$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa File: c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa (raw, json) Hash identifier: 35NZ+CvQSAE+XkW8mGkEO1WIZOKrun6GexAaqT/cpFM= Subject key identifier: 2A:0E:23:39:F8:A6:86:B1:A6:CB:DD:20:8C:7F:13:81:5E:C7:26:25 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983C548C2C670FC1C77970D Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.165.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:c5:48:c2:c6:70:fc:1c:77:97:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbd8fc0e-2faf-4698-8f29-7d8c984ead38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b4:d0:94:4a:28:7e:bb:63:b4:b2:25:eb:60: 60:15:3b:eb:2e:47:de:20:98:31:6d:55:36:35:b9: 6b:17:bd:9d:ba:68:45:d1:1a:52:eb:84:da:a7:c6: ae:90:57:ee:a2:65:00:3f:12:bf:55:6f:5a:19:f6: 1a:02:cf:42:d0:db:38:96:fc:66:77:29:6a:86:b3: 2a:ef:d7:c9:1a:7f:7d:16:3e:35:9a:12:2e:c8:d3: 2a:9f:0a:fe:75:b3:46:21:f6:6b:dd:7c:3f:54:f0: 9b:31:68:e1:c7:40:ee:49:9e:80:c6:79:39:10:1b: 4d:45:0a:22:bc:0f:81:f1:2e:cb:86:c3:53:08:b7: 0f:c6:02:6e:ba:2f:02:2e:7d:62:34:37:ad:4a:c4: 56:4d:3e:27:c3:c6:2b:cd:50:27:29:ec:56:87:ac: d7:f2:b2:b7:98:ce:10:1c:c2:84:e1:4a:d8:81:c2: d7:f3:e1:52:f0:4a:9b:ce:4b:3f:ea:49:ed:1e:cc: 95:cf:fa:d9:45:82:14:8d:3f:05:d8:40:15:7e:7f: 26:93:97:cb:c7:8f:48:c5:85:cf:c1:d8:25:5d:04: d2:e8:21:c2:33:11:0c:1b:7a:18:87:18:38:4d:9c: fa:bc:24:dc:20:91:6e:37:b8:b2:49:d1:c9:f8:b3: a3:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:0E:23:39:F8:A6:86:B1:A6:CB:DD:20:8C:7F:13:81:5E:C7:26:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c2cc6998-f56c-30f0-ab29-42df33d3d2e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.165.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:5d:7f:40:a4:26:15:20:c8:83:5b:fc:81:dd:f8:3d:ab:55: 2f:b7:0f:21:62:01:be:85:68:1e:14:75:15:d6:99:14:d1:68: df:a9:a7:c8:29:ca:2f:bc:85:a0:68:52:c5:90:13:97:26:54: 79:fb:4b:74:50:f7:a7:f0:49:04:7a:bc:b2:a8:3c:90:19:2d: f0:f3:5d:27:27:85:cb:e8:6e:c4:9d:50:fd:c6:c0:1c:af:7b: 2f:d4:ec:22:2a:2f:01:56:8a:01:95:e0:d0:d2:37:8a:dc:66: 02:92:e1:b1:05:0d:17:ac:8c:58:b4:7c:b6:8d:79:c3:02:6b: 0e:5a:59:19:2a:5f:cf:c2:fc:8c:95:ce:1b:ee:46:9f:98:02: da:63:ad:f7:60:e2:05:fe:38:de:f1:79:d8:ec:29:d8:5d:a8: 51:69:87:66:55:eb:94:10:56:72:82:7a:46:5b:79:ba:4e:2c: ca:80:da:14:34:36:70:5d:e1:28:45:78:23:29:0a:b5:5c:cf: 3b:9f:98:31:0d:a6:e0:34:1c:44:ba:e3:f0:38:75:50:a1:21: e2:df:f8:46:83:f0:b3:ee:c6:3a:d5:ae:f9:46:73:ee:bf:a9: f7:cb:1d:a7:f9:3a:a6:a8:96:f8:19:19:d4:4d:ce:6f:a3:1d: 90:69:e9:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg8VIwsZw/Bx3lw0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJkOGZjMGUtMmZhZi00Njk4LThmMjktN2Q4Yzk4NGVhZDM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLTQlEoofrtjtLIl62BgFTvrLkfeIJgxbVU2 NblrF72dumhF0RpS64Tap8aukFfuomUAPxK/VW9aGfYaAs9C0Ns4lvxmdylqhrMq 79fJGn99Fj41mhIuyNMqnwr+dbNGIfZr3Xw/VPCbMWjhx0DuSZ6Axnk5EBtNRQoi vA+B8S7LhsNTCLcPxgJuui8CLn1iNDetSsRWTT4nw8YrzVAnKexWh6zX8rK3mM4Q HMKE4UrYgcLX8+FS8Eqbzks/6kntHsyVz/rZRYIUjT8F2EAVfn8mk5fLx49IxYXP wdglXQTS6CHCMxEMG3oYhxg4TZz6vCTcIJFuN7iySdHJ+LOjCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCoOIzn4poaxpsvdIIx/E4FexyYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzJjYzY5OTgtZjU2Yy0z MGYwLWFiMjktNDJkZjMzZDNkMmUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokilMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFRdf0CkJhUgyINb/IHd+D2rVS+3DyFiAb6FaB4UdRXWmRTRaN+pp8gp yi+8haBoUsWQE5cmVHn7S3RQ96fwSQR6vLKoPJAZLfDzXScnhcvobsSdUP3GwByv ey/U7CIqLwFWigGV4NDSN4rcZgKS4bEFDResjFi0fLaNecMCaw5aWRkqX8/C/IyV zhvuRp+YAtpjrfdg4gX+ON7xedjsKdhdqFFph2ZV65QQVnKCekZbebpOLMqA2hQ0 NnBd4ShFeCMpCrVczzufmDENpuA0HES64/A4dVChIeLf+EaD8LPuxjrVrvlGc+6/ qffLHaf5OqaolvgZGdRNzm+jHZBp6XY= -----END CERTIFICATE-----Generated at Sun Oct 11 19:41:16 2026 by rpki-client