$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa File: 57b2d317-a413-3065-a331-165b9348609d.roa (raw, json) Hash identifier: pcoLZXbPLgdrQjMB6T66KtpMj/4GgHAW0wDxnQMyCeI= Subject key identifier: CA:F4:D7:04:78:7E:71:93:30:85:F1:3A:B1:73:F3:5F:E4:9F:D6:B1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79EF2C3B373D4BD2368E980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 40306 IP address blocks: 72.173.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:f2:c3:b3:73:d4:bd:23:68:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=0dc51995-e34c-4e9e-adff-a5c8ed66865d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:90:1e:d2:03:2e:5e:fb:61:a2:af:31:08:4e: 80:ce:55:c2:63:31:48:60:c2:63:e8:03:62:aa:77: 2e:26:a1:07:59:58:28:e3:dd:bb:e2:b5:f8:ca:14: ba:d9:45:48:60:dc:06:0c:db:c1:40:cb:5c:31:77: 1a:12:de:7b:bf:04:28:80:b1:6c:bc:46:22:76:18: e3:30:8f:e4:36:dd:70:8b:da:f8:2d:24:bf:a9:45: df:09:19:5f:73:c6:69:0f:b3:af:f8:89:0f:af:b2: 4b:e5:34:02:e8:4b:0a:65:7a:f7:8b:b2:a2:e2:0a: 46:e5:d2:54:6d:91:1c:9d:9d:c3:20:40:3d:d0:86: f2:5e:fe:d4:31:e9:1c:fe:e1:f4:3c:c8:d4:6d:7a: 9f:1b:cf:2c:75:6f:4b:fb:be:5b:b7:f4:2b:67:bb: 5d:42:b3:14:19:c5:18:bd:10:bd:1a:a2:e0:81:91: 76:68:70:d6:64:cb:e0:41:55:61:cd:4b:bb:33:06: fa:6a:fc:49:e2:d3:de:5e:db:f7:87:90:6c:70:52: 33:ff:a7:f0:cc:90:e6:58:dd:1a:05:c5:73:36:1a: 6f:e0:89:98:7b:00:58:0f:70:71:9c:6d:a5:d3:8c: 7d:c9:0e:a2:c7:46:aa:d6:c6:f2:8c:1e:53:bf:cf: 3f:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F4:D7:04:78:7E:71:93:30:85:F1:3A:B1:73:F3:5F:E4:9F:D6:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/57b2d317-a413-3065-a331-165b9348609d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 61:ac:32:78:40:5b:d8:0b:b2:cd:cb:9a:6d:70:01:86:3d:d3: 1b:cb:0e:cf:0f:e6:26:ad:77:8b:22:4c:af:97:c9:ee:83:eb: 03:3a:70:9b:81:0c:1f:0e:5e:e5:5b:57:77:c1:70:a9:09:90: d1:70:24:23:c3:ba:7d:12:97:9b:89:6e:2d:a3:21:cc:f2:a3: f9:84:7c:65:f4:dd:ce:d6:3b:c0:2f:c4:6a:11:28:b8:b3:27: 59:68:5a:ed:ab:82:26:f0:5f:8a:03:24:0f:10:f6:77:9c:e8: cd:b8:1e:4d:27:53:46:e5:ff:e8:34:2f:83:b1:f3:70:69:8b: 96:bf:74:6f:ae:00:75:37:15:43:e9:77:46:f6:1f:13:0a:f8: 85:cc:2e:f6:a8:49:af:40:06:aa:b7:a2:40:62:02:24:25:29: be:a5:5b:df:ad:3f:a3:10:2d:1b:71:32:19:78:5c:a9:88:a7: 0a:c7:e7:1c:79:e6:a3:b4:23:a3:ea:70:9d:f1:72:bc:c8:74: 56:40:a7:6a:1e:88:db:7c:92:bc:6e:f9:05:a7:9f:8c:35:d6: 8a:66:67:8d:14:17:ed:87:6a:b7:f6:63:42:7b:ad:78:c4:b2: 12:44:f1:76:41:56:89:f0:d6:15:21:88:44:ed:7e:8e:3c:08: 1c:d7:fe:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnvLDs3PUvSNo6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MGRjNTE5OTUtZTM0Yy00ZTllLWFkZmYtYTVjOGVkNjY4NjVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAspAe0gMuXvthoq8xCE6AzlXCYzFIYMJj6ANi qncuJqEHWVgo49274rX4yhS62UVIYNwGDNvBQMtcMXcaEt57vwQogLFsvEYidhjj MI/kNt1wi9r4LSS/qUXfCRlfc8ZpD7Ov+IkPr7JL5TQC6EsKZXr3i7Ki4gpG5dJU bZEcnZ3DIEA90IbyXv7UMekc/uH0PMjUbXqfG88sdW9L+75bt/QrZ7tdQrMUGcUY vRC9GqLggZF2aHDWZMvgQVVhzUu7Mwb6avxJ4tPeXtv3h5BscFIz/6fwzJDmWN0a BcVzNhpv4ImYewBYD3BxnG2l04x9yQ6ix0aq1sbyjB5Tv88/SQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMr01wR4fnGTMIXxOrFz81/kn9axMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTdiMmQzMTctYTQxMy0z MDY1LWEzMzEtMTY1YjkzNDg2MDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGGsMnhAW9gLss3Lmm1wAYY90xvLDs8P5iatd4siTK+Xye6D6wM6cJuB DB8OXuVbV3fBcKkJkNFwJCPDun0Sl5uJbi2jIczyo/mEfGX03c7WO8AvxGoRKLiz J1loWu2rgibwX4oDJA8Q9nec6M24Hk0nU0bl/+g0L4Ox83Bpi5a/dG+uAHU3FUPp d0b2HxMK+IXMLvaoSa9ABqq3okBiAiQlKb6lW9+tP6MQLRtxMhl4XKmIpwrH5xx5 5qO0I6PqcJ3xcrzIdFZAp2oeiNt8krxu+QWnn4w11opmZ40UF+2Harf2Y0J7rXjE shJE8XZBVonw1hUhiETtfo48CBzX/jQ= -----END CERTIFICATE-----Generated at Wed Jul 29 08:00:22 2026 by rpki-client