$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa File: 3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa (raw, json) Hash identifier: jB9jLod/YyrKtZWPJmXs+oyu+zcPvfjqPVfUPm6xaX8= Subject key identifier: 1F:13:81:3A:A5:3F:55:99:C2:DF:76:04:72:82:2E:2F:4C:D5:D6:39 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49832AFFDE1297BDF01D9700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:2a:ff:de:12:97:bd:f0:1d:97:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=07c40db8-9881-4b33-a314-6125ddcddea7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3e:63:5c:ba:4d:a5:90:6d:bb:66:ab:0b:2b: 86:0e:10:3d:1c:a8:18:19:c7:61:ee:45:c9:f9:49: 9a:10:4e:cb:0a:03:50:b0:57:77:58:16:58:cb:63: 25:86:50:ad:7f:22:d4:47:de:a3:6a:16:0e:47:bb: 84:c6:28:46:eb:90:cd:28:3f:48:42:90:bd:ac:45: 68:30:d0:7b:20:ea:da:50:7c:3f:5d:c8:1f:d6:e1: 8f:83:f6:04:5f:1d:77:03:54:0a:10:d4:58:3d:83: 29:3f:56:c5:2f:65:82:e3:ca:c4:a4:77:c6:53:49: c4:0f:e0:06:d1:53:ef:c5:44:8c:25:66:38:ce:2c: 05:0c:e8:86:e1:24:b9:e1:a5:01:ad:e8:ea:45:c7: f8:4e:c6:c0:3e:f4:d6:b8:23:82:dc:29:6d:ad:08: 31:b1:18:88:72:9a:75:eb:54:5c:a8:4b:a2:87:d3: d5:a1:17:4a:d7:56:9b:e9:d9:00:77:8c:48:dd:3a: bf:94:cc:ae:b6:dd:81:48:e0:cf:3b:9b:c6:12:f1: 17:13:b6:5c:64:d9:38:c1:d5:bb:89:b7:71:8e:04: fe:05:2a:50:a3:24:ac:c8:fd:cd:b9:c8:40:2b:2b: 47:d9:63:76:71:b4:1f:5a:18:cd:37:69:ca:f1:be: 40:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:13:81:3A:A5:3F:55:99:C2:DF:76:04:72:82:2E:2F:4C:D5:D6:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3c3d075a-0b3a-39b2-b8cc-dfd4904829c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:c0:08:71:c8:96:5c:60:06:40:a7:e2:fa:b2:e8:02:f2:dc: fc:3a:84:ef:b7:5d:4a:3e:4f:9b:69:15:4f:9d:fc:ce:ac:a4: 95:7f:d3:24:8f:eb:1a:87:7d:c8:22:71:04:b2:44:e7:c4:b3: 4a:68:7b:cc:22:90:56:b6:44:a0:1b:36:ab:75:61:4f:2e:2c: bf:c1:85:6d:11:d9:d8:c8:31:db:42:11:a7:86:e3:80:44:0f: 92:f7:bd:15:c3:8f:06:af:93:04:5d:19:dc:60:b4:62:be:4f: 74:6e:76:8e:8a:74:95:1f:73:4d:ce:79:45:2f:d3:a6:31:6f: 97:46:99:70:50:d8:d9:86:ae:11:5f:39:bd:94:42:bc:da:00: 29:d0:97:83:c6:0a:e8:96:87:36:7e:18:c2:31:92:e1:b7:de: a9:59:0e:68:57:23:f1:76:c4:19:25:14:db:ea:4c:61:70:25: ce:27:e4:88:c6:2c:97:85:84:9b:8e:1d:aa:00:69:02:19:1f: b4:5e:54:d9:4b:04:17:08:c2:86:78:e6:99:f9:fd:77:18:c9: bb:00:6b:c6:5b:13:ee:fc:50:73:00:e9:31:4d:53:48:ff:25: 7c:46:2e:71:1c:1e:ab:bd:3b:c4:20:c2:40:c5:03:77:db:02: ac:e0:9e:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgyr/3hKXvfAdlwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDdjNDBkYjgtOTg4MS00YjMzLWEzMTQtNjEyNWRkY2RkZWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApD5jXLpNpZBtu2arCyuGDhA9HKgYGcdh7kXJ +UmaEE7LCgNQsFd3WBZYy2MlhlCtfyLUR96jahYOR7uExihG65DNKD9IQpC9rEVo MNB7IOraUHw/Xcgf1uGPg/YEXx13A1QKENRYPYMpP1bFL2WC48rEpHfGU0nED+AG 0VPvxUSMJWY4ziwFDOiG4SS54aUBrejqRcf4TsbAPvTWuCOC3CltrQgxsRiIcpp1 61RcqEuih9PVoRdK11ab6dkAd4xI3Tq/lMyutt2BSODPO5vGEvEXE7ZcZNk4wdW7 ibdxjgT+BSpQoySsyP3NuchAKytH2WN2cbQfWhjNN2nK8b5AsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB8TgTqlP1WZwt92BHKCLi9M1dY5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2MzZDA3NWEtMGIzYS0z OWIyLWI4Y2MtZGZkNDkwNDgyOWM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2GMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbACHHIllxgBkCn4vqy6ALy3Pw6hO+3XUo+T5tpFU+d/M6spJV/0ySP 6xqHfcgicQSyROfEs0poe8wikFa2RKAbNqt1YU8uLL/BhW0R2djIMdtCEaeG44BE D5L3vRXDjwavkwRdGdxgtGK+T3Rudo6KdJUfc03OeUUv06Yxb5dGmXBQ2NmGrhFf Ob2UQrzaACnQl4PGCuiWhzZ+GMIxkuG33qlZDmhXI/F2xBklFNvqTGFwJc4n5IjG LJeFhJuOHaoAaQIZH7ReVNlLBBcIwoZ45pn5/XcYybsAa8ZbE+78UHMA6TFNU0j/ JXxGLnEcHqu9O8QgwkDFA3fbAqzgnlw= -----END CERTIFICATE-----Generated at Fri Sep 25 06:48:37 2026 by rpki-client