$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa File: 25ffd5c2-35f4-3ecb-9557-6964354a7797.roa (raw, json) Hash identifier: KB7+ksG/850mGy8MphHkucwsizG0uOO0idirWX/ebb0= Subject key identifier: 66:BC:C6:5D:C1:2D:9A:6C:D3:B9:22:67:76:47:7E:A8:73:D5:1B:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B10499A31F86088CBD200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:10:49:9a:31:f8:60:88:cb:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a8f5ed6-f1d1-4b1c-a83c-4f4b1b6d8526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:b4:03:4e:8e:b7:15:97:e2:dc:bc:08:6a:5b: ed:e6:da:e5:8f:c2:a4:41:17:0d:27:3e:ca:52:e7: 39:d6:35:94:f3:a4:7f:8c:92:f8:15:08:ff:7f:c8: a1:e1:14:03:6f:16:28:ea:28:b6:45:b3:9e:8c:0f: 0e:fc:8e:e9:3b:b1:3d:d2:54:38:95:c5:37:51:e8: 0b:5a:17:84:b0:6e:82:1c:af:a7:66:04:4c:51:65: ee:1d:e4:95:b3:fd:ef:7f:c5:aa:71:e4:09:99:73: 70:18:16:d1:09:46:ed:73:35:22:fe:cd:fa:08:cd: af:c3:45:68:bd:27:fc:84:4d:a5:34:99:b8:d8:de: fc:b4:fc:58:bc:49:63:16:a1:7e:59:95:1c:d4:94: 0a:67:15:29:9f:97:a0:14:00:82:be:66:15:23:24: 55:01:32:06:e5:b0:9f:b9:c4:4b:4d:ce:35:b5:40: ad:dd:df:f6:d6:df:83:ec:bd:22:3e:d6:16:0c:e5: 05:15:d2:f2:77:8e:45:f4:f4:a4:22:02:b7:7c:15: 13:d4:2d:f6:da:27:12:46:26:a0:1d:a7:6b:7a:60: 32:b5:0c:28:ab:a5:5f:95:ca:a3:dc:fc:99:d1:0d: 46:e0:e0:cc:37:a8:e4:63:40:23:94:7c:d9:1d:0d: f8:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:BC:C6:5D:C1:2D:9A:6C:D3:B9:22:67:76:47:7E:A8:73:D5:1B:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/25ffd5c2-35f4-3ecb-9557-6964354a7797.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:6e:e0:fe:c1:ce:88:56:af:5f:33:df:10:d0:6c:77:2d:da: a5:5b:df:ba:0b:dd:63:7d:1d:74:84:10:22:1d:17:d7:b6:01: cd:52:17:ec:01:18:52:e4:2b:d0:e9:83:39:ae:14:fd:4a:e8: a6:60:3f:71:8c:6c:f1:9b:9e:ad:03:f5:00:e9:ae:9a:87:ce: 0c:68:05:e1:d9:6a:0e:09:4d:ff:f0:1b:c4:ea:13:c1:75:60: 53:26:11:06:fb:45:83:65:c7:90:99:c0:a5:4f:73:22:cc:bb: 22:df:42:e8:a5:a5:e2:85:89:87:34:1b:36:63:05:67:93:13: a1:48:df:7e:a5:48:ee:85:e5:4f:c7:e1:ea:19:8d:c6:8e:c8: c6:f8:9b:9d:6d:72:0c:24:14:9f:bb:14:51:a2:d7:3d:f3:34: 3a:cd:92:d8:5b:45:5b:16:2b:52:75:07:e1:97:80:6f:9a:d6: b4:d7:c5:cf:9e:0c:9f:e4:0b:f8:0b:c4:a9:8f:a2:9a:f1:65: fe:9b:45:ea:fa:b5:a7:da:fc:0b:fd:b6:b7:75:8d:b9:2d:7b: c5:53:6d:81:d2:3a:b4:59:a4:e0:1d:ee:70:b8:bb:ae:55:48: ed:ef:75:27:00:b9:94:48:3a:ac:fe:95:b4:85:a8:11:2f:bc: 10:57:69:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JexBJmjH4YIjL0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGE4ZjVlZDYtZjFkMS00YjFjLWE4M2MtNGY0YjFiNmQ4NTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7QDTo63FZfi3LwIalvt5trlj8KkQRcNJz7K Uuc51jWU86R/jJL4FQj/f8ih4RQDbxYo6ii2RbOejA8O/I7pO7E90lQ4lcU3UegL WheEsG6CHK+nZgRMUWXuHeSVs/3vf8WqceQJmXNwGBbRCUbtczUi/s36CM2vw0Vo vSf8hE2lNJm42N78tPxYvEljFqF+WZUc1JQKZxUpn5egFACCvmYVIyRVATIG5bCf ucRLTc41tUCt3d/21t+D7L0iPtYWDOUFFdLyd45F9PSkIgK3fBUT1C322icSRiag HadremAytQwoq6Vflcqj3PyZ0Q1G4ODMN6jkY0AjlHzZHQ34qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGa8xl3BLZps07kiZ3ZHfqhz1RthMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjVmZmQ1YzItMzVmNC0z ZWNiLTk1NTctNjk2NDM1NGE3Nzk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3ZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlu4P7BzohWr18z3xDQbHct2qVb37oL3WN9HXSEECIdF9e2Ac1SF+wB GFLkK9DpgzmuFP1K6KZgP3GMbPGbnq0D9QDprpqHzgxoBeHZag4JTf/wG8TqE8F1 YFMmEQb7RYNlx5CZwKVPcyLMuyLfQuilpeKFiYc0GzZjBWeTE6FI336lSO6F5U/H 4eoZjcaOyMb4m51tcgwkFJ+7FFGi1z3zNDrNkthbRVsWK1J1B+GXgG+a1rTXxc+e DJ/kC/gLxKmPoprxZf6bRer6tafa/Av9trd1jbkte8VTbYHSOrRZpOAd7nC4u65V SO3vdScAuZRIOqz+lbSFqBEvvBBXacI= -----END CERTIFICATE-----Generated at Mon Sep 28 13:22:59 2026 by rpki-client