$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65e59ba5-ca14-32dd-ad54-8a61384d4312.roa File: 65e59ba5-ca14-32dd-ad54-8a61384d4312.roa (raw, json) Hash identifier: Dho8RPFSiim5yHjcCF1YelVkPtCFDXN71AEy7dQwI2w= Subject key identifier: AB:7D:8D:62:B1:7C:5B:EC:5B:70:A2:59:C4:55:4C:48:1B:51:51:75 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B09CFDE08F2CA02363500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65e59ba5-ca14-32dd-ad54-8a61384d4312.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.106.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:09:cf:de:08:f2:ca:02:36:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=be801d9f-c0a0-40c6-a9e3-0927e74226f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:61:0f:a2:64:87:57:75:b2:a0:16:ec:c3:84: 78:f8:d9:e7:06:4a:cf:2f:02:ef:aa:8d:71:6b:73: 7f:08:33:ac:1f:fe:61:32:10:35:a6:86:26:f0:e9: 39:b9:55:a2:23:38:8c:69:d3:63:28:b4:5a:6f:02: 61:18:6e:91:6e:86:ab:b4:27:a8:17:ab:4f:23:9e: 39:8c:23:fb:c3:b7:7a:9e:74:e8:e2:9b:b4:6b:f5: 3d:fd:e4:d9:e6:c7:8b:74:d9:dd:17:5f:5e:58:8d: d3:52:f2:63:13:fe:54:4b:99:5d:44:2c:79:26:97: 01:72:ce:34:3b:02:b0:bb:cf:67:e3:4c:16:5d:36: 70:ca:63:bc:16:09:04:d2:fc:b0:d0:c2:d3:ea:1d: 2a:6c:d5:5a:62:e2:23:e1:2e:a5:b8:5b:7f:4f:11: f4:c4:91:bf:8b:24:0d:d4:b9:71:e1:32:03:5c:2b: 1d:d5:34:1f:19:68:12:6c:d7:30:da:7f:59:62:87: a6:9e:9e:ec:bd:bc:c9:07:c3:c2:1c:ce:6a:c9:ad: 5a:fa:e0:22:20:c8:ae:59:78:68:65:63:8c:64:1f: 0d:4b:97:80:cc:12:a4:6e:07:25:62:78:11:eb:02: ac:01:15:0d:ab:ca:fb:5f:9f:d4:01:89:44:3c:24: d6:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7D:8D:62:B1:7C:5B:EC:5B:70:A2:59:C4:55:4C:48:1B:51:51:75 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/65e59ba5-ca14-32dd-ad54-8a61384d4312.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.106.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:4f:9d:88:6e:e9:1d:26:38:d5:9b:bd:8f:5d:c3:ed:d4:62: de:f9:da:77:a1:53:10:53:72:fb:0f:36:07:de:f3:2c:93:a7: f2:04:20:85:44:85:9f:c2:05:0b:5c:e3:f7:55:47:39:ca:31: ae:ee:5d:c6:b8:dc:da:31:f6:a1:d2:21:08:96:d4:90:62:91: 38:d6:dd:2c:0c:82:7c:ea:34:28:76:1d:78:0a:50:4f:38:1b: b1:b2:70:42:ac:a9:8d:09:33:b6:67:cb:66:95:88:ff:be:99: 2d:18:71:6e:aa:3d:06:4f:1b:5c:f5:b7:ee:8a:2c:58:fe:85: 19:59:ee:96:2e:ec:95:26:82:65:28:c8:00:1b:2f:dd:92:76: 9b:cf:7b:d7:f9:b4:c6:22:71:4b:04:0f:37:99:b4:a1:b6:11: 78:20:87:98:af:d2:6f:bd:f6:15:ce:e7:85:cb:74:1c:2b:67: 96:4b:ee:2b:67:b0:99:d5:7a:7d:2d:0d:e0:bf:b5:6f:e3:89: 8e:b2:10:10:d7:f3:f7:8a:e9:df:0f:d9:ea:ab:a0:cb:dc:f2: 07:39:04:c7:59:38:c8:33:8c:ad:b0:6d:3d:ba:cf:ac:10:90: 5f:21:84:ed:43:e8:16:d9:c9:ed:fd:d8:23:e2:20:7c:94:90: a5:14:66:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewnP3gjyygI2NQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmU4MDFkOWYtYzBhMC00MGM2LWE5ZTMtMDkyN2U3NDIyNmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGEPomSHV3WyoBbsw4R4+NnnBkrPLwLvqo1x a3N/CDOsH/5hMhA1poYm8Ok5uVWiIziMadNjKLRabwJhGG6RboartCeoF6tPI545 jCP7w7d6nnTo4pu0a/U9/eTZ5seLdNndF19eWI3TUvJjE/5US5ldRCx5JpcBcs40 OwKwu89n40wWXTZwymO8FgkE0vyw0MLT6h0qbNVaYuIj4S6luFt/TxH0xJG/iyQN 1Llx4TIDXCsd1TQfGWgSbNcw2n9ZYoemnp7svbzJB8PCHM5qya1a+uAiIMiuWXho ZWOMZB8NS5eAzBKkbgclYngR6wKsARUNq8r7X5/UAYlEPCTWqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKt9jWKxfFvsW3CiWcRVTEgbUVF1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjVlNTliYTUtY2ExNC0z MmRkLWFkNTQtOGE2MTM4NGQ0MzEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxPnYhu6R0mONWbvY9dw+3UYt752nehUxBTcvsPNgfe8yyTp/IEIIVE hZ/CBQtc4/dVRznKMa7uXca43Nox9qHSIQiW1JBikTjW3SwMgnzqNCh2HXgKUE84 G7GycEKsqY0JM7Zny2aViP++mS0YcW6qPQZPG1z1t+6KLFj+hRlZ7pYu7JUmgmUo yAAbL92SdpvPe9f5tMYicUsEDzeZtKG2EXggh5iv0m+99hXO54XLdBwrZ5ZL7itn sJnVen0tDeC/tW/jiY6yEBDX8/eK6d8P2eqroMvc8gc5BMdZOMgzjK2wbT26z6wQ kF8hhO1D6BbZye392CPiIHyUkKUUZmE= -----END CERTIFICATE-----Generated at Tue Sep 29 13:56:12 2026 by rpki-client