$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/008327d4-9650-3012-9b90-ac9a6dda47d6.roa File: 008327d4-9650-3012-9b90-ac9a6dda47d6.roa (raw, json) Hash identifier: FF/1l2+eck81WIPBUwmEdDq9QgW+VweOEbivb8rUD4U= Subject key identifier: 19:BD:47:D3:9D:14:66:5D:1A:DD:F7:31:21:11:E6:AA:D7:89:10:72 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AFE785B3CA37A4974DA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/008327d4-9650-3012-9b90-ac9a6dda47d6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.2.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:fe:78:5b:3c:a3:7a:49:74:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4ad8a131-8e8d-469b-8384-2885f104df15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:80:2c:0f:00:14:f3:23:79:54:57:aa:b0:3f: 7d:a3:1d:ad:76:56:06:78:df:8d:e6:4a:ea:34:cd: 78:3e:62:4b:ca:fc:13:ae:3f:1d:47:6f:03:c6:5c: d4:71:0d:0f:78:ab:a2:b6:43:9a:55:bc:53:1d:db: 3b:04:ce:01:95:e8:9f:5f:ea:12:ef:d3:a6:e1:04: 80:cd:b2:b1:f5:63:6b:6c:ca:78:7d:be:cf:c7:04: ba:ff:66:d8:06:a4:11:68:b6:1d:d6:ca:d2:74:90: 50:2c:62:5d:db:8e:a4:74:af:bc:06:9a:e6:8a:e5: 32:e2:05:44:67:6d:28:41:72:6e:3a:f2:d7:05:1c: e1:c6:62:7c:36:67:0c:e2:30:bf:f6:45:32:d0:3b: d9:2a:27:70:b4:69:33:85:90:ce:3a:1a:5f:5d:f7: 98:f1:84:44:d9:0d:2a:0e:8d:cc:8b:b6:92:11:93: 5b:bf:58:a7:2d:a9:ed:8e:73:30:4d:a0:36:ea:01: e7:54:42:c5:c8:b9:ad:f8:83:ba:1c:7d:6b:87:ec: c2:06:17:1f:4c:55:cb:fa:31:aa:a6:1a:92:d1:6a: 8f:f0:fb:ee:6e:09:f1:bc:b6:d9:56:08:64:f5:4f: e0:6d:40:ca:51:a7:2b:15:a4:27:40:32:d0:e9:45: 72:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:BD:47:D3:9D:14:66:5D:1A:DD:F7:31:21:11:E6:AA:D7:89:10:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/008327d4-9650-3012-9b90-ac9a6dda47d6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.2.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:09:13:e9:70:25:a7:36:5e:8f:4f:dd:ed:25:a5:9f:08:62: d7:4a:bd:a6:d2:3c:7a:d7:fe:22:88:ce:88:47:a2:43:a6:7d: 9a:97:5b:dd:f5:95:73:4e:10:89:8d:69:02:7e:ce:fe:35:00: 0f:a2:be:88:fb:c1:ef:70:bc:1e:54:bd:aa:69:d7:e4:95:61: c5:2d:e7:19:e4:71:f1:c6:62:3e:6c:54:51:9c:c2:b0:8d:7a: 91:8a:0e:0e:63:04:60:b1:77:2c:06:25:4a:0a:f9:68:22:64: c6:f5:86:7e:33:3f:b4:01:01:88:ef:8b:4c:80:6c:ca:30:2a: 93:dd:a0:2f:dc:3a:68:d7:b6:2e:bc:85:1a:89:a4:21:e4:6e: 95:c1:f6:f2:c8:d3:2d:58:35:1d:d1:b2:dd:d4:2c:72:c4:cf: e5:7c:c3:59:fc:04:2b:fa:17:94:a2:e5:78:c9:2c:41:0d:67: c4:eb:f0:62:ce:9f:8a:ed:ec:08:23:c3:70:60:5a:bc:6c:a5: 97:cc:e5:57:6e:08:5e:07:26:50:7e:9b:f5:ed:6e:cf:80:25: 9c:ff:3f:27:f1:a5:f6:b0:53:3f:00:f3:98:f7:e5:70:7a:32: a8:42:62:4e:f9:3a:83:fa:e6:bb:32:bd:a2:c0:a8:ca:4a:8f: 57:9b:08:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jev54Wzyjekl02gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFkOGExMzEtOGU4ZC00NjliLTgzODQtMjg4NWYxMDRkZjE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoAsDwAU8yN5VFeqsD99ox2tdlYGeN+N5krq NM14PmJLyvwTrj8dR28DxlzUcQ0PeKuitkOaVbxTHds7BM4BleifX+oS79Om4QSA zbKx9WNrbMp4fb7PxwS6/2bYBqQRaLYd1srSdJBQLGJd246kdK+8BprmiuUy4gVE Z20oQXJuOvLXBRzhxmJ8NmcM4jC/9kUy0DvZKidwtGkzhZDOOhpfXfeY8YRE2Q0q Do3Mi7aSEZNbv1inLantjnMwTaA26gHnVELFyLmt+IO6HH1rh+zCBhcfTFXL+jGq phqS0WqP8PvubgnxvLbZVghk9U/gbUDKUacrFaQnQDLQ6UVygQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBm9R9OdFGZdGt33MSER5qrXiRByMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDA4MzI3ZDQtOTY1MC0z MDEyLTliOTAtYWM5YTZkZGE0N2Q2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQJE+lwJac2Xo9P3e0lpZ8IYtdKvabSPHrX/iKIzohHokOmfZqXW931 lXNOEImNaQJ+zv41AA+ivoj7we9wvB5Uvapp1+SVYcUt5xnkcfHGYj5sVFGcwrCN epGKDg5jBGCxdywGJUoK+WgiZMb1hn4zP7QBAYjvi0yAbMowKpPdoC/cOmjXti68 hRqJpCHkbpXB9vLI0y1YNR3Rst3ULHLEz+V8w1n8BCv6F5Si5XjJLEENZ8Tr8GLO n4rt7Agjw3BgWrxspZfM5VduCF4HJlB+m/Xtbs+AJZz/PyfxpfawUz8A85j35XB6 MqhCYk75OoP65rsyvaLAqMpKj1ebCFg= -----END CERTIFICATE-----Generated at Wed Oct 7 00:38:07 2026 by rpki-client