$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8118de38-8923-3654-b416-2e6583d82a8e.roa File: 8118de38-8923-3654-b416-2e6583d82a8e.roa (raw, json) Hash identifier: kb6z6BWu0RGE2527AexqFfGA+aRLBOSJ3sRBeJC8a8Q= Subject key identifier: 64:CA:8D:A9:0A:9A:FC:C3:9F:33:0B:A6:82:72:7B:C7:C7:08:9F:BA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983BFBFB8A90ACF7509DC00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8118de38-8923-3654-b416-2e6583d82a8e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.99.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:bf:bf:b8:a9:0a:cf:75:09:dc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f95fae35-8c84-44bb-938f-09dfd4a0e41f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:fe:44:35:6a:b5:85:95:dd:ef:33:9d:7e: 1d:3f:b2:17:31:f3:11:99:e9:ab:5a:53:41:c4:a5: be:8b:4a:b1:80:72:a5:0c:f9:0a:82:88:37:48:cc: 12:6a:0a:86:50:ac:a5:8a:5a:dc:e3:9d:e1:1d:60: bd:f4:9e:fb:ef:84:85:5b:b5:51:07:06:71:ec:bd: 93:63:4f:d5:6d:2f:8e:80:3a:48:7b:e2:a6:49:25: 23:ef:ce:90:46:c4:2a:b1:96:0e:48:c5:64:5a:c4: 4b:00:ef:14:af:06:f8:95:60:40:0a:08:ec:82:a4: 8e:6a:87:14:33:b5:2d:f9:6b:1a:f7:32:5e:a7:05: 95:57:41:a4:d6:7b:70:75:6d:68:ff:b1:71:8c:b5: 10:43:51:6f:c2:4d:07:4e:fc:73:75:da:6b:94:f8: db:e8:ba:f0:17:eb:c6:f4:11:e3:f0:e9:6b:43:8e: ef:49:d7:07:c9:ba:54:8e:00:49:27:f1:9b:fc:4d: 48:af:f8:66:ec:f1:17:db:d4:fc:1b:8a:d2:56:1d: 0e:8c:6e:b1:20:85:17:67:68:9d:f8:80:62:d6:10: 1e:a8:32:13:35:14:9c:e2:1a:ab:bd:50:f7:f1:5f: 29:cc:36:5c:ce:70:21:d4:39:5f:ae:fe:8c:f8:0c: 45:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CA:8D:A9:0A:9A:FC:C3:9F:33:0B:A6:82:72:7B:C7:C7:08:9F:BA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8118de38-8923-3654-b416-2e6583d82a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.99.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:c3:18:4a:a3:60:eb:90:79:7b:89:d2:ad:1b:fb:c5:fb:42: 10:28:45:97:69:03:4d:99:c6:7a:03:d9:10:dd:17:49:bf:ac: db:61:4e:15:d1:73:a7:dc:a0:00:6f:c4:39:5c:4f:90:f9:a2: 78:78:44:6a:8b:f9:71:bf:ae:91:f0:ca:cd:42:ce:87:a6:85: f5:95:1a:46:bf:a0:18:f7:a5:9e:a8:ad:0d:27:71:5d:24:e8: 2f:76:45:d7:3d:e3:bb:2f:4e:8e:be:d6:a8:8b:7d:99:b2:84: 3a:5d:a7:f3:93:6a:52:95:ed:d3:de:46:a5:7b:57:6b:0c:f9: e8:d0:b2:f9:32:b7:af:a1:ed:12:a9:af:c6:7a:f1:ae:4b:34: 56:dc:56:6c:bd:e0:2c:f1:b8:53:56:77:18:25:98:c6:85:46: 11:4b:d8:b3:88:94:eb:87:2f:c2:6a:32:6a:2c:27:f8:20:3c: 54:0f:fe:79:78:73:09:cf:65:12:6a:7f:be:38:ca:6c:19:ce: 80:d2:f9:f5:d3:6e:6c:e4:bd:4a:d1:c5:7d:ad:4d:d6:33:09: 56:1f:3d:da:47:11:02:41:8f:81:a9:69:f2:2d:cc:95:04:65: 70:ec:30:b6:d0:80:3d:13:9b:0d:fd:b0:d3:52:0d:e2:54:dc: d2:de:73:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg7+/uKkKz3UJ3AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjk1ZmFlMzUtOGM4NC00NGJiLTkzOGYtMDlkZmQ0YTBlNDFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsD+RDVqtYWV3e8znX4dP7IXMfMRmemrWlNB xKW+i0qxgHKlDPkKgog3SMwSagqGUKylilrc453hHWC99J7774SFW7VRBwZx7L2T Y0/VbS+OgDpIe+KmSSUj786QRsQqsZYOSMVkWsRLAO8Urwb4lWBACgjsgqSOaocU M7Ut+Wsa9zJepwWVV0Gk1ntwdW1o/7FxjLUQQ1Fvwk0HTvxzddprlPjb6LrwF+vG 9BHj8OlrQ47vSdcHybpUjgBJJ/Gb/E1Ir/hm7PEX29T8G4rSVh0OjG6xIIUXZ2id +IBi1hAeqDITNRSc4hqrvVD38V8pzDZcznAh1Dlfrv6M+AxF3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTKjakKmvzDnzMLpoJye8fHCJ+6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODExOGRlMzgtODkyMy0z NjU0LWI0MTYtMmU2NTgzZDgyYThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokhjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbDGEqjYOuQeXuJ0q0b+8X7QhAoRZdpA02ZxnoD2RDdF0m/rNthThXR c6fcoABvxDlcT5D5onh4RGqL+XG/rpHwys1CzoemhfWVGka/oBj3pZ6orQ0ncV0k 6C92Rdc947svTo6+1qiLfZmyhDpdp/OTalKV7dPeRqV7V2sM+ejQsvkyt6+h7RKp r8Z68a5LNFbcVmy94CzxuFNWdxglmMaFRhFL2LOIlOuHL8JqMmosJ/ggPFQP/nl4 cwnPZRJqf744ymwZzoDS+fXTbmzkvUrRxX2tTdYzCVYfPdpHEQJBj4GpafItzJUE ZXDsMLbQgD0Tmw39sNNSDeJU3NLecxQ= -----END CERTIFICATE-----Generated at Mon Sep 28 13:29:39 2026 by rpki-client