$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15fb5031-6071-33f9-b480-0bec8727364f.roa File: 15fb5031-6071-33f9-b480-0bec8727364f.roa (raw, json) Hash identifier: DGCZoN3c1uQGWWx6KZJ2g6INw0hZxyqavQb6BtVUNpc= Subject key identifier: 1D:60:2F:B6:01:E7:5C:53:FC:F0:9B:87:AC:78:81:AB:26:A1:22:BD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B004E5A6E80424A25E300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15fb5031-6071-33f9-b480-0bec8727364f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.43.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:00:4e:5a:6e:80:42:4a:25:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=7f500cb1-78a1-4e77-9af0-bafe8afb124d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:8a:6b:b1:b4:24:31:1a:e6:b5:bb:13:b2:c5: ae:8a:13:4a:11:10:3c:29:d7:93:eb:a9:d2:5c:26: 23:82:50:e8:41:8c:5d:8d:a6:42:ec:29:c8:54:f3: ce:53:e0:71:bb:86:13:a7:a3:23:bd:3a:d0:a2:36: 96:91:27:b7:ea:64:d8:31:4f:41:c3:b0:a2:16:7f: dc:7c:63:22:1d:db:70:43:85:c4:6e:be:68:71:a6: cb:3b:72:27:56:b2:b4:b2:ae:a3:7d:80:6b:23:3b: 00:f4:d0:b6:b9:93:a6:b0:6b:fa:1f:ba:42:de:25: 93:43:aa:4d:65:07:d7:04:35:da:cb:3b:21:f4:c7: 8f:a8:04:14:f6:03:9a:ec:52:ce:eb:ba:58:43:6d: 24:64:a5:5b:93:ef:58:e5:a8:5d:91:13:0e:50:11: f5:38:43:44:0c:bb:a1:9e:77:e5:76:94:8c:cc:e0: d1:6c:10:ea:22:cd:4f:a0:85:e5:7f:8d:ef:b5:2d: 3f:86:70:13:a2:25:f3:63:a5:23:61:1d:2f:7c:a7: 0b:ae:16:c8:2a:54:e0:0e:8f:b2:53:25:1f:58:98: ec:3e:48:6d:cc:11:cf:68:ad:86:f6:30:1a:6f:70: 02:60:de:f5:09:0e:98:77:49:4a:bd:40:38:23:08: d2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:60:2F:B6:01:E7:5C:53:FC:F0:9B:87:AC:78:81:AB:26:A1:22:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15fb5031-6071-33f9-b480-0bec8727364f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.43.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:6b:c3:68:4f:13:52:60:1b:35:bb:71:cd:6f:59:54:f8:e7: 37:e2:18:41:b5:45:02:73:14:c0:91:85:3c:20:62:4b:04:fb: ba:bf:a7:18:c4:7d:d7:a8:4c:61:ba:94:14:ae:94:81:9d:57: 99:9f:9a:2b:95:2b:41:38:fa:36:d0:1b:fb:ca:e1:d3:c0:ea: 84:ca:37:00:a2:e4:79:06:65:ad:8e:b7:cf:48:35:dc:59:3a: cc:04:9d:57:21:96:d1:56:c1:9d:05:6c:02:fa:0f:b3:06:7c: 99:de:5f:e6:6f:57:bf:f8:3d:80:82:92:c2:dc:95:24:4f:10: 45:75:42:8e:29:69:7e:b5:dc:5b:11:b9:ca:16:ec:77:93:e6: 9f:37:13:c5:18:27:16:75:47:b0:18:8f:5f:79:7e:9f:d8:88: e2:b5:3b:8e:e3:e6:08:f7:eb:84:7f:b5:76:17:d5:b5:1d:1a: 4e:e5:05:95:03:4b:5c:a9:3d:96:5f:b6:22:d8:b1:ab:3d:95: 1f:9e:3e:28:d8:fb:bc:c8:5f:e4:0f:52:e1:34:0c:b8:46:3a: 70:35:d6:f9:b3:de:9b:06:97:d0:b4:d1:d5:c4:6a:64:4c:43: 8c:27:3e:48:5f:86:0f:7a:a3:fb:9b:57:b3:ea:44:a0:15:dc: 29:3f:f1:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewBOWm6AQkol4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk N2Y1MDBjYjEtNzhhMS00ZTc3LTlhZjAtYmFmZThhZmIxMjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4prsbQkMRrmtbsTssWuihNKERA8KdeT66nS XCYjglDoQYxdjaZC7CnIVPPOU+Bxu4YTp6MjvTrQojaWkSe36mTYMU9Bw7CiFn/c fGMiHdtwQ4XEbr5ocabLO3InVrK0sq6jfYBrIzsA9NC2uZOmsGv6H7pC3iWTQ6pN ZQfXBDXayzsh9MePqAQU9gOa7FLO67pYQ20kZKVbk+9Y5ahdkRMOUBH1OENEDLuh nnfldpSMzODRbBDqIs1PoIXlf43vtS0/hnAToiXzY6UjYR0vfKcLrhbIKlTgDo+y UyUfWJjsPkhtzBHPaK2G9jAab3ACYN71CQ6Yd0lKvUA4IwjSdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB1gL7YB51xT/PCbh6x4gasmoSK9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTVmYjUwMzEtNjA3MS0z M2Y5LWI0ODAtMGJlYzg3MjczNjRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0rMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMlrw2hPE1JgGzW7cc1vWVT45zfiGEG1RQJzFMCRhTwgYksE+7q/pxjE fdeoTGG6lBSulIGdV5mfmiuVK0E4+jbQG/vK4dPA6oTKNwCi5HkGZa2Ot89INdxZ OswEnVchltFWwZ0FbAL6D7MGfJneX+ZvV7/4PYCCksLclSRPEEV1Qo4paX613FsR ucoW7HeT5p83E8UYJxZ1R7AYj195fp/YiOK1O47j5gj364R/tXYX1bUdGk7lBZUD S1ypPZZftiLYsas9lR+ePijY+7zIX+QPUuE0DLhGOnA11vmz3psGl9C00dXEamRM Q4wnPkhfhg96o/ubV7PqRKAV3Ck/8co= -----END CERTIFICATE-----Generated at Sun Oct 11 07:46:32 2026 by rpki-client