$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa File: 2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa (raw, json) Hash identifier: CYmjlGJZeyv0+XMo7lgR4Xw1Nmwge/VII6mR5JwfXlM= Subject key identifier: F9:D4:64:FB:39:72:B1:AF:A5:CD:D2:EE:C7:17:97:E9:86:C0:5C:13 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983324934D098E28E11B800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:32:49:34:d0:98:e2:8e:11:b8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c2f24f52-62fe-40f2-aaf6-2a77552e2494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:39:78:5a:a4:11:c1:66:b7:1e:11:5c:49:c4: 72:70:29:e4:46:80:09:37:ca:de:72:69:fa:2c:c4: 12:e4:72:a7:a2:4b:97:d1:7f:3f:40:e3:4b:2c:44: d9:cf:55:7b:96:58:e3:b2:84:38:aa:7b:2f:54:58: 84:4e:2c:c7:b9:09:d7:49:86:b7:e1:00:88:81:71: 83:54:e4:2c:97:ed:e9:2e:5c:a6:2c:de:0d:71:c4: f7:29:2e:2f:96:e6:85:39:21:e0:22:0c:72:0e:73: 07:6a:55:d8:65:9f:67:eb:9b:7c:25:70:58:cd:6b: 27:8c:19:e8:3d:2a:12:d8:13:33:d4:38:e5:f0:dc: a6:19:be:05:58:01:62:00:46:3b:9f:0f:a6:6b:4b: c4:f9:d6:bd:db:44:4d:d3:7a:20:37:ae:62:0e:36: 86:af:62:97:04:d9:ff:ee:eb:0e:16:27:8e:27:ce: 74:f6:e1:62:d1:36:42:b5:5d:80:ef:bc:bb:d7:d2: ea:5f:9e:c1:ef:ed:4b:3c:42:4e:23:24:c3:a0:33: 09:07:e9:dd:33:14:40:67:90:23:34:b4:7e:5d:be: f7:a9:2b:b1:ff:a0:df:9f:60:f5:58:d9:97:63:b6: 68:e1:b2:6d:b6:58:79:85:d2:a0:c4:81:d1:6a:30: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:D4:64:FB:39:72:B1:AF:A5:CD:D2:EE:C7:17:97:E9:86:C0:5C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2c55fff8-f55e-353b-a3e5-c6b2dff9362c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:91:89:1b:fe:8d:03:7a:1a:77:be:55:93:2b:ff:73:73:7e: ef:2a:16:5e:9a:c8:a5:5a:81:60:0b:30:eb:a3:c1:bc:77:b7: 1a:a6:c7:a6:ae:3a:cc:d3:c0:6e:dd:99:2d:d8:a2:12:de:0b: 22:f3:2d:9b:70:f4:36:e6:57:57:5b:d9:90:d8:e5:5e:f4:e9: 07:28:da:ad:40:08:b4:e1:8e:97:80:8e:7b:9a:eb:46:7e:c5: af:f7:75:ce:41:ea:be:e5:c6:1e:55:99:af:f2:c1:48:51:64: 6a:b1:ec:50:6d:64:29:0e:bf:2b:ac:4b:3b:14:f0:d3:2a:15: 7e:54:b2:05:4c:f9:da:fa:01:50:81:2f:4e:17:72:5e:a4:0b: 07:27:48:04:2e:b5:73:80:3c:5f:f3:0f:38:3d:e4:cc:f3:ab: e7:bb:86:e2:de:18:50:80:44:73:fa:35:aa:fd:28:a3:e4:93: 70:8c:1f:62:ce:74:b7:8e:0e:91:12:fc:d4:27:48:a8:e0:9d: fb:66:10:0d:75:26:f2:7f:29:d6:ae:cd:8f:36:e3:af:33:4e: cb:88:27:f9:ef:6f:1f:a7:68:43:3a:f7:7c:1f:9c:8d:2a:39: c8:5e:8a:42:42:ef:d5:b8:ce:a9:3a:6c:f0:ab:e7:d0:21:24: 48:01:68:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgzJJNNCY4o4RuAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzJmMjRmNTItNjJmZS00MGYyLWFhZjYtMmE3NzU1MmUyNDk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zl4WqQRwWa3HhFcScRycCnkRoAJN8recmn6 LMQS5HKnokuX0X8/QONLLETZz1V7lljjsoQ4qnsvVFiETizHuQnXSYa34QCIgXGD VOQsl+3pLlymLN4NccT3KS4vluaFOSHgIgxyDnMHalXYZZ9n65t8JXBYzWsnjBno PSoS2BMz1Djl8NymGb4FWAFiAEY7nw+ma0vE+da920RN03ogN65iDjaGr2KXBNn/ 7usOFieOJ8509uFi0TZCtV2A77y719LqX57B7+1LPEJOIyTDoDMJB+ndMxRAZ5Aj NLR+Xb73qSux/6Dfn2D1WNmXY7Zo4bJttlh5hdKgxIHRajAzdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnUZPs5crGvpc3S7scXl+mGwFwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmM1NWZmZjgtZjU1ZS0z NTNiLWEzZTUtYzZiMmRmZjkzNjJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCRiRv+jQN6Gne+VZMr/3Nzfu8qFl6ayKVagWALMOujwbx3txqmx6au OszTwG7dmS3YohLeCyLzLZtw9DbmV1db2ZDY5V706Qco2q1ACLThjpeAjnua60Z+ xa/3dc5B6r7lxh5Vma/ywUhRZGqx7FBtZCkOvyusSzsU8NMqFX5UsgVM+dr6AVCB L04Xcl6kCwcnSAQutXOAPF/zDzg95Mzzq+e7huLeGFCARHP6Nar9KKPkk3CMH2LO dLeODpES/NQnSKjgnftmEA11JvJ/KdauzY82468zTsuIJ/nvbx+naEM693wfnI0q OcheikJC79W4zqk6bPCr59AhJEgBaE4= -----END CERTIFICATE-----Generated at Sun Oct 4 17:15:15 2026 by rpki-client