$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa File: ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa (raw, json) Hash identifier: Hrwo6Xw5impewQFeNNAPNHZxETBMCusHcAs9PYJzL94= Subject key identifier: 8E:8D:A6:06:8C:5C:F3:FB:35:85:D7:7D:5B:57:5E:D4:03:A9:7C:37 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B11989ABB6DF93F7EA040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:11:98:9a:bb:6d:f9:3f:7e:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7b313ce4-0762-4b79-bfab-8e7a3f3e28c2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:d4:7b:3e:f1:df:15:6a:73:2f:29:bb:3b:c0: d6:41:3b:e3:0e:17:0f:62:3a:8e:2f:7a:ea:d8:14: dc:c2:20:ca:31:59:b7:6b:c9:3b:17:ca:5b:7a:64: a3:46:35:70:1c:59:b1:c0:30:83:80:22:19:ed:10: 3e:2f:ce:f6:d5:1e:9f:13:a3:75:3c:59:bd:fa:a7: 14:f1:bd:93:08:26:a1:00:8d:40:ae:20:6f:f3:34: 82:2a:c1:e4:14:f8:3a:31:36:4b:91:54:2b:d4:bf: 0d:f5:79:26:cf:15:b2:9d:6c:9c:a7:90:c6:db:51: 19:a3:3e:b5:35:b7:b9:71:70:f8:15:50:8f:6a:7b: 4b:52:94:bc:d7:51:3b:f4:ad:0a:46:25:1b:fc:e7: ce:6f:fd:68:3f:ab:d6:da:86:8c:df:8a:91:3b:c1: 72:07:a5:5c:e0:ac:77:f7:03:89:dd:9a:8b:c3:f4: 47:7d:25:5b:d2:fe:d5:05:07:12:c6:3f:6e:42:13: 75:cd:1f:25:a9:9f:f0:ca:01:da:f1:68:23:f0:39: 02:4f:d8:de:fb:ca:ee:2e:f5:5a:43:f7:1c:64:74: 7f:83:cd:32:f7:5c:46:cc:fc:db:1b:91:96:a0:2b: 68:ed:54:1b:fe:27:c5:97:d8:40:6a:a8:d6:76:5b: 56:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:8D:A6:06:8C:5C:F3:FB:35:85:D7:7D:5B:57:5E:D4:03:A9:7C:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:0c:3e:84:a0:c4:e9:e7:0b:05:dc:73:c2:4b:b0:c4:2e:e2: d3:cd:77:61:9d:fb:31:88:4c:d7:0f:05:05:be:f4:6c:6e:ed: 08:96:2e:dc:c3:d6:61:ee:d3:8d:9a:85:a5:6b:83:19:3d:34: 83:33:31:25:97:02:92:83:2c:f2:5b:56:0a:d8:41:fd:e3:b6: 98:84:e4:ef:b4:87:86:e8:c3:f4:66:b7:45:53:19:0a:a1:88: f2:09:ff:58:92:07:0a:9d:f1:e7:3f:da:d5:89:f4:16:89:b5: 98:09:9d:1a:b3:0f:6c:e0:84:cc:3b:9e:ff:20:49:fe:4c:fe: 88:8d:83:d3:bc:41:a1:72:13:12:51:a7:10:1e:cf:12:28:36: 6a:72:06:33:f7:c1:2d:96:6e:b3:72:54:11:db:2a:6c:e9:8f: d8:0c:41:80:90:25:4e:f7:a2:89:54:b8:b0:9e:da:64:71:ee: 6a:b8:89:50:18:f1:7a:a0:c8:b0:47:eb:bf:30:aa:57:d5:e0: 7b:d4:14:a2:2b:d4:e9:21:f0:e4:53:7d:06:d6:ab:82:77:17: 45:a2:6e:ce:9b:5e:bb:01:65:ca:b4:d1:e3:9f:7b:79:40:62: 88:ce:b1:56:75:79:7c:7f:76:a5:93:89:c0:52:56:ec:0e:bf: a2:48:d4:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JexGYmrtt+T9+oEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2IzMTNjZTQtMDc2Mi00Yjc5LWJmYWItOGU3YTNmM2UyOGMyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9R7PvHfFWpzLym7O8DWQTvjDhcPYjqOL3rq 2BTcwiDKMVm3a8k7F8pbemSjRjVwHFmxwDCDgCIZ7RA+L8721R6fE6N1PFm9+qcU 8b2TCCahAI1AriBv8zSCKsHkFPg6MTZLkVQr1L8N9XkmzxWynWycp5DG21EZoz61 Nbe5cXD4FVCPantLUpS811E79K0KRiUb/OfOb/1oP6vW2oaM34qRO8FyB6Vc4Kx3 9wOJ3ZqLw/RHfSVb0v7VBQcSxj9uQhN1zR8lqZ/wygHa8Wgj8DkCT9je+8ruLvVa Q/ccZHR/g80y91xGzPzbG5GWoCto7VQb/ifFl9hAaqjWdltWtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI6NpgaMXPP7NYXXfVtXXtQDqXw3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU0YmE4NjctYjA3Ny0z ZjU0LWE4YWYtOWZiMTJmZTdlOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoMPoSgxOnnCwXcc8JLsMQu4tPNd2Gd+zGITNcPBQW+9Gxu7QiWLtzD 1mHu042ahaVrgxk9NIMzMSWXApKDLPJbVgrYQf3jtpiE5O+0h4bow/Rmt0VTGQqh iPIJ/1iSBwqd8ec/2tWJ9BaJtZgJnRqzD2zghMw7nv8gSf5M/oiNg9O8QaFyExJR pxAezxIoNmpyBjP3wS2WbrNyVBHbKmzpj9gMQYCQJU73oolUuLCe2mRx7mq4iVAY 8XqgyLBH678wqlfV4HvUFKIr1Okh8ORTfQbWq4J3F0Wibs6bXrsBZcq00eOfe3lA YojOsVZ1eXx/dqWTicBSVuwOv6JI1Eo= -----END CERTIFICATE-----Generated at Mon Sep 28 21:59:11 2026 by rpki-client