$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa File: 5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa (raw, json) Hash identifier: YXvaSFF/3wWiTKbadm2a0jsLAYk/QmDHP+doNUfP9HU= Subject key identifier: A0:A3:11:3B:D0:FA:EC:39:1E:69:08:F6:A0:D2:DB:BB:CD:D7:4B:65 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79F12EFD7DEE47E350B1980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9f:12:ef:d7:de:e4:7e:35:0b:19:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=eb227734-3a6a-4c87-b447-8bd0c2fd4058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:5b:1a:89:a3:4f:40:50:16:0e:9b:f6:53:e8: d2:f0:33:84:63:ed:ca:d7:5a:45:a5:3e:99:9a:f0: 66:a3:9d:2e:20:78:41:62:1c:61:d6:b0:c8:bf:ec: 8d:e8:35:dc:13:d4:3d:f9:c2:71:56:b1:4f:da:32: 1d:f1:52:2a:87:09:3f:05:05:07:0f:9b:88:4e:40: f7:d7:d8:42:36:8d:cd:3a:c3:50:35:25:14:08:69: 77:fe:9b:ff:05:51:df:66:7d:85:29:fc:b6:d3:f6: 84:34:77:3f:3f:18:97:2f:a9:37:18:b5:93:38:59: 20:6e:0d:b8:2f:70:6f:69:81:de:27:78:2b:a4:8b: 15:22:43:ce:bc:57:27:7f:9c:12:1c:79:dd:0e:e0: 96:55:bd:14:c6:62:ed:15:5d:31:93:1f:a8:7f:68: 54:59:64:36:4b:c6:bd:d0:88:34:85:3d:ca:89:79: e5:55:de:5f:6a:90:22:83:dd:eb:f7:5b:6f:4c:51: 5d:65:0c:c4:1b:70:97:10:89:3f:7b:e1:6d:92:d9: 78:8b:07:6a:5d:61:50:9d:3f:c2:f2:a4:58:94:24: 5b:43:78:6d:d4:96:c7:67:b9:a1:ca:40:93:44:30: 5d:64:0d:33:aa:e1:af:f3:3d:c1:fd:b6:80:8d:c3: ba:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:A3:11:3B:D0:FA:EC:39:1E:69:08:F6:A0:D2:DB:BB:CD:D7:4B:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ae:e3:54:b0:06:85:7e:8a:03:48:ca:68:77:06:0c:4e:63: 67:24:ac:f2:32:64:aa:a3:5b:9d:8f:e5:a5:3e:ac:58:52:e2: 91:15:ac:a2:af:27:c1:93:0a:1d:5a:99:32:78:a7:af:2c:32: c7:da:8f:35:4e:e6:48:45:36:d2:f3:79:63:c1:b1:9d:4e:55: 99:57:7f:44:b0:ec:72:fe:24:a3:18:3a:21:33:46:ba:fa:e3: 99:21:06:d8:f4:d2:11:0b:4f:a1:89:d1:67:3e:cb:90:92:14: 6d:74:6e:b7:9b:24:3c:7c:36:1b:35:0d:db:11:f5:a8:24:c5: 3a:e3:e5:7f:a0:1a:f8:34:ed:30:8c:5d:ba:13:89:87:11:61: d9:91:89:27:22:4c:1b:6d:d4:66:e4:fb:b7:d2:62:e3:c4:82: 4d:18:07:c7:39:d4:20:59:aa:4f:20:9a:87:ad:2d:b7:cf:28: 1c:a5:44:07:39:76:63:98:4a:61:e3:61:04:15:09:20:ad:a1: c2:59:91:4d:ec:5f:2a:3e:d5:08:2e:74:26:1a:92:40:a3:92: f7:f3:2b:08:b0:f0:1f:1a:d9:9b:ff:c9:2a:84:56:ef:33:ac: 59:7c:0c:a1:eb:df:ad:bd:24:19:0a:ac:21:89:71:ec:e7:5f: 1f:53:a4:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnxLv197kfjULGYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZWIyMjc3MzQtM2E2YS00Yzg3LWI0NDctOGJkMGMyZmQ0MDU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VsaiaNPQFAWDpv2U+jS8DOEY+3K11pFpT6Z mvBmo50uIHhBYhxh1rDIv+yN6DXcE9Q9+cJxVrFP2jId8VIqhwk/BQUHD5uITkD3 19hCNo3NOsNQNSUUCGl3/pv/BVHfZn2FKfy20/aENHc/PxiXL6k3GLWTOFkgbg24 L3BvaYHeJ3grpIsVIkPOvFcnf5wSHHndDuCWVb0UxmLtFV0xkx+of2hUWWQ2S8a9 0Ig0hT3KiXnlVd5fapAig93r91tvTFFdZQzEG3CXEIk/e+Ftktl4iwdqXWFQnT/C 8qRYlCRbQ3ht1JbHZ7mhykCTRDBdZA0zquGv8z3B/baAjcO6WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCjETvQ+uw5HmkI9qDS27vN10tlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0ZDAzMjctNzhlNi0z OTNkLThkMGYtN2Q2YjNmZTYwMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACmu41SwBoV+igNIymh3BgxOY2ckrPIyZKqjW52P5aU+rFhS4pEVrKKv J8GTCh1amTJ4p68sMsfajzVO5khFNtLzeWPBsZ1OVZlXf0Sw7HL+JKMYOiEzRrr6 45khBtj00hELT6GJ0Wc+y5CSFG10brebJDx8Nhs1DdsR9agkxTrj5X+gGvg07TCM XboTiYcRYdmRiSciTBtt1Gbk+7fSYuPEgk0YB8c51CBZqk8gmoetLbfPKBylRAc5 dmOYSmHjYQQVCSCtocJZkU3sXyo+1QgudCYakkCjkvfzKwiw8B8a2Zv/ySqEVu8z rFl8DKHr3629JBkKrCGJceznXx9TpNA= -----END CERTIFICATE-----Generated at Wed Jul 29 06:47:14 2026 by rpki-client