$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72c5a130-0f54-347e-b91c-562c3f29de3a.roa File: 72c5a130-0f54-347e-b91c-562c3f29de3a.roa (raw, json) Hash identifier: /h3nkt/yZOf1GLLcihRcrz/lGaqY+P0C7d3+ZrwWgMg= Subject key identifier: A5:2A:B2:F6:8F:A3:3D:71:64:D8:E5:C6:D0:F7:06:B1:06:81:4D:D9 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9F6D7B6D2FB18867C180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72c5a130-0f54-347e-b91c-562c3f29de3a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.64.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9f:6d:7b:6d:2f:b1:88:67:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2b134f02-4445-4016-8008-cc74f856c148 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:4c:68:99:af:ed:97:25:ba:44:1c:d7:d0:54: 1e:6e:8c:04:05:4e:fe:39:ac:2f:d9:d0:82:ea:5d: ba:af:7e:d7:07:8d:e2:ca:2f:bc:b3:66:f3:ea:2e: 0f:85:19:6b:9e:e7:04:1b:2e:d7:8f:ba:81:cb:b5: 6e:c9:cb:43:bd:2e:c0:4e:7d:4b:fa:c0:b5:dd:e2: 5f:29:2a:c4:a2:af:d0:2f:8d:5d:e6:ab:80:22:33: c7:7f:c6:db:da:31:66:13:66:ad:dc:fb:76:2f:24: 8f:cc:d7:8e:b1:e5:86:2a:9f:a7:c2:51:84:6f:96: f1:11:66:ce:cc:24:9b:0a:59:ec:5a:53:52:d1:ba: ba:bf:39:88:b6:6f:b4:d2:3d:41:77:23:ac:bd:c3: 27:d2:22:5a:58:8a:c3:56:dd:98:37:92:39:7c:54: da:0b:4b:25:37:cb:36:f8:8a:b6:c6:25:28:e8:25: 77:24:b9:bf:cb:38:db:d3:b1:21:fa:3c:55:ca:4f: 75:56:11:79:9e:d8:4f:df:38:ea:b9:a6:e7:ad:51: b6:05:fe:0d:db:cc:f1:1c:42:36:89:34:72:dc:fa: f9:ab:61:ba:52:8c:1d:b7:df:c6:ae:a8:e9:1d:fe: e6:35:a6:5b:81:22:ba:40:48:04:a2:bf:98:70:51: 2f:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2A:B2:F6:8F:A3:3D:71:64:D8:E5:C6:D0:F7:06:B1:06:81:4D:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/72c5a130-0f54-347e-b91c-562c3f29de3a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.64.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:92:e6:f7:58:0b:13:f9:51:85:a7:fd:c7:82:1b:20:4b:6b: f6:b2:f8:93:66:98:65:9a:40:a1:41:9f:a8:56:59:15:3f:75: d9:b9:57:51:5b:27:31:fe:74:0e:66:dc:8c:81:d9:43:d9:01: fc:90:3e:13:33:38:b7:a1:84:fc:d1:6b:b0:4b:f5:77:ac:1f: c5:54:04:3a:fb:4f:2c:96:3c:28:06:eb:3c:f8:74:85:6c:fa: 9b:ef:c4:18:f2:72:44:dd:6e:52:b5:5b:c3:07:15:34:8a:90: 1e:ce:5b:b5:94:f5:fc:15:39:97:d7:be:c1:20:89:4d:01:40: 37:a5:f4:9a:84:7f:95:ff:62:58:51:1a:fc:03:79:9b:1e:86: 43:d6:ef:fa:df:c1:a4:22:73:f9:82:ce:5f:41:f9:f7:f0:39: 74:53:09:f0:25:a3:d8:7d:96:84:7f:3f:b9:99:33:5b:6e:21: ae:9c:70:d1:ea:ad:db:fa:dc:8d:13:4b:5e:40:ec:08:95:55: 3e:0c:d8:e0:bc:73:7f:c3:70:4a:d4:a2:8b:57:24:a6:28:f5: c8:c8:29:35:8e:22:16:bf:bb:8c:3a:f8:fc:63:65:3b:a3:74: d1:01:95:4c:a3:04:1d:78:0f:92:75:5a:b8:1f:57:4b:b2:c8: c4:37:74:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je59te20vsYhnwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmIxMzRmMDItNDQ0NS00MDE2LTgwMDgtY2M3NGY4NTZjMTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0xoma/tlyW6RBzX0FQebowEBU7+Oawv2dCC 6l26r37XB43iyi+8s2bz6i4PhRlrnucEGy7Xj7qBy7VuyctDvS7ATn1L+sC13eJf KSrEoq/QL41d5quAIjPHf8bb2jFmE2at3Pt2LySPzNeOseWGKp+nwlGEb5bxEWbO zCSbClnsWlNS0bq6vzmItm+00j1BdyOsvcMn0iJaWIrDVt2YN5I5fFTaC0slN8s2 +Iq2xiUo6CV3JLm/yzjb07Eh+jxVyk91VhF5nthP3zjquabnrVG2Bf4N28zxHEI2 iTRy3Pr5q2G6Uowdt9/GrqjpHf7mNaZbgSK6QEgEor+YcFEvVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUqsvaPoz1xZNjlxtD3BrEGgU3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzJjNWExMzAtMGY1NC0z NDdlLWI5MWMtNTYyYzNmMjlkZTNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGS5vdYCxP5UYWn/ceCGyBLa/ay+JNmmGWaQKFBn6hWWRU/ddm5V1Fb JzH+dA5m3IyB2UPZAfyQPhMzOLehhPzRa7BL9XesH8VUBDr7TyyWPCgG6zz4dIVs +pvvxBjyckTdblK1W8MHFTSKkB7OW7WU9fwVOZfXvsEgiU0BQDel9JqEf5X/YlhR GvwDeZsehkPW7/rfwaQic/mCzl9B+ffwOXRTCfAlo9h9loR/P7mZM1tuIa6ccNHq rdv63I0TS15A7AiVVT4M2OC8c3/DcErUootXJKYo9cjIKTWOIha/u4w6+PxjZTuj dNEBlUyjBB14D5J1WrgfV0uyyMQ3dBk= -----END CERTIFICATE-----Generated at Sat Sep 26 14:06:47 2026 by rpki-client