$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa File: 1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa (raw, json) Hash identifier: 3CnVlUUlhEFqrElYvR34Muq4dgyIXBuk9qnYlPNTCxg= Subject key identifier: B2:23:07:50:44:2D:39:78:7C:56:E8:FF:C7:9B:39:55:80:4B:3C:3A Certificate issuer: /CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda Certificate serial: 010D0C9F4328584F4972FA0424CA41AD80829D00 Authority key identifier: 4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 4913 IP address blocks: 72.2.224.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:72:fa:04:24:ca:41:ad:80:82:9d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2b0745c6-87b9-4dc9-87d6-03dfe0664bda Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d242914b-df77-4686-83a9-53fdd7a9f355 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:20:c4:de:91:22:4b:d9:f6:d2:d9:26:ef:c9: d2:20:e7:47:ca:54:46:00:65:3e:bc:e0:ba:1b:45: 95:aa:b9:70:e5:22:48:db:91:90:0d:8c:c5:a0:08: c7:d4:08:3e:b1:78:ed:0d:55:51:85:0d:07:f5:8f: 83:e8:e2:ae:1d:84:13:9f:e6:73:79:35:90:80:e1: 94:6f:d1:5f:d5:ac:88:37:c7:4a:af:9e:4b:00:ff: ee:9a:9a:64:47:01:2a:f8:12:dc:da:1f:5a:09:45: 95:23:6e:08:46:80:3d:95:47:ed:eb:58:bb:72:5c: c1:b5:48:8f:90:a0:68:30:f2:6f:23:48:8d:ad:d5: ac:df:08:cc:f8:5d:81:7b:f2:49:43:f6:9b:19:78: aa:95:e7:68:04:f0:98:8e:c2:c5:de:2d:55:39:df: 0e:94:e7:0e:92:63:71:45:db:2a:7d:13:46:54:b9: 0f:30:61:fc:d4:95:aa:be:72:e5:73:c1:4f:95:f1: 12:f6:f2:9d:36:38:01:f1:b6:fe:49:4b:b9:57:81: a2:15:8d:6f:30:ae:3b:f2:74:01:65:b4:46:77:9d: 45:56:02:f4:32:96:03:02:fd:b8:78:a3:c6:2a:97: bf:bf:99:05:d9:2f:a7:4d:e9:97:63:27:66:16:58: b0:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:23:07:50:44:2D:39:78:7C:56:E8:FF:C7:9B:39:55:80:4B:3C:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/1a4d5eb6-24f5-342b-9b1f-afddf704c416.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.crl X509v3 Authority Key Identifier: keyid:4B:DB:D2:A6:55:98:B7:4D:D5:AE:15:A8:5F:56:3E:08:1E:56:EF:47 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b0745c6-87b9-4dc9-87d6-03dfe0664bda.cer sbgp-ipAddrBlock: critical IPv4: 72.2.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:43:cb:e8:54:f8:f8:f2:12:17:60:86:e8:37:57:8a:85:d2: 91:5f:d1:2b:99:e2:01:50:e6:3e:8b:0c:29:4e:8b:41:3e:6c: 30:54:51:5d:f3:5d:d4:63:8c:95:1e:dc:6f:5f:bd:fa:a4:09: 3d:24:e6:04:3c:ba:74:9e:02:69:2a:89:ca:b3:35:36:c2:ac: 80:c7:d2:a3:cd:97:ab:8d:a9:d1:a2:69:2c:57:e8:7e:c5:e4: 10:35:47:f4:de:66:62:a2:41:d4:96:50:43:ca:8f:d2:48:87: 41:ed:24:e4:0e:0d:ee:4b:6d:75:2f:75:a5:76:3e:e7:69:e5: 6b:ac:db:65:5f:2f:d4:91:08:bd:57:91:c3:d6:a7:c1:af:8c: c8:bb:d1:08:a2:f8:b2:de:83:2b:3d:60:3a:25:61:e8:6b:bb: 2b:e1:24:71:70:8f:78:e9:b7:d1:2a:93:e8:78:f9:ff:6c:5e: d8:d7:8f:52:21:fd:36:63:83:f7:6b:0d:02:9d:b4:fb:44:91: c0:bd:a8:c2:cb:7b:9b:97:be:0c:11:a7:cd:ea:2b:a1:01:af: b8:16:12:5e:c4:8e:7f:eb:f0:db:a0:c1:1f:06:80:e5:ee:64: 34:99:aa:a4:8d:6e:88:f5:cf:cc:a1:4a:e7:8a:df:76:08:81: e1:3e:18:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JcvoEJMpBrYCCnQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmIwNzQ1YzYtODdiOS00ZGM5LTg3ZDYtMDNkZmUwNjY0 YmRhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDI0MjkxNGItZGY3Ny00Njg2LTgzYTktNTNmZGQ3YTlmMzU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSDE3pEiS9n20tkm78nSIOdHylRGAGU+vOC6 G0WVqrlw5SJI25GQDYzFoAjH1Ag+sXjtDVVRhQ0H9Y+D6OKuHYQTn+ZzeTWQgOGU b9Ff1ayIN8dKr55LAP/umppkRwEq+BLc2h9aCUWVI24IRoA9lUft61i7clzBtUiP kKBoMPJvI0iNrdWs3wjM+F2Be/JJQ/abGXiqledoBPCYjsLF3i1VOd8OlOcOkmNx RdsqfRNGVLkPMGH81JWqvnLlc8FPlfES9vKdNjgB8bb+SUu5V4GiFY1vMK478nQB ZbRGd51FVgL0MpYDAv24eKPGKpe/v5kF2S+nTemXYydmFliwwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIjB1BELTl4fFbo/8ebOVWASzw6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjA3 NDVjNi04N2I5LTRkYzktODdkNi0wM2RmZTA2NjRiZGEvMWE0ZDVlYjYtMjRmNS0z NDJiLTliMWYtYWZkZGY3MDRjNDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmIwNzQ1YzYtODdiOS00ZGM5LTg3 ZDYtMDNkZmUwNjY0YmRhLzJiMDc0NWM2LTg3YjktNGRjOS04N2Q2LTAzZGZlMDY2 NGJkYS5jcmwwHwYDVR0jBBgwFoAUS9vSplWYt03VrhWoX1Y+CB5W70cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjA3NDVjNi04N2I5LTRkYzktODdkNi0wM2Rm ZTA2NjRiZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESALgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJDy+hU+PjyEhdghug3V4qF0pFf0SuZ4gFQ5j6LDClOi0E+bDBUUV3z XdRjjJUe3G9fvfqkCT0k5gQ8unSeAmkqicqzNTbCrIDH0qPNl6uNqdGiaSxX6H7F 5BA1R/TeZmKiQdSWUEPKj9JIh0HtJOQODe5LbXUvdaV2Pudp5Wus22VfL9SRCL1X kcPWp8GvjMi70Qii+LLegys9YDolYehruyvhJHFwj3jpt9Eqk+h4+f9sXtjXj1Ih /TZjg/drDQKdtPtEkcC9qMLLe5uXvgwRp83qK6EBr7gWEl7Ejn/r8NugwR8GgOXu ZDSZqqSNboj1z8yhSueK33YIgeE+GNw= -----END CERTIFICATE-----Generated at Sat Sep 26 03:53:08 2026 by rpki-client