$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa File: 5ee095b8-59da-3921-8e77-c6e3de85af8b.roa (raw, json) Hash identifier: JHCIsBI/d34Nyxpp4JafpI0h3/7pyqJxCtzmCQeJc84= Subject key identifier: F5:FB:18:A9:AF:63:B5:07:0E:E3:68:EC:4E:A1:18:5F:AF:D6:2D:D4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0C93D92C43ED87DCDA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0c:93:d9:2c:43:ed:87:dc:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1c1bd9ab-4889-48bd-9d3a-fd7f7f756fb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:1e:94:6e:6a:19:d4:c0:b7:ed:17:36:d1:95: d2:7f:e3:c1:62:82:09:6e:88:79:ba:67:04:a4:28: dd:41:84:16:7a:74:b8:24:e8:48:05:bf:9d:c0:d5: d7:1a:77:b6:97:ca:22:af:a9:22:9d:ed:71:46:fa: a3:31:17:0e:81:66:dc:44:01:63:ae:99:03:7d:cf: 08:f0:89:1d:87:e2:2e:3f:e3:2d:d5:0b:ee:cc:6d: 79:b8:af:dd:0e:9a:14:6a:c1:c8:72:1e:26:47:3d: 85:6d:89:04:64:9c:6c:8c:c2:f4:41:6a:fa:3f:d3: 4c:68:2d:e4:d8:61:3a:33:c6:fc:a7:97:eb:6b:35: 5f:3f:e9:55:82:88:5e:a1:43:0b:47:66:87:28:2a: 76:41:ee:2e:3c:c6:d1:a1:91:3c:89:8c:d3:29:45: a9:84:21:20:b4:a4:82:2d:65:c7:d6:86:76:94:17: 8e:15:26:75:cc:6f:cf:9f:61:bd:8a:d9:f1:fb:af: 9a:85:69:7f:ed:5e:77:25:26:f4:9b:a3:3e:ef:14: 9e:a3:6a:60:ff:e9:b1:f8:93:7b:2e:4d:9e:46:7f: 6b:f9:41:a6:23:c1:3c:22:26:34:91:d5:7d:45:5c: 4a:94:c8:3f:4f:75:0f:32:8b:ff:27:7e:90:07:14: 45:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:FB:18:A9:AF:63:B5:07:0E:E3:68:EC:4E:A1:18:5F:AF:D6:2D:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5ee095b8-59da-3921-8e77-c6e3de85af8b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:fc:a6:98:93:e0:be:8c:04:f8:0c:e4:ab:97:2e:fe:b9:0f: 6c:b3:46:7a:40:55:eb:6e:25:ff:1e:a8:ca:ec:78:76:00:dc: 31:b3:f0:35:3d:a6:83:96:a3:a0:99:e4:67:03:52:e1:4c:e8: 29:0f:fb:32:25:5c:f4:5d:bb:59:e8:1b:76:d4:fb:59:ba:1e: 73:f0:0e:f1:05:85:71:55:11:58:dc:3c:fd:e5:5e:d6:c3:b7: 8d:84:e4:b7:c6:b5:2e:74:85:b0:07:ae:fd:1b:b6:33:74:00: e1:99:b1:3e:1b:13:74:47:ed:a1:58:e8:dc:00:b8:41:d3:c0: 27:8b:b8:8e:1f:bf:11:ef:79:b0:50:cf:5b:1a:08:49:c2:f2: a2:2a:0d:4a:6e:40:26:ef:ec:3d:73:29:5e:2c:ac:83:30:8a: 68:07:ba:9b:5e:8b:51:95:a0:e1:03:c8:a9:c9:d7:47:37:4f: 67:27:90:df:4c:5f:a7:04:7a:fd:ae:01:e1:09:d0:fd:75:29: 3d:f1:de:76:30:9a:42:80:6e:ca:bf:34:2b:77:36:97:99:17: 5c:67:d3:08:46:08:89:86:15:06:f4:99:1b:86:c4:7e:6a:ca: 5c:35:2c:eb:18:13:dd:e4:34:03:c3:20:c3:26:10:e2:47:d0: 45:f6:d4:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewyT2SxD7Yfc2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWMxYmQ5YWItNDg4OS00OGJkLTlkM2EtZmQ3ZjdmNzU2ZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmx6UbmoZ1MC37Rc20ZXSf+PBYoIJboh5umcE pCjdQYQWenS4JOhIBb+dwNXXGne2l8oir6kine1xRvqjMRcOgWbcRAFjrpkDfc8I 8Ikdh+IuP+Mt1QvuzG15uK/dDpoUasHIch4mRz2FbYkEZJxsjML0QWr6P9NMaC3k 2GE6M8b8p5frazVfP+lVgoheoUMLR2aHKCp2Qe4uPMbRoZE8iYzTKUWphCEgtKSC LWXH1oZ2lBeOFSZ1zG/Pn2G9itnx+6+ahWl/7V53JSb0m6M+7xSeo2pg/+mx+JN7 Lk2eRn9r+UGmI8E8IiY0kdV9RVxKlMg/T3UPMov/J36QBxRFTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPX7GKmvY7UHDuNo7E6hGF+v1i3UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWVlMDk1YjgtNTlkYS0z OTIxLThlNzctYzZlM2RlODVhZjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAf8ppiT4L6MBPgM5KuXLv65D2yzRnpAVetuJf8eqMrseHYA3DGz8DU9 poOWo6CZ5GcDUuFM6CkP+zIlXPRdu1noG3bU+1m6HnPwDvEFhXFVEVjcPP3lXtbD t42E5LfGtS50hbAHrv0btjN0AOGZsT4bE3RH7aFY6NwAuEHTwCeLuI4fvxHvebBQ z1saCEnC8qIqDUpuQCbv7D1zKV4srIMwimgHuptei1GVoOEDyKnJ10c3T2cnkN9M X6cEev2uAeEJ0P11KT3x3nYwmkKAbsq/NCt3NpeZF1xn0whGCImGFQb0mRuGxH5q ylw1LOsYE93kNAPDIMMmEOJH0EX21P8= -----END CERTIFICATE-----Generated at Sun Sep 27 06:42:49 2026 by rpki-client