$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a89d683-4047-3c03-a34d-b48e7f1a1749.roa File: 7a89d683-4047-3c03-a34d-b48e7f1a1749.roa (raw, json) Hash identifier: 6zfj25hMJEKXHeua3O3d0XHYeLZkU2REOtrQpUqzpPc= Subject key identifier: 94:AD:8D:7A:AE:8A:24:91:15:76:31:F3:22:A1:C6:DA:33:85:5D:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983C7F45BE99B6BB193C4E0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a89d683-4047-3c03-a34d-b48e7f1a1749.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.182.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:c7:f4:5b:e9:9b:6b:b1:93:c4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=08982863-6cb8-42c8-bb57-49071665522b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:0e:70:35:3d:49:d0:79:0b:0e:a1:7f:67:f6: 32:33:4c:c7:8f:a7:ba:f7:e7:6e:c3:9c:15:80:fd: 05:48:a9:96:b8:8f:84:9d:33:f8:25:08:e4:e4:94: be:5b:02:c6:4b:aa:ba:a1:d7:05:c0:a2:97:ea:7f: 25:4e:9a:c9:5e:7d:a9:62:64:97:a0:d1:74:4e:bf: 87:b5:54:d8:13:28:d6:da:d3:f0:61:ab:de:7b:fc: ec:81:ac:bc:ed:7c:18:34:e0:24:ab:08:0f:16:51: 46:fa:67:0a:8c:53:20:a4:2d:ea:1d:81:97:1c:fe: 66:4d:8c:a6:57:a0:08:25:ef:7f:b1:79:f5:57:12: 41:16:b4:b9:f9:c0:00:d9:f8:3d:c3:32:15:56:a2: 97:a3:32:4e:74:bb:13:97:e8:74:f2:39:86:17:cd: 85:a8:b1:5a:89:85:15:99:29:13:b2:54:dc:6d:6b: b2:55:4b:80:e0:22:18:26:b0:34:78:bd:76:ae:a3: 34:cf:26:3d:e3:08:99:1a:3e:d8:f8:c5:0c:1a:0b: d7:65:16:91:50:5e:a5:38:a2:4e:c7:7b:6a:40:18: 12:67:06:98:60:86:0f:b4:d0:06:0e:98:e5:bc:d7: ee:d2:b7:81:ae:94:a2:0f:7e:99:2f:1f:85:09:e9: 67:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AD:8D:7A:AE:8A:24:91:15:76:31:F3:22:A1:C6:DA:33:85:5D:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/7a89d683-4047-3c03-a34d-b48e7f1a1749.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.182.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:b3:b7:4f:6a:56:3d:2e:0a:d2:74:2c:64:f5:a3:3b:ab:47: a0:91:2c:10:1a:fc:af:94:31:a0:9a:cb:97:d3:b0:66:b9:63: 1e:c2:d1:60:79:81:93:7a:c4:59:48:83:bb:ae:16:4b:24:b9: 92:84:49:34:9b:e7:a0:34:ca:ef:e3:97:9a:06:b6:9c:00:65: a1:4d:62:aa:2f:64:a2:be:4d:ec:71:83:e3:56:c7:ef:6c:01: 63:15:1f:87:d1:c1:72:e5:25:27:4a:06:ef:ab:06:7d:bf:c6: 3b:7f:e9:63:b0:a0:53:e3:58:e6:47:ca:d1:25:22:4d:b6:c3: c3:83:5f:c8:44:24:d1:80:fa:a7:4b:ac:d7:47:b7:33:38:18: 98:2a:9f:e5:4b:fa:03:f7:0e:6b:19:32:3c:0b:81:06:99:ac: f0:b6:f7:20:0b:33:df:cc:91:6d:3b:47:e9:fa:bd:77:4a:3d: 78:81:3e:4c:ea:58:f3:85:06:e0:be:d2:11:c0:ea:98:0e:4a: 71:d4:a0:ca:88:b7:a4:28:fd:80:aa:b3:89:35:5e:24:ef:c4: 4c:d0:d4:cc:66:df:be:be:1c:89:83:b5:4c:67:93:ec:aa:62: ca:38:df:6c:e9:f8:34:8d:1b:5a:44:e5:86:02:8e:57:c8:8a: 1e:05:f6:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg8f0W+mba7GTxOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDg5ODI4NjMtNmNiOC00MmM4LWJiNTctNDkwNzE2NjU1MjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw5wNT1J0HkLDqF/Z/YyM0zHj6e69+duw5wV gP0FSKmWuI+EnTP4JQjk5JS+WwLGS6q6odcFwKKX6n8lTprJXn2pYmSXoNF0Tr+H tVTYEyjW2tPwYavee/zsgay87XwYNOAkqwgPFlFG+mcKjFMgpC3qHYGXHP5mTYym V6AIJe9/sXn1VxJBFrS5+cAA2fg9wzIVVqKXozJOdLsTl+h08jmGF82FqLFaiYUV mSkTslTcbWuyVUuA4CIYJrA0eL12rqM0zyY94wiZGj7Y+MUMGgvXZRaRUF6lOKJO x3tqQBgSZwaYYIYPtNAGDpjlvNfu0reBrpSiD36ZLx+FCelnCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJStjXquiiSRFXYx8yKhxtozhV1dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvN2E4OWQ2ODMtNDA0Ny0z YzAzLWEzNGQtYjQ4ZTdmMWExNzQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoki2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF2zt09qVj0uCtJ0LGT1ozurR6CRLBAa/K+UMaCay5fTsGa5Yx7C0WB5 gZN6xFlIg7uuFkskuZKESTSb56A0yu/jl5oGtpwAZaFNYqovZKK+Texxg+NWx+9s AWMVH4fRwXLlJSdKBu+rBn2/xjt/6WOwoFPjWOZHytElIk22w8ODX8hEJNGA+qdL rNdHtzM4GJgqn+VL+gP3DmsZMjwLgQaZrPC29yALM9/MkW07R+n6vXdKPXiBPkzq WPOFBuC+0hHA6pgOSnHUoMqIt6Qo/YCqs4k1XiTvxEzQ1Mxm376+HImDtUxnk+yq Yso432zp+DSNG1pE5YYCjlfIih4F9sM= -----END CERTIFICATE-----Generated at Tue Sep 29 13:35:03 2026 by rpki-client