$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa File: f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa (raw, json) Hash identifier: aNN6iQdeLsjmUKt8DGJGFj+UwFqFVyCXa3bH/iKadMw= Subject key identifier: 12:E1:C0:C1:5C:12:7E:02:85:D8:D6:89:C6:28:74:57:6C:0A:9E:E2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D8F36329F7336FBD3A9C4 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:8f:36:32:9f:73:36:fb:d3:a9:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=d65e751a-d172-4fc2-ad11-39ab66c77399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:14:58:09:a1:0a:ce:d3:b7:6f:7a:76:7e:49: 0f:25:80:4d:12:d2:5f:99:cd:39:d3:ba:84:03:7c: 66:1e:b7:75:d1:34:32:f8:c2:89:7a:20:f5:36:e6: d0:82:04:8c:18:3c:7a:f5:0b:d6:84:70:75:7d:41: a8:39:5f:6f:1a:38:3d:c6:37:e0:04:65:0a:59:17: 1d:38:08:26:7e:7d:18:c8:b8:97:7d:63:f3:3e:69: fb:1d:f3:df:b2:04:92:4b:7f:85:95:4c:15:c0:d4: bd:21:c6:b3:ae:61:a7:ff:f9:92:20:b5:2b:75:1d: 54:e3:61:ef:bf:f8:3c:a9:69:3f:1a:94:85:11:87: 95:b4:38:ce:31:00:b0:6c:d1:0f:7a:90:e8:99:cf: dd:db:b7:68:a1:ea:66:bb:6d:e5:64:da:0d:65:13: 42:86:a3:8e:9d:da:e0:e7:a3:cf:4a:23:eb:b4:2b: 5b:d8:e4:6f:5c:b8:9b:9b:a3:b0:09:9a:71:c8:f4: a8:cf:7e:fc:f7:a1:c7:f6:7c:4e:ab:ef:f2:54:72: 4f:23:49:fe:10:9f:3e:9d:48:db:b8:07:2b:ab:b8: b3:6c:90:0c:23:b0:62:0f:bf:1c:ba:d0:1c:3a:45: 5e:a6:02:0d:69:11:3a:f8:08:d5:14:be:bd:4c:46: 5f:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E1:C0:C1:5C:12:7E:02:85:D8:D6:89:C6:28:74:57:6C:0A:9E:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:6a:0d:24:93:8c:44:72:d1:3e:16:47:39:20:cc:4d:b6:6e: 45:7d:cc:c8:6d:f2:03:06:6a:60:43:ec:37:d3:45:2f:7f:b6: 5e:d1:ce:20:2f:b5:c0:34:58:ad:ff:7d:4c:b4:45:ad:69:7e: e6:a5:18:0b:ae:17:71:29:32:d2:d2:54:22:f9:29:d3:f3:cc: c8:82:05:c3:01:34:8a:00:64:17:39:8d:25:bb:0b:f2:9b:4c: f2:bf:89:92:5e:1e:07:84:c1:03:f8:fe:67:e3:67:fb:ab:28: 23:f6:ca:e5:02:76:18:71:e0:3b:db:14:5d:30:68:36:f3:fb: 31:64:4f:ce:9f:2b:7b:da:93:1a:94:bd:95:7b:9d:cf:c8:d9: e8:b9:95:c4:82:04:ec:4f:f2:b9:d3:0e:65:ca:ff:24:c7:9f: 81:21:04:4e:b5:b3:44:54:5d:74:5f:d3:b9:c4:59:0c:12:15: b4:4a:32:c7:68:29:7f:09:9f:63:8c:9b:8d:a1:02:a4:fc:52: 97:1d:a1:50:eb:6d:28:31:d4:70:ff:89:93:66:3a:70:ca:c4: 9a:bb:a7:47:7a:c3:eb:c0:49:0b:02:81:a7:26:b0:5c:e2:df: 11:7d:30:3e:76:91:ff:6d:3f:43:4a:9e:a2:94:a0:ad:30:2e: 1c:72:32:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnY82Mp9zNvvTqcQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZDY1ZTc1MWEtZDE3Mi00ZmMyLWFkMTEtMzlhYjY2Yzc3Mzk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBRYCaEKztO3b3p2fkkPJYBNEtJfmc0507qE A3xmHrd10TQy+MKJeiD1NubQggSMGDx69QvWhHB1fUGoOV9vGjg9xjfgBGUKWRcd OAgmfn0YyLiXfWPzPmn7HfPfsgSSS3+FlUwVwNS9IcazrmGn//mSILUrdR1U42Hv v/g8qWk/GpSFEYeVtDjOMQCwbNEPepDomc/d27dooepmu23lZNoNZRNChqOOndrg 56PPSiPrtCtb2ORvXLibm6OwCZpxyPSoz37896HH9nxOq+/yVHJPI0n+EJ8+nUjb uAcrq7izbJAMI7BiD78cutAcOkVepgINaRE6+AjVFL69TEZfqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBLhwMFcEn4ChdjWicYodFdsCp7iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjZlZDQ0MzctMmMwNy0z ZjVkLWIwN2QtNWVjZjI4ZmRjNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJxqDSSTjERy0T4WRzkgzE22bkV9zMht8gMGamBD7DfTRS9/tl7RziAv tcA0WK3/fUy0Ra1pfualGAuuF3EpMtLSVCL5KdPzzMiCBcMBNIoAZBc5jSW7C/Kb TPK/iZJeHgeEwQP4/mfjZ/urKCP2yuUCdhhx4DvbFF0waDbz+zFkT86fK3vakxqU vZV7nc/I2ei5lcSCBOxP8rnTDmXK/yTHn4EhBE61s0RUXXRf07nEWQwSFbRKMsdo KX8Jn2OMm42hAqT8UpcdoVDrbSgx1HD/iZNmOnDKxJq7p0d6w+vASQsCgacmsFzi 3xF9MD52kf9tP0NKnqKUoK0wLhxyMiU= -----END CERTIFICATE-----Generated at Wed Jul 29 09:20:01 2026 by rpki-client