$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a558a15-58ea-3561-9dc6-7dfbe5be4aae.roa File: 6a558a15-58ea-3561-9dc6-7dfbe5be4aae.roa (raw, json) Hash identifier: lx9eJceKjewAx09ELqbjP+HZvhF9jfZWiHVA0DMNpD4= Subject key identifier: 6E:70:5A:92:D6:20:6A:06:6B:EA:E1:65:DA:93:03:82:79:98:02:4C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49832ECBD845B829AA1C1380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a558a15-58ea-3561-9dc6-7dfbe5be4aae.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.184.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:2e:cb:d8:45:b8:29:aa:1c:13:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e82ba8d2-be5f-4188-a8cb-a958bd51e2b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:45:db:b4:e3:c3:09:89:d0:04:01:c5:1f:76: 3f:e5:20:db:46:eb:e5:cd:6f:f9:50:09:7a:9f:2c: 57:b6:80:4c:8e:10:bd:e4:a4:91:a4:79:94:67:7b: 73:b4:3c:6b:18:74:c6:7c:fc:17:14:6b:e0:c0:7f: 81:ca:27:75:b8:ad:e0:eb:bd:fe:26:f9:c5:7c:2c: f0:03:c1:c8:40:80:0c:f4:50:70:03:d7:36:5d:36: bd:b9:32:26:b6:b3:9a:17:1c:b5:5d:f0:9e:63:31: 36:74:5b:f3:17:8d:61:92:0c:1c:db:d1:f9:d3:9b: 62:e8:b5:58:ad:7f:3a:1e:67:36:07:38:11:27:f2: 81:dc:2a:12:66:5e:e0:9e:40:c5:fc:1c:57:1f:49: 10:86:07:25:4f:60:4f:c2:6d:ee:03:79:ab:8f:75: d2:0c:63:8f:d7:54:78:d6:24:9b:76:52:5c:27:dd: 1e:98:54:11:b9:9b:d2:52:95:cc:98:fd:03:61:17: a5:d1:20:a5:c1:aa:0d:b5:0e:8c:30:3c:25:46:a4: a7:df:b8:fc:6c:de:02:67:2c:40:20:6c:4d:26:b3: 21:93:44:b3:bc:61:95:44:18:55:88:cf:2a:04:18: 20:51:21:0c:57:ab:3b:fd:23:54:41:90:f3:bb:78: 97:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:70:5A:92:D6:20:6A:06:6B:EA:E1:65:DA:93:03:82:79:98:02:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6a558a15-58ea-3561-9dc6-7dfbe5be4aae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.184.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:84:4b:ef:00:bb:f4:3a:bb:64:a3:9a:f0:39:7b:8c:84:34: 8c:03:94:d7:bc:6c:5c:4c:ff:19:d6:5c:37:1f:30:7a:66:66: 93:e2:53:be:ff:b2:19:92:45:99:13:49:b7:4e:0b:77:2f:4a: 39:fc:0f:63:ce:0f:46:8f:96:19:3d:e4:3e:2e:75:7c:a8:f8: b6:6b:2b:97:b0:92:dd:e0:b3:83:1d:0d:13:31:a4:b1:79:c3: 78:c9:07:bb:ef:88:be:ab:7d:a2:df:74:94:c2:ec:60:0b:11: 60:9d:04:4b:89:62:02:3f:4d:7f:9f:9b:f1:b1:aa:6a:fd:5f: 26:b8:eb:61:16:3f:80:f2:69:89:67:6b:04:63:1f:d3:37:59: 56:26:a1:07:b8:7a:e3:e9:09:71:02:b5:e0:58:4e:99:2b:40: 2e:45:e4:b4:4b:73:4c:30:4e:c5:d9:7c:2e:cb:f8:7a:42:c4: a4:73:7c:65:3e:b7:4c:a0:53:6c:74:19:d2:97:ae:2e:9f:a0: 75:91:75:0a:8e:b6:a9:fe:90:b4:23:a6:1a:8b:fe:47:0f:60: 2f:84:1f:5b:35:f7:c0:dc:2b:d7:7b:6d:b8:f7:fb:21:b4:96: 18:65:df:cc:41:00:29:7d:a5:39:75:d6:1b:24:a8:b6:99:52: fa:02:85:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgy7L2EW4KaocE4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTgyYmE4ZDItYmU1Zi00MTg4LWE4Y2ItYTk1OGJkNTFlMmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUXbtOPDCYnQBAHFH3Y/5SDbRuvlzW/5UAl6 nyxXtoBMjhC95KSRpHmUZ3tztDxrGHTGfPwXFGvgwH+Byid1uK3g673+JvnFfCzw A8HIQIAM9FBwA9c2XTa9uTImtrOaFxy1XfCeYzE2dFvzF41hkgwc29H505ti6LVY rX86Hmc2BzgRJ/KB3CoSZl7gnkDF/BxXH0kQhgclT2BPwm3uA3mrj3XSDGOP11R4 1iSbdlJcJ90emFQRuZvSUpXMmP0DYRel0SClwaoNtQ6MMDwlRqSn37j8bN4CZyxA IGxNJrMhk0SzvGGVRBhViM8qBBggUSEMV6s7/SNUQZDzu3iX2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG5wWpLWIGoGa+rhZdqTA4J5mAJMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmE1NThhMTUtNThlYS0z NTYxLTlkYzYtN2RmYmU1YmU0YWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK24MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALuES+8Au/Q6u2SjmvA5e4yENIwDlNe8bFxM/xnWXDcfMHpmZpPiU77/ shmSRZkTSbdOC3cvSjn8D2POD0aPlhk95D4udXyo+LZrK5ewkt3gs4MdDRMxpLF5 w3jJB7vviL6rfaLfdJTC7GALEWCdBEuJYgI/TX+fm/Gxqmr9Xya462EWP4DyaYln awRjH9M3WVYmoQe4euPpCXECteBYTpkrQC5F5LRLc0wwTsXZfC7L+HpCxKRzfGU+ t0ygU2x0GdKXri6foHWRdQqOtqn+kLQjphqL/kcPYC+EH1s198DcK9d7bbj3+yG0 lhhl38xBACl9pTl11hskqLaZUvoChY8= -----END CERTIFICATE-----Generated at Sun Sep 27 04:50:06 2026 by rpki-client