$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa File: 691bed57-da0a-3baf-ad9d-45ddf8c78439.roa (raw, json) Hash identifier: MTO59Y6vGXOLH/xLMEM8avk9OwXrVqrvoRDTcj4qjHM= Subject key identifier: 54:1D:B9:DC:9B:7A:E0:81:D8:1A:58:04:21:FD:A1:29:11:28:DE:DB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B11E1D0A5D27CAEE26B80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:11:e1:d0:a5:d2:7c:ae:e2:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c07978f5-58cd-45c3-92ac-70b3ca9d1aaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:51:21:6a:d3:2f:e0:d9:ac:1b:09:c3:09:e2: a8:4f:8c:64:93:55:04:e7:83:02:f4:59:0b:08:14: 69:3b:77:ba:8a:c2:cf:18:51:7c:6b:c8:f3:e8:a2: 1a:b6:94:95:98:18:f6:34:a0:f8:3c:a0:4e:2f:b2: 9b:c5:26:5f:91:ee:4c:7b:c2:5d:58:22:e3:e5:91: 00:d9:8a:3a:5f:48:c0:cb:fe:d6:a2:e3:e6:08:00: cb:bb:80:ec:de:df:29:db:37:10:c3:c8:3a:47:d0: 74:6b:10:2a:77:71:b4:50:f4:a6:3d:26:d4:2a:88: 85:4b:01:b5:44:b3:c5:6d:9f:e8:34:d7:c5:93:bb: 5f:ba:39:52:2c:f3:64:25:12:8d:c0:00:69:9f:a3: f6:1e:bf:f9:cb:05:07:95:5a:02:6c:d5:6e:be:04: fc:09:f1:7a:cc:b7:88:11:7f:51:f6:37:91:7b:9e: 36:bf:7f:86:cb:5a:49:5d:1d:53:72:44:4b:a5:8e: d4:71:ea:57:c3:15:47:bb:7a:b5:6a:17:b3:e8:83: cc:8a:1c:b5:27:74:9d:af:4c:06:1b:dd:7c:f9:fb: bd:f3:69:05:7a:ec:f2:9e:e0:0a:18:33:e2:c2:7d: e1:08:92:45:f4:b3:92:b2:14:aa:c5:44:a7:56:12: da:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:1D:B9:DC:9B:7A:E0:81:D8:1A:58:04:21:FD:A1:29:11:28:DE:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/691bed57-da0a-3baf-ad9d-45ddf8c78439.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d5:e7:2d:18:c9:58:cc:12:72:a7:7d:61:4a:d5:a4:6f:df:0f: 9f:f6:d2:fa:2a:80:f9:4a:ee:c6:2b:aa:c6:6d:b1:2a:b9:b6: d3:4f:ce:ff:b1:10:41:6d:23:9d:fe:94:c3:59:61:64:c9:71: 69:05:68:8b:a8:7d:12:53:8d:a0:a7:10:0a:d9:e6:99:1e:c9: 48:29:f5:df:65:d8:07:8c:0f:da:ac:59:15:bd:c1:b9:ff:64: 0d:f3:e1:23:96:f3:8f:2b:4f:c3:e7:e6:ad:e9:5f:87:c8:9d: a1:8b:c5:97:0e:7d:0b:5a:41:f2:2e:7e:6d:36:91:d9:78:c5: 0e:97:29:43:52:1a:d6:3e:a0:f1:d3:f5:b9:58:ee:45:5b:b2: d8:9e:f7:9b:b9:1d:60:d9:5d:40:d0:86:13:08:85:9b:4d:04: 3f:f1:43:4f:54:2c:1e:1a:df:36:db:e0:71:86:98:03:a8:a4: e4:ab:db:45:81:20:89:58:9c:e1:57:f7:e8:16:85:ae:70:6d: 14:61:67:c1:37:5c:7c:86:5b:f3:b2:47:de:c7:cb:10:6d:3b: e7:5f:72:70:71:e9:42:c5:72:d2:61:d9:25:d7:f1:23:8d:98: d8:3c:24:e2:28:56:42:f4:83:92:89:1a:6d:5c:86:a2:4a:40: 6c:92:19:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JexHh0KXSfK7ia4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzA3OTc4ZjUtNThjZC00NWMzLTkyYWMtNzBiM2NhOWQxYWFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVEhatMv4NmsGwnDCeKoT4xkk1UE54MC9FkL CBRpO3e6isLPGFF8a8jz6KIatpSVmBj2NKD4PKBOL7KbxSZfke5Me8JdWCLj5ZEA 2Yo6X0jAy/7WouPmCADLu4Ds3t8p2zcQw8g6R9B0axAqd3G0UPSmPSbUKoiFSwG1 RLPFbZ/oNNfFk7tfujlSLPNkJRKNwABpn6P2Hr/5ywUHlVoCbNVuvgT8CfF6zLeI EX9R9jeRe542v3+Gy1pJXR1TckRLpY7UcepXwxVHu3q1ahez6IPMihy1J3Sdr0wG G918+fu982kFeuzynuAKGDPiwn3hCJJF9LOSshSqxUSnVhLaMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFQdudybeuCB2BpYBCH9oSkRKN7bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjkxYmVkNTctZGEwYS0z YmFmLWFkOWQtNDVkZGY4Yzc4NDM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANXnLRjJWMwScqd9YUrVpG/fD5/20voqgPlK7sYrqsZtsSq5ttNPzv+x EEFtI53+lMNZYWTJcWkFaIuofRJTjaCnEArZ5pkeyUgp9d9l2AeMD9qsWRW9wbn/ ZA3z4SOW848rT8Pn5q3pX4fInaGLxZcOfQtaQfIufm02kdl4xQ6XKUNSGtY+oPHT 9blY7kVbstie95u5HWDZXUDQhhMIhZtNBD/xQ09ULB4a3zbb4HGGmAOopOSr20WB IIlYnOFX9+gWha5wbRRhZ8E3XHyGW/OyR97HyxBtO+dfcnBx6ULFctJh2SXX8SON mNg8JOIoVkL0g5KJGm1chqJKQGySGVw= -----END CERTIFICATE-----Generated at Thu Oct 8 11:44:11 2026 by rpki-client