2c:2e:9c:cd:03: 4e:14:f6:80:ac:3a:ae:10:f3:78:54:7f:a0:05:47:04:59:23: 5d:b4:01:c4:0f:29:4b:54:e2:1d:0c:e0:17:05:14:75:9a:47: 3a:80:9c:ca:4d:32:4c:8e:82:e4:e7:a4:e2:66:24:5f:72:46: 06:1c:4c:2a:7d:dc:ce:55:b3:50:27:95:da:e4:96:6d:c4:dd: b3:da:bd:9a:1b:b6:85:75:88:0c:f5:5b:d3:55:9b:d4:54:d8: 3c:de:8c:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JexJNHCRcye7ieRAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGJlYTNhOTQtMDU2NS00Y2VmLWI5M2UtMmEzMGM3ZTE1ZGQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhMSWPP0TiuRVfpbKF65QPB8UZPsJjwGlJxj ex1BHPx9fE/2R0gUUQT+ovcjr3/dNqKzBXrQxx/CC6z22BENLr3x8SbwPbl77UZW 6XOSis+t060PeJi7W0MYNsFCXzfzzAM5U7Gr5youyveGbMyifIRqn0+T3vijw8g1 +OGW0uiI6HbcGFUA1yuEPRBGeo11cEDxCn8rJ8bZI/YfjUu3FChX2BGYQf3Mirrr Chi1Ph32xz+mIOF1SikmD4R5D9X3UFmFTJ57ywGXowxAWmWXoq/0trFc46kVi8Sh P0fV+QWIk/3Ss3TfzatIhDdeurUmcTUXBIU9HP0TIAPqT3qyMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNxx8LjyTT2yvREd5qjjb8CpzfdNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNGZmOWExNTUtMmE3NS0z M2NiLWEyYTAtODUzZTI4MmEyOTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3uMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACELVU4DST2hCg2Kxu5qQKn9C+waNMebbNJp3cLkHB+pIg++LkE3iND0 Al19ogjbyf/9cS4G7dYz2DUHr17uftAXmr6FCDrF6oJoUL/J3zV+XTCKorEIzJRp ltBZOu9ibIKKKQEYXrkE/Yqp/UUIU+Ik09MAleTnFVkMmFWSfDscZ6Uza10AaY5Y TNiX1W7lTsyxkDo1xH0BEuk3sIMsLpzNA04U9oCsOq4Q83hUf6AFRwRZI120AcQP KUtU4h0M4BcFFHWaRzqAnMpNMkyOguTnpOJmJF9yRgYcTCp93M5Vs1Anldrklm3E 3bPavZobtoV1iAz1W9NVm9RU2DzejDM= -----END CERTIFICATE-----Generated at Thu Oct 8 19:21:57 2026 by rpki-client