$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa File: f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa (raw, json) Hash identifier: bAmElksD4YtznkPAcPzQN7YtlxAGFsAO7Qg48zsX6ZE= Subject key identifier: 11:C8:66:9B:1A:29:C2:C8:CB:30:26:28:4E:69:15:68:4A:E3:15:BD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AFF2CDDCF3811C26B8AC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.19.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:ff:2c:dd:cf:38:11:c2:6b:8a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=38e7471b-24a8-4460-99f3-042ed1a717d0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:bf:e1:57:9d:a6:9b:55:34:4c:4b:40:d9:36: ba:3f:92:93:d6:6f:21:3a:c1:8b:41:be:95:eb:fe: 7b:c6:e9:df:95:a8:e0:c2:6c:47:66:e5:52:4e:4b: 68:4c:d5:37:d5:f1:f1:a7:0f:d9:d8:02:24:7e:53: d5:27:34:c9:5e:5b:4b:96:21:19:7c:b7:10:ad:f7: 29:d1:3d:94:26:7a:f0:f8:cb:af:a6:ed:53:67:8d: b1:63:5f:2d:f8:b3:be:d9:fe:af:1c:53:24:9a:60: 06:0f:df:e0:71:68:7a:ae:0a:18:21:2b:d7:13:3e: 4a:72:56:c4:53:53:77:b9:d5:dc:32:17:06:d6:f2: 65:7a:8e:1c:83:1f:02:46:2b:85:4a:4e:5a:ba:f8: 8c:f0:d1:6f:e9:27:8e:0c:2d:31:8c:c2:a7:23:f7: 71:50:ba:5b:f7:70:8f:cd:95:ae:a7:c2:92:07:db: 06:da:c6:e9:51:ad:ae:f2:0a:7e:3e:34:5b:11:72: f7:76:14:51:71:f2:5d:1a:5f:44:23:74:4b:46:ed: bd:21:da:39:ae:47:99:55:16:bd:4d:77:5a:c1:a7: 79:fc:5c:66:ad:85:b8:da:86:78:0e:a9:78:70:64: 53:6f:0c:b3:dd:d0:ea:d5:ec:c5:16:bf:42:2a:f4: c4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C8:66:9B:1A:29:C2:C8:CB:30:26:28:4E:69:15:68:4A:E3:15:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f61959a1-6af8-3d1c-9c79-3d1924fb9c4c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.19.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:dc:bf:39:4c:b5:ad:fc:24:25:68:9a:eb:29:1a:2f:d7:71: 9a:28:c1:35:0e:1e:49:ca:cb:5b:ca:b7:c5:d9:8a:26:fe:60: 45:5a:a5:b0:65:7e:9a:9d:8a:78:20:23:88:d0:3d:ab:27:fb: ef:3c:ae:6f:ee:db:16:7f:90:e7:d2:ec:d3:9e:f8:9c:37:e3: 82:ae:c1:2d:79:29:06:c8:19:bd:e0:5c:3c:d0:fb:a8:73:86: 54:e6:12:e7:b7:17:a7:24:12:c5:24:31:5c:07:44:f7:9c:4b: d9:fb:1d:69:8b:fa:a2:91:45:97:6a:9c:21:65:e8:27:ff:ac: 9d:5d:5a:73:dc:f4:24:3b:d6:7d:19:52:f9:c1:25:61:8a:f3: 6b:79:8c:d3:dc:8d:38:8c:ab:b7:b1:81:3f:b5:4c:32:b0:8e: 11:ee:b5:86:6a:b3:98:49:38:d5:b1:21:88:12:9f:7d:f0:fd: 70:f2:89:50:a5:7c:29:be:83:08:b5:9c:d4:bc:ed:e7:40:79: 28:8d:0b:e4:c1:eb:eb:93:29:ec:19:0c:9c:5d:42:6c:f4:ff: 19:55:8e:97:b1:32:01:b8:e2:4e:52:9a:52:5c:7c:e0:c8:51: aa:3f:0a:ee:99:bf:35:55:4a:c6:d8:b2:aa:a1:6a:61:1c:84: a2:1b:82:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jev8s3c84EcJrisAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzhlNzQ3MWItMjRhOC00NDYwLTk5ZjMtMDQyZWQxYTcxN2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7r/hV52mm1U0TEtA2Ta6P5KT1m8hOsGLQb6V 6/57xunflajgwmxHZuVSTktoTNU31fHxpw/Z2AIkflPVJzTJXltLliEZfLcQrfcp 0T2UJnrw+Muvpu1TZ42xY18t+LO+2f6vHFMkmmAGD9/gcWh6rgoYISvXEz5KclbE U1N3udXcMhcG1vJleo4cgx8CRiuFSk5auviM8NFv6SeODC0xjMKnI/dxULpb93CP zZWup8KSB9sG2sbpUa2u8gp+PjRbEXL3dhRRcfJdGl9EI3RLRu29Ido5rkeZVRa9 TXdawad5/FxmrYW42oZ4Dql4cGRTbwyz3dDq1ezFFr9CKvTEcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHIZpsaKcLIyzAmKE5pFWhK4xW9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjYxOTU5YTEtNmFmOC0z ZDFjLTljNzktM2QxOTI0ZmI5YzRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0TMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3cvzlMta38JCVomuspGi/XcZoowTUOHknKy1vKt8XZiib+YEVapbBl fpqdinggI4jQPasn++88rm/u2xZ/kOfS7NOe+Jw344KuwS15KQbIGb3gXDzQ+6hz hlTmEue3F6ckEsUkMVwHRPecS9n7HWmL+qKRRZdqnCFl6Cf/rJ1dWnPc9CQ71n0Z UvnBJWGK82t5jNPcjTiMq7exgT+1TDKwjhHutYZqs5hJONWxIYgSn33w/XDyiVCl fCm+gwi1nNS87edAeSiNC+TB6+uTKewZDJxdQmz0/xlVjpexMgG44k5SmlJcfODI Uao/Cu6ZvzVVSsbYsqqhamEchKIbgv8= -----END CERTIFICATE-----Generated at Tue Oct 6 21:43:23 2026 by rpki-client