$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a428d3-0555-3771-b307-e77bf2f2e905.roa File: b7a428d3-0555-3771-b307-e77bf2f2e905.roa (raw, json) Hash identifier: hET6vAyr2OiAoTCWFPOqfmWdFJQxQTzuaHnU0z5txcU= Subject key identifier: D4:88:1E:2B:46:92:54:4E:79:77:08:59:61:AE:E4:D9:FE:0D:58:E5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B09917E0E1C9BBBA14580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a428d3-0555-3771-b307-e77bf2f2e905.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:09:91:7e:0e:1c:9b:bb:a1:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b18866eb-e9e9-44b9-89eb-deeab942034e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7c:31:bd:ce:57:ad:d8:f9:5f:9e:5c:8a:f3: b2:c4:0e:37:be:a8:11:94:70:b4:67:aa:13:d4:e2: 40:91:6c:22:9f:30:0f:7f:99:07:2d:31:88:80:b2: 1a:33:ec:16:6a:6c:f2:ee:1f:1b:c2:a6:81:af:9c: 14:e9:6e:42:7a:87:da:cf:01:c5:fb:05:c8:95:a6: 71:2c:df:5e:dd:6d:7b:95:94:63:9d:1d:61:dd:da: 52:c6:a5:cc:d8:cd:dc:34:c5:a8:bd:5f:c7:42:ee: ef:be:ac:70:2f:fa:57:4f:50:6b:a5:18:8c:87:6a: 69:3e:43:ec:93:23:0e:7c:ab:83:ee:f6:fb:d4:e1: 02:a1:ac:d8:27:1b:7a:c9:08:2e:f7:6f:5c:8b:ac: 37:72:5f:ad:1e:de:f5:65:d1:4c:7f:52:91:0f:0d: 6a:f4:34:bc:d5:75:cb:e9:34:39:56:c9:90:35:0d: 5c:a2:1f:55:69:3b:2c:47:e3:45:66:14:64:ef:04: 4d:8c:7a:c4:d6:d8:b7:90:ba:75:56:ce:95:78:26: df:82:f6:10:ac:bf:16:cf:57:ed:b6:65:c5:ee:fa: 26:46:dd:fc:59:e0:c6:55:d9:0c:f7:8a:02:46:07: 7b:fc:46:fd:2c:d7:2c:ed:7c:64:48:1e:71:1c:d3: c3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:88:1E:2B:46:92:54:4E:79:77:08:59:61:AE:E4:D9:FE:0D:58:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7a428d3-0555-3771-b307-e77bf2f2e905.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:ec:74:9f:79:db:33:0d:5d:95:cb:60:9a:6b:bd:5b:27:01: 6e:e8:1c:d9:4e:ab:cc:76:0e:2b:57:ee:7a:c6:93:b3:e7:19: ef:94:f3:f2:20:0c:9c:e0:dd:6c:a4:79:ae:34:4d:89:85:ca: 64:d7:01:09:5b:c0:82:e6:1e:3d:b9:68:0a:89:2f:20:91:dc: 68:a4:50:d9:c0:13:6d:ba:29:3c:90:ee:91:b6:c2:1d:e7:be: 81:ad:f7:5e:13:66:11:e5:66:e5:7b:a6:33:2c:d8:6e:2a:ca: 0e:2b:3c:df:b2:10:da:a5:d6:3f:11:1e:67:66:b5:80:b0:04: 93:48:0e:8d:88:a9:df:da:ea:ae:ad:31:3d:da:71:02:e4:32: 6b:67:e8:3b:c5:31:c4:1d:ad:28:b7:f7:f4:21:e1:f3:d5:19: d3:f8:ac:67:ec:4d:4d:1f:99:4c:17:8c:f0:bb:a5:3f:d6:a7: ac:e2:31:17:83:c4:7f:ac:18:0d:08:ea:6f:f9:79:82:b2:3e: f2:65:d3:82:9a:a0:5d:bb:aa:6a:d1:ad:b0:5b:69:e2:f4:23: e4:4d:14:3f:dd:e9:b4:80:15:43:c2:81:23:24:fe:de:ed:3a: da:bf:82:65:89:61:12:f5:3a:58:c5:c2:c5:fa:4d:73:82:be: 32:e8:45:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewmRfg4cm7uhRYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE4ODY2ZWItZTllOS00NGI5LTg5ZWItZGVlYWI5NDIwMzRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnwxvc5Xrdj5X55civOyxA43vqgRlHC0Z6oT 1OJAkWwinzAPf5kHLTGIgLIaM+wWamzy7h8bwqaBr5wU6W5CeofazwHF+wXIlaZx LN9e3W17lZRjnR1h3dpSxqXM2M3cNMWovV/HQu7vvqxwL/pXT1BrpRiMh2ppPkPs kyMOfKuD7vb71OECoazYJxt6yQgu929ci6w3cl+tHt71ZdFMf1KRDw1q9DS81XXL 6TQ5VsmQNQ1coh9VaTssR+NFZhRk7wRNjHrE1ti3kLp1Vs6VeCbfgvYQrL8Wz1ft tmXF7vomRt38WeDGVdkM94oCRgd7/Eb9LNcs7XxkSB5xHNPDMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSIHitGklROeXcIWWGu5Nn+DVjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdhNDI4ZDMtMDU1NS0z NzcxLWIzMDctZTc3YmYyZjJlOTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1oMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEbsdJ952zMNXZXLYJprvVsnAW7oHNlOq8x2DitX7nrGk7PnGe+U8/Ig DJzg3Wykea40TYmFymTXAQlbwILmHj25aAqJLyCR3GikUNnAE226KTyQ7pG2wh3n voGt914TZhHlZuV7pjMs2G4qyg4rPN+yENql1j8RHmdmtYCwBJNIDo2Iqd/a6q6t MT3acQLkMmtn6DvFMcQdrSi39/Qh4fPVGdP4rGfsTU0fmUwXjPC7pT/Wp6ziMReD xH+sGA0I6m/5eYKyPvJl04KaoF27qmrRrbBbaeL0I+RNFD/d6bSAFUPCgSMk/t7t Otq/gmWJYRL1OljFwsX6TXOCvjLoRYo= -----END CERTIFICATE-----Generated at Fri Sep 25 22:32:38 2026 by rpki-client