$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa File: 694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa (raw, json) Hash identifier: ByZV1EzwVvPpHE3LRA3kCLFFi9nc+/7NszgRz6YgF8Y= Subject key identifier: 29:97:7B:A5:4D:D7:B5:65:8F:E0:1A:00:F5:3B:81:D1:AF:7C:1E:BB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49832DC823B7EB2937246ABA Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 07 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:2d:c8:23:b7:eb:29:37:24:6a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1b6de0fb-c7d6-4640-924a-929960a496fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:1f:bb:52:1a:b6:cf:d1:69:69:b0:3d:47:d0: 97:96:3c:90:b8:16:04:bd:d9:2a:00:13:06:54:34: 84:65:8a:36:86:0b:5b:3e:06:ca:89:9e:d9:43:a1: f3:73:b2:30:c7:76:a3:64:a7:95:f4:4f:72:68:45: 5f:62:d0:3d:e6:31:25:88:1a:70:2d:2d:25:c3:5f: 21:01:db:52:17:d6:45:50:f3:24:7f:eb:4f:4b:7e: 73:63:3f:83:56:67:14:8d:26:92:0e:df:fb:0b:2e: 06:e6:ae:0c:0e:17:4b:ba:3d:34:19:8d:d6:0e:59: be:71:0a:77:ab:f1:df:02:7f:76:c4:2e:71:58:15: be:c9:50:5a:19:38:a2:90:0a:0c:34:fe:a8:ea:18: a5:7c:82:4e:5f:12:f8:88:87:a3:e8:b2:a1:86:8a: eb:ff:89:fd:16:8c:b4:b1:d6:64:dd:0a:9b:cb:3d: a1:63:e2:e7:74:5f:e7:ab:9a:e0:ec:78:54:6e:60: 2d:0b:63:93:42:c9:52:23:76:49:e9:b1:2c:11:c3: fb:66:09:64:82:1a:cb:d9:4d:73:0f:a6:e1:cd:e7: f2:99:17:81:48:66:99:a7:d5:07:8e:f4:99:51:39: 33:1f:ea:f2:e2:9f:13:7a:58:9c:32:13:33:ba:0c: 1d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:97:7B:A5:4D:D7:B5:65:8F:E0:1A:00:F5:3B:81:D1:AF:7C:1E:BB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/694e4b3a-d450-3b29-ab85-ed1323ada0a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:fe:8c:5b:a7:b7:15:82:74:1c:f8:7c:ad:74:96:9c:9a:60: bd:f3:57:34:d9:eb:01:2f:7b:66:5d:ab:70:7c:05:e1:ae:79: 3a:0b:02:63:e9:0e:66:72:52:db:83:23:49:d2:f4:3c:09:28: bb:0d:7b:4e:c8:c9:ab:8e:cd:b7:15:3b:df:50:6f:3a:6c:fd: fb:6d:c7:be:43:81:1d:24:9e:eb:76:d0:39:e4:ed:29:19:c7: fe:28:73:90:8a:ca:0a:a4:2b:dd:da:31:77:6f:58:15:26:1d: c8:e9:1c:f8:19:d1:29:1b:e2:22:ad:c9:27:7e:c1:91:db:2a: 39:90:35:b9:88:71:2d:1f:a5:6a:48:90:67:ae:11:ba:1e:72: 64:98:68:97:ce:e6:80:b1:28:70:f5:a1:c0:d2:03:9f:07:4d: d3:16:b8:3f:9c:ee:c9:44:d5:ca:7c:58:bd:35:2f:19:c4:c1: f6:72:bb:56:dc:98:11:6c:7f:6c:55:e2:ec:82:32:ef:28:5e: ff:74:5b:49:9f:2f:d2:25:38:7f:ef:77:f8:ab:bd:e7:de:1b: 0e:ec:01:37:4b:4a:e8:10:59:9f:f1:dc:85:bd:3a:90:87:bb: ac:de:d6:05:4c:a3:1f:9c:aa:b6:f9:7b:eb:dc:5a:61:1d:b0: ab:0a:a1:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgy3II7frKTckarowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWI2ZGUwZmItYzdkNi00NjQwLTkyNGEtOTI5OTYwYTQ5NmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx+7Uhq2z9FpabA9R9CXljyQuBYEvdkqABMG VDSEZYo2hgtbPgbKiZ7ZQ6Hzc7Iwx3ajZKeV9E9yaEVfYtA95jEliBpwLS0lw18h AdtSF9ZFUPMkf+tPS35zYz+DVmcUjSaSDt/7Cy4G5q4MDhdLuj00GY3WDlm+cQp3 q/HfAn92xC5xWBW+yVBaGTiikAoMNP6o6hilfIJOXxL4iIej6LKhhorr/4n9Foy0 sdZk3Qqbyz2hY+LndF/nq5rg7HhUbmAtC2OTQslSI3ZJ6bEsEcP7ZglkghrL2U1z D6bhzefymReBSGaZp9UHjvSZUTkzH+ry4p8TelicMhMzugwddwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmXe6VN17Vlj+AaAPU7gdGvfB67MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNjk0ZTRiM2EtZDQ1MC0z YjI5LWFiODUtZWQxMzIzYWRhMGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGz+jFuntxWCdBz4fK10lpyaYL3zVzTZ6wEve2Zdq3B8BeGueToLAmPp DmZyUtuDI0nS9DwJKLsNe07IyauOzbcVO99Qbzps/fttx75DgR0knut20Dnk7SkZ x/4oc5CKygqkK93aMXdvWBUmHcjpHPgZ0Skb4iKtySd+wZHbKjmQNbmIcS0fpWpI kGeuEboecmSYaJfO5oCxKHD1ocDSA58HTdMWuD+c7slE1cp8WL01LxnEwfZyu1bc mBFsf2xV4uyCMu8oXv90W0mfL9IlOH/vd/irvefeGw7sATdLSugQWZ/x3IW9OpCH u6ze1gVMox+cqrb5e+vcWmEdsKsKoRM= -----END CERTIFICATE-----Generated at Tue Oct 6 16:41:17 2026 by rpki-client