$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afd5043-f32a-311f-b342-3a03117f5100.roa File: 8afd5043-f32a-311f-b342-3a03117f5100.roa (raw, json) Hash identifier: /3+I7ZjsaGigHf62o4+6glM7NcVa/OhixW9nIg2nShw= Subject key identifier: D4:08:CE:0D:99:50:D7:2E:04:BE:6B:0A:8F:FD:5B:87:D9:70:57:E2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983C967B417BD8AEDAB85C0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afd5043-f32a-311f-b342-3a03117f5100.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:c9:67:b4:17:bd:8a:ed:ab:85:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=459bc88f-6283-4ab9-a003-c39fdfe97c0b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:70:c2:3f:94:81:0b:d0:25:43:8b:f0:71:4a: 3e:2d:ef:e8:ce:db:27:42:82:38:b1:40:d6:81:78: a0:29:77:bc:23:8d:db:cc:05:14:5e:50:d7:1b:f0: 47:ef:49:58:96:f9:eb:3c:a6:bb:78:75:0b:0f:b5: aa:17:31:a9:8c:4c:fc:b9:5e:e9:21:29:60:8a:98: 85:f9:02:12:ba:2d:35:33:93:32:31:85:f1:62:9e: b1:0f:df:c0:69:d5:b7:0d:f0:ca:a9:b2:a4:86:bc: 26:55:06:35:66:e0:3f:92:c0:0b:dc:48:cc:99:78: 2e:79:6a:63:e0:b5:fc:7e:81:cc:ab:0f:72:a2:c6: 09:8f:2f:1f:48:bf:25:8d:76:e6:36:0b:23:71:98: 9f:99:95:ec:42:cf:56:9e:70:7e:2e:54:53:cc:26: 3b:e6:31:5e:94:32:8c:fb:04:65:6d:9a:fe:36:c2: 8a:fc:17:4d:f5:0f:ab:99:34:6d:ad:d6:20:03:ce: 04:1b:26:ee:09:74:5c:59:ae:ac:b4:1c:e9:b1:91: de:6e:39:f9:e0:c9:eb:95:33:2c:2a:4b:07:8f:59: 9b:57:26:89:42:24:b7:22:df:c6:d0:b5:ec:ed:62: ab:3c:84:60:91:83:db:e8:23:99:ea:dd:80:c7:a4: db:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:08:CE:0D:99:50:D7:2E:04:BE:6B:0A:8F:FD:5B:87:D9:70:57:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8afd5043-f32a-311f-b342-3a03117f5100.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:15:2f:38:16:11:f7:0a:7a:5e:3c:1f:f8:4c:9d:95:61:59: 07:cd:ea:00:3c:79:3c:1d:73:3e:d1:b7:b2:03:ad:7a:5e:2c: c6:0c:c2:d4:f9:dc:3f:b4:cf:3b:b7:96:73:ca:30:1e:76:ae: fa:1d:19:45:c0:b5:df:6b:30:b0:1f:15:96:6d:a2:1f:cb:01: a9:1a:ca:b4:e3:35:f5:2c:b0:16:c7:2b:4d:32:33:a1:dd:67: 6f:b4:59:42:c1:8a:43:4c:b8:0a:84:0f:85:1a:07:e5:f4:c6: 08:3b:70:f0:06:24:66:ca:14:c8:09:16:7f:59:2d:f6:2d:5f: 62:c6:26:ae:f7:fd:cb:d7:20:9a:06:5b:7c:32:86:6e:2c:4d: 30:68:a2:43:ee:f3:60:5c:e9:a8:e5:f4:82:c2:b9:18:94:f3: c9:ad:91:95:78:32:21:27:e6:2a:cb:d3:07:20:36:a6:0b:13: b4:bd:28:b6:41:ed:5b:d9:b6:9c:58:0a:99:b0:8f:dd:63:62: 14:e9:e2:1a:5a:75:91:5a:54:8c:74:a5:4d:cd:5f:25:f1:57: 4f:ee:0f:fd:1f:6b:3d:88:7c:6d:f4:de:02:8f:78:1a:29:d9: 96:7e:d1:b0:c3:ee:67:05:7d:d9:7a:7c:ac:74:2b:41:aa:f6: 0f:c0:6e:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg8lntBe9iu2rhcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDU5YmM4OGYtNjI4My00YWI5LWEwMDMtYzM5ZmRmZTk3YzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXDCP5SBC9AlQ4vwcUo+Le/oztsnQoI4sUDW gXigKXe8I43bzAUUXlDXG/BH70lYlvnrPKa7eHULD7WqFzGpjEz8uV7pISlgipiF +QISui01M5MyMYXxYp6xD9/AadW3DfDKqbKkhrwmVQY1ZuA/ksAL3EjMmXgueWpj 4LX8foHMqw9yosYJjy8fSL8ljXbmNgsjcZifmZXsQs9WnnB+LlRTzCY75jFelDKM +wRlbZr+NsKK/BdN9Q+rmTRtrdYgA84EGybuCXRcWa6stBzpsZHebjn54MnrlTMs KksHj1mbVyaJQiS3It/G0LXs7WKrPIRgkYPb6COZ6t2Ax6Tb1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQIzg2ZUNcuBL5rCo/9W4fZcFfiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGFmZDUwNDMtZjMyYS0z MTFmLWIzNDItM2EwMzExN2Y1MTAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsVLzgWEfcKel48H/hMnZVhWQfN6gA8eTwdcz7Rt7IDrXpeLMYMwtT5 3D+0zzu3lnPKMB52rvodGUXAtd9rMLAfFZZtoh/LAakayrTjNfUssBbHK00yM6Hd Z2+0WULBikNMuAqED4UaB+X0xgg7cPAGJGbKFMgJFn9ZLfYtX2LGJq73/cvXIJoG W3wyhm4sTTBookPu82Bc6ajl9ILCuRiU88mtkZV4MiEn5irL0wcgNqYLE7S9KLZB 7VvZtpxYCpmwj91jYhTp4hpadZFaVIx0pU3NXyXxV0/uD/0faz2IfG303gKPeBop 2ZZ+0bDD7mcFfdl6fKx0K0Gq9g/Abk4= -----END CERTIFICATE-----Generated at Sun Oct 11 21:23:25 2026 by rpki-client