$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3795ed7a-7b45-320b-9e1c-4a651d1e5cf7.roa File: 3795ed7a-7b45-320b-9e1c-4a651d1e5cf7.roa (raw, json) Hash identifier: Lt5jAy4NOijkNDB/O2uRxS4fQiHjxHRdyCAml3hCryo= Subject key identifier: C4:CA:0B:EE:B8:ED:4D:FD:1A:9E:E0:FA:B9:DE:A2:51:97:04:ED:C8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B87FB4E3FB7558F3BAA40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3795ed7a-7b45-320b-9e1c-4a651d1e5cf7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:87:fb:4e:3f:b7:55:8f:3b:aa:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=61d7a539-3443-4d45-91c4-9bbfe0366f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:13:02:e3:7e:16:f0:b9:6f:ab:4e:19:d5:2b: 86:0e:00:18:2c:20:82:77:c1:76:23:9b:5e:3f:0f: 67:ae:9d:11:85:bc:cb:34:de:20:95:cc:5f:58:89: e2:a2:70:71:be:45:fd:b3:72:7d:17:eb:26:7a:b4: df:df:f8:a1:fa:a9:ff:f0:b4:49:e7:c0:99:81:71: 2c:cf:17:ba:11:aa:b0:e1:8b:19:ec:b4:d9:c6:ec: 74:35:de:55:9e:9f:66:32:22:f0:9a:df:d4:0c:ff: f7:1b:0a:e6:08:d7:fd:de:ae:9b:93:4e:81:fd:f7: b7:28:df:c5:da:1f:82:b7:cc:39:1b:5d:e4:84:2d: 1e:c3:ed:8a:95:cf:ec:7c:9d:aa:fd:db:16:19:e5: c9:f6:a8:ea:48:05:a4:9e:90:f3:b4:a3:5f:ce:4b: 5d:0c:d2:f7:3f:5c:35:a2:dc:18:98:23:47:b4:4a: 2c:60:b6:93:bd:00:85:96:ca:6b:53:e6:21:e3:0a: 52:f2:fa:2b:7b:3e:12:ae:1f:86:44:3a:ca:cb:92: f6:d4:b5:d1:02:9f:b7:27:94:c7:75:f7:26:82:1c: 82:ab:82:f4:14:fe:bf:01:86:47:a9:e9:f2:a8:d9: 73:34:ed:61:fd:a1:99:de:48:fe:30:ea:3e:ae:9a: a6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:CA:0B:EE:B8:ED:4D:FD:1A:9E:E0:FA:B9:DE:A2:51:97:04:ED:C8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3795ed7a-7b45-320b-9e1c-4a651d1e5cf7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:7a:e9:7f:fe:16:f5:c5:ba:c3:a6:33:5b:e0:0e:02:10:f5: d3:aa:a3:ae:b7:5d:aa:8c:d7:9d:32:8d:4b:b7:4d:b3:6c:f7: 11:81:10:e3:05:1c:97:65:b2:0a:35:d9:53:29:5c:8f:22:7b: 38:c5:62:f9:d1:6a:48:c4:dd:1a:f2:d9:33:4d:be:46:e0:19: 7a:f0:69:7d:36:69:d4:53:e7:6a:6f:2e:fb:55:be:5a:3c:0e: 1c:1a:34:c0:5f:9e:69:6d:79:37:03:23:d0:57:f1:e7:3b:39: d4:24:96:46:67:30:6b:82:4b:f4:36:a8:fe:10:0d:07:cc:d2: cd:06:9c:9d:c7:d4:06:e6:10:c6:dd:25:f1:e3:fa:68:fa:15: 84:c0:06:47:70:4a:b8:9b:e9:66:7c:7e:51:da:32:a0:40:e2: 78:a8:17:4c:53:1d:c9:7f:7a:2d:6f:80:b0:98:04:9a:36:53: a0:99:81:94:f9:ad:46:d7:4c:f6:55:f9:fe:4c:be:82:f2:86: 0a:0f:5b:3e:fe:05:4d:f5:ce:34:94:32:59:6b:35:91:d3:5f: 10:b2:70:d6:b6:e7:ed:4b:b9:d8:81:86:b3:2b:9d:a3:19:ab: d1:8b:00:1f:55:cf:da:29:06:84:74:31:db:89:02:49:d1:de: 2c:58:cd:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je4f7Tj+3VY87qkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjFkN2E1MzktMzQ0My00ZDQ1LTkxYzQtOWJiZmUwMzY2ZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhBMC434W8Llvq04Z1SuGDgAYLCCCd8F2I5te Pw9nrp0RhbzLNN4glcxfWInionBxvkX9s3J9F+smerTf3/ih+qn/8LRJ58CZgXEs zxe6Eaqw4YsZ7LTZxux0Nd5Vnp9mMiLwmt/UDP/3GwrmCNf93q6bk06B/fe3KN/F 2h+Ct8w5G13khC0ew+2Klc/sfJ2q/dsWGeXJ9qjqSAWknpDztKNfzktdDNL3P1w1 otwYmCNHtEosYLaTvQCFlsprU+Yh4wpS8vorez4Srh+GRDrKy5L21LXRAp+3J5TH dfcmghyCq4L0FP6/AYZHqenyqNlzNO1h/aGZ3kj+MOo+rpqm0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTKC+647U39Gp7g+rneolGXBO3IMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzc5NWVkN2EtN2I0NS0z MjBiLTllMWMtNGE2NTFkMWU1Y2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokj1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACt66X/+FvXFusOmM1vgDgIQ9dOqo663XaqM150yjUu3TbNs9xGBEOMF HJdlsgo12VMpXI8iezjFYvnRakjE3Rry2TNNvkbgGXrwaX02adRT52pvLvtVvlo8 DhwaNMBfnmlteTcDI9BX8ec7OdQklkZnMGuCS/Q2qP4QDQfM0s0GnJ3H1AbmEMbd JfHj+mj6FYTABkdwSrib6WZ8flHaMqBA4nioF0xTHcl/ei1vgLCYBJo2U6CZgZT5 rUbXTPZV+f5MvoLyhgoPWz7+BU31zjSUMllrNZHTXxCycNa25+1LudiBhrMrnaMZ q9GLAB9Vz9opBoR0MduJAknR3ixYzTI= -----END CERTIFICATE-----Generated at Tue Sep 29 13:03:10 2026 by rpki-client