$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa File: 5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa (raw, json) Hash identifier: aBLmu9vuzOJ6HsVqkj117MEa1ETMV12fPIehgAzFc7k= Subject key identifier: 72:BA:6A:7E:63:48:DA:38:D4:EF:DD:32:33:D8:65:13:B8:46:B3:86 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983268C5B941762EF6E3700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.38.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:26:8c:5b:94:17:62:ef:6e:37:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=adc053f0-5d94-4103-ba18-c375a51dc335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ca:2d:4b:67:b7:a7:06:5c:96:8f:e1:2e:85: 67:53:74:08:e9:bb:e2:1e:6b:60:f4:6d:e4:8f:f6: 6f:a8:79:a3:58:8f:c1:73:b2:9a:7d:0c:b7:be:0c: 9c:a6:9a:51:ce:c0:08:9a:49:e5:67:c8:9b:13:b8: 87:c3:1c:00:4b:b1:01:f8:3c:38:1d:23:be:1d:6b: aa:6e:b8:77:97:4e:5a:f1:45:0c:d8:06:7d:d0:2c: 44:6a:33:7a:86:e0:4c:39:53:49:ec:3c:fe:17:d2: 20:3f:7f:60:5b:b6:a2:35:b6:ca:f7:33:f4:04:5c: c1:85:5a:53:f7:78:34:76:98:ea:e1:7b:0f:04:c9: 11:e2:68:41:21:39:70:07:40:b9:ea:0e:30:b1:c5: 47:51:e5:f2:54:5f:73:be:5a:93:9b:b3:f5:5c:4f: fb:97:de:16:0e:5f:43:f3:58:b4:ed:d3:4b:ff:2c: 67:50:2f:42:bd:1b:7c:a0:ad:6e:a8:26:40:59:79: ae:4e:69:fc:bf:22:9a:ce:17:d1:02:86:29:8a:ee: 2b:48:9c:8b:19:ad:4c:b6:c1:4c:f1:b0:35:f5:53: 3d:c2:1b:cb:44:93:9c:67:a5:5e:9a:19:e0:18:be: 70:10:4c:cd:5c:fe:36:11:2e:00:c8:7a:a8:a8:e9: f2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BA:6A:7E:63:48:DA:38:D4:EF:DD:32:33:D8:65:13:B8:46:B3:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5f4d0327-78e6-393d-8d0f-7d6b3fe6033e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.38.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:4b:84:60:60:8b:cf:9b:4e:b7:be:c9:e2:24:6b:a7:02:6e: 07:31:96:d0:a2:d8:9f:56:98:a8:ab:12:80:b8:70:9b:42:e8: 45:c5:a2:be:04:98:5d:5e:f2:07:60:7a:8c:0f:2f:11:43:7d: 50:ab:6f:97:49:5a:bc:79:3c:da:e1:67:3c:ae:5a:7a:82:d0: 87:c3:f3:ad:72:44:3d:ad:4c:fe:8f:2e:89:27:df:42:e5:9e: f2:eb:84:bf:29:53:82:1c:41:d9:bc:fc:fb:17:33:ab:d0:58: 93:d6:3e:57:7c:75:28:60:5d:b8:66:b9:23:62:ef:35:d7:50: f0:89:3d:a6:3a:59:b3:66:28:c7:0a:75:48:86:f0:50:e1:11: 5c:db:b5:2a:14:e5:28:9f:a8:60:e6:75:0f:71:11:14:07:b9: e2:21:78:f3:b8:6a:05:19:cb:e3:88:fe:a6:44:42:97:fe:12: 5b:97:84:4f:95:1e:87:06:d2:6c:0c:bf:42:06:67:76:f9:b1: 67:7f:c8:17:79:49:73:8c:c6:73:c7:f3:bc:c4:c0:9b:43:b2: 16:24:e3:5d:06:09:1a:75:79:c3:ca:5e:8b:aa:6f:04:b5:7b: 1c:17:8a:8d:9c:4d:94:76:c4:15:37:d5:e0:e3:41:11:ee:61: b7:29:38:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyaMW5QXYu9uNwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YWRjMDUzZjAtNWQ5NC00MTAzLWJhMTgtYzM3NWE1MWRjMzM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhcotS2e3pwZclo/hLoVnU3QI6bviHmtg9G3k j/ZvqHmjWI/Bc7KafQy3vgycpppRzsAImknlZ8ibE7iHwxwAS7EB+Dw4HSO+HWuq brh3l05a8UUM2AZ90CxEajN6huBMOVNJ7Dz+F9IgP39gW7aiNbbK9zP0BFzBhVpT 93g0dpjq4XsPBMkR4mhBITlwB0C56g4wscVHUeXyVF9zvlqTm7P1XE/7l94WDl9D 81i07dNL/yxnUC9CvRt8oK1uqCZAWXmuTmn8vyKazhfRAoYpiu4rSJyLGa1MtsFM 8bA19VM9whvLRJOcZ6VemhngGL5wEEzNXP42ES4AyHqoqOnyZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHK6an5jSNo41O/dMjPYZRO4RrOGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWY0ZDAzMjctNzhlNi0z OTNkLThkMGYtN2Q2YjNmZTYwMzNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0mMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtLhGBgi8+bTre+yeIka6cCbgcxltCi2J9WmKirEoC4cJtC6EXFor4E mF1e8gdgeowPLxFDfVCrb5dJWrx5PNrhZzyuWnqC0IfD861yRD2tTP6PLokn30Ll nvLrhL8pU4IcQdm8/PsXM6vQWJPWPld8dShgXbhmuSNi7zXXUPCJPaY6WbNmKMcK dUiG8FDhEVzbtSoU5SifqGDmdQ9xERQHueIhePO4agUZy+OI/qZEQpf+EluXhE+V HocG0mwMv0IGZ3b5sWd/yBd5SXOMxnPH87zEwJtDshYk410GCRp1ecPKXouqbwS1 exwXio2cTZR2xBU31eDjQRHuYbcpOFI= -----END CERTIFICATE-----Generated at Tue Sep 29 01:00:14 2026 by rpki-client