$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/376aefd4-5779-343b-922b-c172c8e9fd1f.roa File: 376aefd4-5779-343b-922b-c172c8e9fd1f.roa (raw, json) Hash identifier: Jrqa09T5x2plPq9R1OjaOtW2UB/rRgJez/EXJJ/zOx4= Subject key identifier: B1:15:99:35:64:F2:7A:FF:3B:F9:EF:45:30:46:73:26:65:1D:AE:DF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B09DB365A5DD9A1D33050 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/376aefd4-5779-343b-922b-c172c8e9fd1f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:09:db:36:5a:5d:d9:a1:d3:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4577ba20-4530-4b5b-a8fe-8e1faaadfd23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:26:bd:13:3f:a3:2c:80:93:41:73:9f:d9:62: 3f:75:8d:b1:79:18:d5:ff:d9:16:60:5e:3e:d5:fd: 83:4d:36:14:4f:07:59:39:dd:4a:bd:e2:15:52:0b: fa:7d:f5:82:e1:48:c8:df:11:ac:1e:7e:70:6c:b6: a9:14:31:7d:5d:52:94:2e:09:70:09:8c:7a:5b:b2: fa:4e:fc:59:c7:c1:23:20:77:07:a2:2d:6e:47:08: 2d:e7:b5:49:14:f8:76:35:c7:3b:b1:07:e8:4c:c9: 9a:37:ab:4c:46:35:8b:4e:79:4d:65:13:ce:f7:29: 84:8e:f1:3d:d1:4b:b3:3f:3e:44:e7:42:21:a6:e1: 62:e9:e3:76:e3:11:af:c1:56:bb:f5:6d:2f:3f:60: 86:21:69:d7:4c:55:89:53:ca:ff:3e:25:b4:cd:24: cb:9b:60:4a:e2:6e:d7:d6:b5:74:86:03:ca:20:9b: 99:af:bd:dc:a9:a9:7b:2b:26:88:f6:c0:75:dd:9f: 0c:7d:69:51:37:b9:75:0a:32:9c:50:70:ce:8a:6b: 5c:b8:35:ed:d6:c9:79:25:d6:1d:ed:73:2b:9c:15: 75:f8:a4:ed:28:74:44:bf:56:84:20:6d:b8:8e:2d: 82:f5:07:a1:69:2f:31:f5:15:05:82:6c:d0:a4:ad: 98:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:15:99:35:64:F2:7A:FF:3B:F9:EF:45:30:46:73:26:65:1D:AE:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/376aefd4-5779-343b-922b-c172c8e9fd1f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:5c:01:6c:da:d3:99:f8:23:55:36:a3:7d:f8:62:ee:8f:6b: fb:de:ce:93:4b:4a:cc:89:16:32:62:67:87:88:91:02:9d:2c: 7d:6f:3b:35:89:47:a5:70:1b:21:56:10:bc:be:95:5d:ae:d0: 47:e4:11:16:0a:fd:74:78:44:d1:b8:89:22:3b:3e:1b:7f:9e: f4:c7:8e:8a:ac:0d:fd:19:3c:2c:bb:db:75:1e:14:26:78:90: f2:8a:35:f7:d2:38:70:ae:69:a6:3f:dd:cb:20:15:a3:77:50: 1f:54:bc:f0:c5:76:95:b9:95:a0:f7:fd:65:e0:85:12:dc:55: c2:be:94:fa:a7:fc:b5:b7:12:35:6c:66:d7:79:5b:83:b6:b0: f8:7d:ac:52:e5:da:a7:5a:39:f5:55:05:60:87:6f:5b:df:7d: 06:44:93:f5:4c:5e:a4:07:b0:55:b1:7f:37:70:18:1d:39:5b: c4:fb:17:45:8d:6b:91:1e:70:33:66:bf:32:eb:31:bb:b9:b5: c7:71:9e:ea:d8:00:51:b2:30:f8:83:0d:0b:dc:c0:e6:cb:ac: 06:93:14:76:5e:7e:50:4f:de:e0:2a:19:35:b5:da:43:c8:2b: d7:ef:93:a8:41:83:96:11:fa:62:61:5b:76:59:e7:20:30:a2: 0f:40:4f:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewnbNlpd2aHTMFAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDU3N2JhMjAtNDUzMC00YjViLWE4ZmUtOGUxZmFhYWRmZDIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtya9Ez+jLICTQXOf2WI/dY2xeRjV/9kWYF4+ 1f2DTTYUTwdZOd1KveIVUgv6ffWC4UjI3xGsHn5wbLapFDF9XVKULglwCYx6W7L6 TvxZx8EjIHcHoi1uRwgt57VJFPh2Ncc7sQfoTMmaN6tMRjWLTnlNZRPO9ymEjvE9 0UuzPz5E50IhpuFi6eN24xGvwVa79W0vP2CGIWnXTFWJU8r/PiW0zSTLm2BK4m7X 1rV0hgPKIJuZr73cqal7KyaI9sB13Z8MfWlRN7l1CjKcUHDOimtcuDXt1sl5JdYd 7XMrnBV1+KTtKHREv1aEIG24ji2C9QehaS8x9RUFgmzQpK2Y4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEVmTVk8nr/O/nvRTBGcyZlHa7fMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzc2YWVmZDQtNTc3OS0z NDNiLTkyMmItYzE3MmM4ZTlmZDFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1sMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK5cAWza05n4I1U2o334Yu6Pa/vezpNLSsyJFjJiZ4eIkQKdLH1vOzWJ R6VwGyFWELy+lV2u0EfkERYK/XR4RNG4iSI7Pht/nvTHjoqsDf0ZPCy723UeFCZ4 kPKKNffSOHCuaaY/3csgFaN3UB9UvPDFdpW5laD3/WXghRLcVcK+lPqn/LW3EjVs Ztd5W4O2sPh9rFLl2qdaOfVVBWCHb1vffQZEk/VMXqQHsFWxfzdwGB05W8T7F0WN a5EecDNmvzLrMbu5tcdxnurYAFGyMPiDDQvcwObLrAaTFHZeflBP3uAqGTW12kPI K9fvk6hBg5YR+mJhW3ZZ5yAwog9AT70= -----END CERTIFICATE-----Generated at Fri Oct 2 10:24:08 2026 by rpki-client