$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa File: 287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa (raw, json) Hash identifier: lYHoK8u4GEGjFSJ0SsuKir6YX+GqTq2J/7ff/2qpJRc= Subject key identifier: 25:23:A1:0D:0F:C8:E6:24:88:C2:61:51:92:4F:35:73:DE:87:5B:05 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983337727288D92E7D5E1E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:33:77:27:28:8d:92:e7:d5:e1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ea64e98a-25c0-4828-99c6-c49cb34fd6e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:9d:b3:33:68:ae:bf:3f:57:ab:32:a9:27:2a: 44:36:43:f6:13:3f:c7:93:50:cd:3b:fa:9b:87:ec: 97:bb:e3:fe:25:4d:bb:02:97:59:94:30:f8:af:e6: da:56:e4:c0:12:5d:e1:f8:5d:13:06:40:ab:4a:4b: 99:c8:a4:3b:8c:ef:12:98:6d:e3:00:c7:73:4b:29: 6c:da:e9:40:8e:5a:d7:da:6d:be:a5:c2:09:5e:ba: be:8e:00:c9:d8:70:36:aa:12:39:cc:31:35:a0:8f: 30:13:75:3b:c9:43:98:85:77:7c:3e:64:7e:d4:63: 74:a5:78:9d:4f:6b:4e:4f:da:d5:b0:75:d2:1e:a3: a0:b3:58:40:f7:10:a5:7a:33:ac:20:65:7d:c7:07: 89:15:3d:53:68:ae:ec:0a:54:26:ae:3e:99:24:5a: 8e:e7:a5:91:94:f7:e8:94:85:25:d1:9b:51:62:1d: d2:e5:03:f9:97:79:59:43:da:ef:1c:36:6e:d2:f0: 18:30:c3:b8:23:0a:a2:ec:8b:43:12:f3:27:70:68: a4:21:ab:36:de:d9:92:88:4a:f6:85:93:c8:ec:ef: 74:e9:55:03:6a:9c:55:bb:ea:7e:a2:c4:63:0a:81: bd:8b:09:a4:98:55:90:3a:c8:85:f1:54:2b:5a:d3: 3c:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:23:A1:0D:0F:C8:E6:24:88:C2:61:51:92:4F:35:73:DE:87:5B:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/287efa53-45f2-367f-bdb8-1366c3c8c5c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:dc:ca:8e:73:21:52:16:be:84:d5:57:d5:24:70:a5:0e:d9: f3:29:c3:29:8d:75:20:a4:58:6b:72:54:14:eb:2e:53:f5:da: 4f:cc:86:e3:a9:6d:97:f9:38:ee:4c:4a:a9:6d:3f:cd:48:d3: e8:3d:0a:3d:75:e7:dd:b8:7d:c1:83:8e:cd:f5:e3:7c:38:70: 3d:f7:8f:fa:d7:be:75:36:d5:76:48:bb:05:fc:11:0d:20:9a: 7f:03:ae:e1:e6:cf:ef:e7:f8:d2:7b:5d:61:0e:6e:aa:7f:13: 4b:9a:02:9c:ea:53:bc:18:53:0c:f0:6a:42:cb:d4:6b:ce:d5: a3:52:64:08:e3:47:4b:dc:92:4e:18:f2:72:8b:98:7a:c6:e7: d0:9d:f4:de:2b:c0:1b:a3:9d:a7:1c:5e:c3:04:68:71:88:e8: 0a:f7:c9:c2:4b:56:7b:af:98:87:53:7f:e4:17:3f:1c:38:9f: dd:2d:01:24:2f:55:15:1f:e9:9b:8a:79:bd:39:a2:a9:f1:3a: 4b:79:93:29:42:3a:da:22:80:11:cb:e4:9f:31:dd:7d:b2:9a: 15:7f:9f:52:08:9c:1c:c4:36:4c:04:7f:0b:c0:83:42:67:3e: 54:04:6d:91:f5:16:47:93:88:57:34:7f:d9:2b:43:d5:19:d5: 79:f7:49:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgzN3JyiNkufV4eAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWE2NGU5OGEtMjVjMC00ODI4LTk5YzYtYzQ5Y2IzNGZkNmUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhJ2zM2iuvz9XqzKpJypENkP2Ez/Hk1DNO/qb h+yXu+P+JU27ApdZlDD4r+baVuTAEl3h+F0TBkCrSkuZyKQ7jO8SmG3jAMdzSyls 2ulAjlrX2m2+pcIJXrq+jgDJ2HA2qhI5zDE1oI8wE3U7yUOYhXd8PmR+1GN0pXid T2tOT9rVsHXSHqOgs1hA9xClejOsIGV9xweJFT1TaK7sClQmrj6ZJFqO56WRlPfo lIUl0ZtRYh3S5QP5l3lZQ9rvHDZu0vAYMMO4Iwqi7ItDEvMncGikIas23tmSiEr2 hZPI7O906VUDapxVu+p+osRjCoG9iwmkmFWQOsiF8VQrWtM8MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCUjoQ0PyOYkiMJhUZJPNXPeh1sFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjg3ZWZhNTMtNDVmMi0z NjdmLWJkYjgtMTM2NmMzYzhjNWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK30MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3cyo5zIVIWvoTVV9UkcKUO2fMpwymNdSCkWGtyVBTrLlP12k/MhuOp bZf5OO5MSqltP81I0+g9Cj115924fcGDjs3143w4cD33j/rXvnU21XZIuwX8EQ0g mn8DruHmz+/n+NJ7XWEObqp/E0uaApzqU7wYUwzwakLL1GvO1aNSZAjjR0vckk4Y 8nKLmHrG59Cd9N4rwBujnaccXsMEaHGI6Ar3ycJLVnuvmIdTf+QXPxw4n90tASQv VRUf6ZuKeb05oqnxOkt5kylCOtoigBHL5J8x3X2ymhV/n1IInBzENkwEfwvAg0Jn PlQEbZH1FkeTiFc0f9krQ9UZ1Xn3SRU= -----END CERTIFICATE-----Generated at Sat Sep 26 07:30:58 2026 by rpki-client