$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa File: 3871f96f-736a-3cfc-8ab8-e605674052b8.roa (raw, json) Hash identifier: EkJkW46fRODZ4ErFx6KkzjHq3BZEVwtAHN+1O66WBgA= Subject key identifier: CA:4D:49:10:F8:23:8B:80:1D:42:B6:79:AD:84:A3:82:C2:C2:2D:C7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498332034C93DCEFD5394580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.215.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:32:03:4c:93:dc:ef:d5:39:45:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=611fd8b0-2370-4d8b-ba42-39ac3c5acbec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0c:b1:cd:ce:a6:09:dc:3d:41:b2:0a:bb:68: 5b:c7:53:db:ac:2f:e4:49:05:01:cb:60:3d:07:6e: 37:0f:3a:a6:15:57:f2:ad:46:61:49:48:33:52:19: f9:03:02:44:3c:ce:c7:28:c0:94:00:28:bb:64:27: f2:12:aa:52:a6:b9:cf:bc:5a:1a:ec:42:74:86:03: 85:74:30:40:7c:b2:00:51:86:e5:80:cc:17:b8:18: c7:c0:62:7d:0d:5d:75:54:bd:ba:a4:5c:84:e4:12: 98:51:b9:4a:dd:4c:ca:a8:69:4b:9c:36:33:f2:5b: cc:dc:e9:e8:ff:0d:3d:79:e1:ed:56:89:b6:17:2b: 3f:ea:cb:bb:69:bb:82:c3:12:2f:7b:74:b1:90:c2: 69:94:46:0a:06:ed:ad:5d:03:04:2b:45:da:24:b2: 03:92:52:13:48:0b:a7:fd:71:10:3b:cc:14:a4:4b: c0:64:a9:1c:d7:a1:c5:92:8b:d5:07:97:20:c1:ff: cd:c0:c3:6d:4c:86:c5:32:a0:5f:2d:30:11:30:fc: b2:0f:9f:10:71:55:40:cc:b0:55:8e:8a:3f:18:05: d6:ce:17:95:06:c5:a7:8d:74:d2:da:9f:f2:39:75: fa:48:a4:7a:b1:49:79:d6:20:e2:93:9d:85:20:db: e2:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:4D:49:10:F8:23:8B:80:1D:42:B6:79:AD:84:A3:82:C2:C2:2D:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3871f96f-736a-3cfc-8ab8-e605674052b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.215.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ca:c3:89:38:71:e8:7b:0e:8a:fc:a7:ca:c9:43:92:8a:af:d1: 87:64:5e:14:2c:39:a5:28:e5:d2:98:01:ee:34:49:59:b4:58: 2f:b4:68:28:12:d6:f3:09:ca:7a:93:23:ec:31:48:95:74:04: 6b:06:0d:d4:b1:e8:ea:04:e2:4f:73:fd:2b:9a:1f:ca:62:d9: 19:c6:f6:c7:eb:86:4a:53:82:37:21:50:d8:2f:b2:a9:87:54: a2:dd:8a:2f:a7:32:54:b6:94:f0:d4:ec:bb:9f:77:38:5f:e8: df:f0:c1:8b:84:ec:ee:9f:e5:16:27:04:4b:f1:c0:63:70:57: c5:0b:a9:be:79:62:46:42:ee:cd:1e:0c:b3:ec:3a:f3:3e:82: 3a:8b:e2:3d:e5:7b:8c:2f:52:cb:06:e1:85:02:7a:7e:f0:ea: e4:d5:dc:54:fc:e0:89:03:f0:b0:41:a1:76:39:20:01:6b:31: ea:f3:d1:ab:a3:37:1a:b9:5a:ef:ae:62:a7:1d:94:83:0f:ba: f1:19:3e:2d:0c:52:8c:2f:5c:45:d0:26:2a:8a:0b:b1:da:7d: 38:48:65:8b:d2:f2:f1:90:d8:79:51:0a:ad:20:a7:58:9b:28: 2e:8d:db:f7:43:ac:ee:25:d0:6f:0c:d2:6e:a4:80:19:6a:96: f7:6a:29:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgzIDTJPc79U5RYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjExZmQ4YjAtMjM3MC00ZDhiLWJhNDItMzlhYzNjNWFjYmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwyxzc6mCdw9QbIKu2hbx1PbrC/kSQUBy2A9 B243DzqmFVfyrUZhSUgzUhn5AwJEPM7HKMCUACi7ZCfyEqpSprnPvFoa7EJ0hgOF dDBAfLIAUYblgMwXuBjHwGJ9DV11VL26pFyE5BKYUblK3UzKqGlLnDYz8lvM3Ono /w09eeHtVom2Fys/6su7abuCwxIve3SxkMJplEYKBu2tXQMEK0XaJLIDklITSAun /XEQO8wUpEvAZKkc16HFkovVB5cgwf/NwMNtTIbFMqBfLTARMPyyD58QcVVAzLBV joo/GAXWzheVBsWnjXTS2p/yOXX6SKR6sUl51iDik52FINvi4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMpNSRD4I4uAHUK2ea2Eo4LCwi3HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzg3MWY5NmYtNzM2YS0z Y2ZjLThhYjgtZTYwNTY3NDA1MmI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3XMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMrDiThx6HsOivynyslDkoqv0YdkXhQsOaUo5dKYAe40SVm0WC+0aCgS 1vMJynqTI+wxSJV0BGsGDdSx6OoE4k9z/SuaH8pi2RnG9sfrhkpTgjchUNgvsqmH VKLdii+nMlS2lPDU7Lufdzhf6N/wwYuE7O6f5RYnBEvxwGNwV8ULqb55YkZC7s0e DLPsOvM+gjqL4j3le4wvUssG4YUCen7w6uTV3FT84IkD8LBBoXY5IAFrMerz0auj Nxq5Wu+uYqcdlIMPuvEZPi0MUowvXEXQJiqKC7HafThIZYvS8vGQ2HlRCq0gp1ib KC6N2/dDrO4l0G8M0m6kgBlqlvdqKeE= -----END CERTIFICATE-----Generated at Sun Sep 27 05:28:38 2026 by rpki-client