$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cac475fe-c23f-319f-a726-8d374418e226.roa File: cac475fe-c23f-319f-a726-8d374418e226.roa (raw, json) Hash identifier: mFWN3ePRilRQ+7EU0entAGwMLdcoQzvXqrc12edvVAo= Subject key identifier: 9D:78:03:D0:DC:C1:ED:B8:BC:31:4D:FF:39:C2:69:F3:DD:21:37:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0CC7DFAE90D1020BE340 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cac475fe-c23f-319f-a726-8d374418e226.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0c:c7:df:ae:90:d1:02:0b:e3:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=32e8fb32-01ce-4c07-a0f6-ec5e6146dee3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:c6:95:fa:dd:01:f7:e2:02:73:dc:57:8f:25: 7f:07:f3:f7:66:87:dc:ba:76:d6:8f:30:5a:da:fb: c0:bf:f4:5a:b4:1d:47:ac:5e:ed:f9:80:28:d5:22: a6:05:72:f8:60:06:c4:53:f1:81:7b:55:58:6b:a3: 39:b1:fc:32:ef:fd:02:92:89:ac:80:cc:ac:0f:69: 18:11:99:db:49:52:97:fb:ee:66:f0:97:1e:68:17: f0:86:ef:5a:0f:23:ec:82:54:4a:74:d1:ed:27:cb: ad:94:1e:23:54:11:ea:db:b3:6d:22:4b:25:e3:7f: 9e:a5:a3:e5:20:04:7f:d0:74:f1:72:b5:a0:d5:d4: 79:cf:dd:07:63:d7:eb:81:4b:c1:d9:d2:9b:b9:9c: f2:da:9e:c2:90:14:cd:52:e2:ee:de:07:1a:12:3e: 7a:ef:f9:a7:2c:d7:84:6d:f3:23:9b:22:18:d5:72: be:b6:4d:2d:e2:2d:43:fc:67:53:cb:80:67:79:1b: cf:c3:6a:84:aa:9a:95:00:3c:6d:2d:8f:6a:b0:58: 33:86:4d:b3:54:7d:54:49:91:2c:49:d6:11:b5:92: 16:9e:94:4f:b5:42:a4:a7:99:99:48:ff:55:16:08: ed:86:08:6a:87:60:9c:7e:45:32:51:2d:4d:e0:67: 29:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:78:03:D0:DC:C1:ED:B8:BC:31:4D:FF:39:C2:69:F3:DD:21:37:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/cac475fe-c23f-319f-a726-8d374418e226.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:f6:ab:d3:a2:e8:2f:e1:d2:ef:85:bd:86:27:1a:53:5e:e0: 3e:8d:78:d4:c0:66:02:fe:7c:a7:3b:48:6f:01:a1:b2:7b:46: 8a:b6:d3:e6:e0:61:16:0f:c0:37:33:2b:da:9b:ce:57:43:88: a5:7e:a0:55:bd:0f:9d:62:f3:69:9a:a5:31:e8:b2:53:b1:85: d5:21:4c:a7:32:72:2c:35:73:4a:5a:c1:87:37:08:09:10:8e: c6:f1:7e:f8:8b:1a:f0:67:ba:96:7d:4d:2d:8d:b8:71:3c:94: 75:d4:b2:6f:2c:b0:1c:4e:31:ad:e9:9e:42:dd:1a:60:02:a5: 92:5e:b7:ca:1c:d7:f8:cd:0d:d2:82:cc:7f:34:27:e6:14:39: 6f:06:64:bf:a5:bc:c1:d4:7e:89:8a:82:61:7f:ad:89:a8:3d: c0:69:e3:81:ce:6e:69:bf:29:a5:71:24:55:34:78:b8:4c:83: ca:80:29:01:f1:ba:dc:c1:ac:23:aa:2a:be:0d:1f:d7:df:77: 40:0d:e6:97:75:ac:35:2d:72:ca:42:61:55:ca:f1:d3:27:ac: b8:87:02:92:c0:32:89:16:ed:7c:b6:92:48:6b:6f:61:96:c5: ce:24:de:f0:25:ff:27:46:e6:e9:83:7b:47:5b:76:c3:a3:06: 1c:99:e2:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewzH366Q0QIL40AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzJlOGZiMzItMDFjZS00YzA3LWEwZjYtZWM1ZTYxNDZkZWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMaV+t0B9+ICc9xXjyV/B/P3ZofcunbWjzBa 2vvAv/RatB1HrF7t+YAo1SKmBXL4YAbEU/GBe1VYa6M5sfwy7/0CkomsgMysD2kY EZnbSVKX++5m8JceaBfwhu9aDyPsglRKdNHtJ8utlB4jVBHq27NtIksl43+epaPl IAR/0HTxcrWg1dR5z90HY9frgUvB2dKbuZzy2p7CkBTNUuLu3gcaEj567/mnLNeE bfMjmyIY1XK+tk0t4i1D/GdTy4BneRvPw2qEqpqVADxtLY9qsFgzhk2zVH1USZEs SdYRtZIWnpRPtUKkp5mZSP9VFgjthghqh2CcfkUyUS1N4Gcp4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ14A9Dcwe24vDFN/znCafPdITdLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2FjNDc1ZmUtYzIzZi0z MTlmLWE3MjYtOGQzNzQ0MThlMjI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2UMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEf2q9Oi6C/h0u+FvYYnGlNe4D6NeNTAZgL+fKc7SG8BobJ7Roq20+bg YRYPwDczK9qbzldDiKV+oFW9D51i82mapTHoslOxhdUhTKcyciw1c0pawYc3CAkQ jsbxfviLGvBnupZ9TS2NuHE8lHXUsm8ssBxOMa3pnkLdGmACpZJet8oc1/jNDdKC zH80J+YUOW8GZL+lvMHUfomKgmF/rYmoPcBp44HObmm/KaVxJFU0eLhMg8qAKQHx utzBrCOqKr4NH9ffd0AN5pd1rDUtcspCYVXK8dMnrLiHApLAMokW7Xy2kkhrb2GW xc4k3vAl/ydG5umDe0dbdsOjBhyZ4mI= -----END CERTIFICATE-----Generated at Sun Sep 27 02:14:45 2026 by rpki-client