$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e03960ef-2dcc-3c07-89ba-4db330a6b39c.roa File: e03960ef-2dcc-3c07-89ba-4db330a6b39c.roa (raw, json) Hash identifier: dOdWm7Hn0qv7ByWYCqxaXYgztl2UlbMXenhJX1z4WUo= Subject key identifier: 09:EA:29:7E:6D:94:A5:FA:8F:B8:98:E3:CB:5B:F5:98:FF:4C:ED:A8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B008FEDC2F5597035A460 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e03960ef-2dcc-3c07-89ba-4db330a6b39c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.45.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:00:8f:ed:c2:f5:59:70:35:a4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=809af4af-c90b-42fb-9f79-b17b493eafc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:e1:58:bd:c0:21:a0:b8:61:b3:be:c2:33:63: 4a:b6:92:5b:00:fc:46:a7:72:bd:ec:ae:0e:4b:85: ad:94:f7:b4:d4:4a:1e:a2:df:27:a2:54:5a:e1:e0: ab:b7:32:d1:10:d9:a6:d9:35:94:ab:2a:b6:58:22: a3:7c:1b:6d:d0:bb:b7:f3:d0:0b:1a:b7:bd:c3:85: 8e:f0:55:9f:71:7f:5a:21:1e:6a:ae:75:bc:f4:e2: 5a:c7:be:19:e4:96:bd:d5:e7:83:92:db:17:f7:a8: 30:19:92:a5:0f:41:e5:5b:78:1a:cc:4e:7b:a7:d9: 9d:fe:72:11:b0:c0:a7:31:7d:4a:b4:37:05:54:ea: 3a:c5:36:34:12:80:37:e9:e6:ef:d0:05:d6:a8:a9: d6:6a:a6:5e:eb:d2:08:45:f9:cf:8f:89:e9:c4:96: b8:33:0b:4f:45:0f:19:16:19:f4:57:00:df:87:31: 0d:f6:a4:f6:a6:7b:e4:17:61:28:49:36:19:8d:92: db:7f:e3:c4:cb:7b:59:23:12:47:b8:36:c5:83:c0: 8b:c8:f8:28:4b:1e:1b:1c:f2:f9:4e:8a:a9:d1:2c: 58:6e:d1:73:69:8e:5b:8a:3c:8e:8e:1a:2c:17:c7: 0c:13:fe:92:8d:7a:0f:b8:0f:b7:e4:82:c6:a0:5c: 5d:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:EA:29:7E:6D:94:A5:FA:8F:B8:98:E3:CB:5B:F5:98:FF:4C:ED:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e03960ef-2dcc-3c07-89ba-4db330a6b39c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.45.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:34:fd:60:a4:91:fb:f3:8f:0c:e6:fe:df:2d:d3:85:bc:b8: 81:a0:b2:56:5e:f3:5b:ee:88:0d:6a:76:90:5d:6e:50:20:f5: d3:eb:64:e0:af:cd:38:96:ca:40:89:76:0f:07:3e:f2:7e:7e: 53:82:51:56:ab:56:96:7f:46:ae:75:21:dc:d3:da:47:37:26: 88:23:c6:f4:58:3e:43:e3:d0:73:7d:16:06:87:8c:36:1b:4f: 6e:c0:3f:a8:50:32:87:e8:53:c5:51:9b:67:11:9b:f4:bc:e0: 95:55:e5:61:05:f5:63:57:db:2b:d6:2d:1f:be:09:68:76:4b: ce:42:27:84:d7:4d:e4:cd:a2:98:c7:46:f2:d1:3d:54:72:c2: 48:79:2f:df:c8:86:ac:05:58:90:22:d0:5c:76:76:2c:78:f3: e1:eb:5e:f4:10:9d:cd:67:14:5e:e6:bc:0d:90:7c:e3:ba:c9: 9f:4a:25:fd:b2:15:19:bf:5c:8e:1a:46:bc:83:95:84:eb:3b: 18:a0:dc:9b:0f:ae:b8:51:fd:3a:c0:aa:68:5e:2d:0f:b3:9e: f6:a1:e0:97:a0:0c:f2:1a:a8:5a:b5:1d:2d:de:47:13:81:c5: 6f:82:25:24:04:cd:64:af:0e:37:0f:d1:fe:df:65:74:cb:f2: 2a:d7:ea:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewCP7cL1WXA1pGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODA5YWY0YWYtYzkwYi00MmZiLTlmNzktYjE3YjQ5M2VhZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuFYvcAhoLhhs77CM2NKtpJbAPxGp3K97K4O S4WtlPe01Eoeot8nolRa4eCrtzLRENmm2TWUqyq2WCKjfBtt0Lu389ALGre9w4WO 8FWfcX9aIR5qrnW89OJax74Z5Ja91eeDktsX96gwGZKlD0HlW3gazE57p9md/nIR sMCnMX1KtDcFVOo6xTY0EoA36ebv0AXWqKnWaqZe69IIRfnPj4npxJa4MwtPRQ8Z Fhn0VwDfhzEN9qT2pnvkF2EoSTYZjZLbf+PEy3tZIxJHuDbFg8CLyPgoSx4bHPL5 Toqp0SxYbtFzaY5bijyOjhosF8cME/6SjXoPuA+35ILGoFxdBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAnqKX5tlKX6j7iY48tb9Zj/TO2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTAzOTYwZWYtMmRjYy0z YzA3LTg5YmEtNGRiMzMwYTZiMzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0tMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFM0/WCkkfvzjwzm/t8t04W8uIGgslZe81vuiA1qdpBdblAg9dPrZOCv zTiWykCJdg8HPvJ+flOCUVarVpZ/Rq51IdzT2kc3JogjxvRYPkPj0HN9FgaHjDYb T27AP6hQMofoU8VRm2cRm/S84JVV5WEF9WNX2yvWLR++CWh2S85CJ4TXTeTNopjH RvLRPVRywkh5L9/IhqwFWJAi0Fx2dix48+HrXvQQnc1nFF7mvA2QfOO6yZ9KJf2y FRm/XI4aRryDlYTrOxig3JsPrrhR/TrAqmheLQ+znvah4JegDPIaqFq1HS3eRxOB xW+CJSQEzWSvDjcP0f7fZXTL8irX6mY= -----END CERTIFICATE-----Generated at Sat Sep 26 13:41:41 2026 by rpki-client