$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa File: 82601e6b-430d-31de-9c99-a4a04a886fbe.roa (raw, json) Hash identifier: BR7ssV9nxjCXjVkOWGgn3rPGpn5lboBaek3jD7lfSo8= Subject key identifier: A4:C4:98:C0:47:6A:FA:65:D5:2E:28:A3:DD:E5:2C:B6:17:EF:F7:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B1343C3D06E74178D94F8 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:13:43:c3:d0:6e:74:17:8d:94:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fed81f81-c79a-4da7-8b73-7aa365f1be6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:7c:25:a4:97:99:0e:a3:5c:00:e6:3a:19:75: 76:09:2d:58:6b:f8:85:53:d5:b9:0a:b5:6c:26:5f: f0:3c:90:8f:ed:fe:96:2f:e3:63:30:ff:5f:5e:e5: fc:de:1c:9a:c9:fe:47:1c:ff:7f:45:87:31:11:51: ba:9c:7b:27:ec:38:54:2b:0d:14:c3:de:8a:90:d6: ae:06:fb:bc:ee:8f:70:ee:9d:34:03:86:69:82:74: db:82:81:8d:f1:da:7f:ca:b4:26:92:ba:1f:fb:7f: ea:e9:f1:d2:0a:86:a9:c0:1f:ff:6d:25:c7:89:b7: 92:03:ae:04:d5:6a:da:f7:b5:55:45:55:4f:58:27: 3c:2e:a7:db:d7:97:d7:bb:de:88:f9:65:f9:f6:f9: 8e:76:8a:0e:1b:cd:68:2d:a9:3c:9c:ce:fe:41:97: ff:97:0d:1d:93:46:f7:3e:21:b4:df:78:9f:9c:39: a1:a8:c5:cc:bf:a0:67:96:6c:cf:f6:6c:b1:b0:52: 0a:b0:ef:de:f3:f8:22:52:86:7c:09:7f:83:50:6e: 50:06:3a:0b:42:df:4d:6b:90:f3:1a:d8:0a:fe:38: 38:2b:17:b4:5e:a7:87:58:30:f0:f9:1e:91:4a:cc: 7f:1d:fe:1a:0d:11:67:cb:68:bf:5a:f3:99:26:35: fe:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:C4:98:C0:47:6A:FA:65:D5:2E:28:A3:DD:E5:2C:B6:17:EF:F7:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/82601e6b-430d-31de-9c99-a4a04a886fbe.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:42:ec:7e:2d:77:b3:70:70:81:97:24:27:d5:7b:2d:ac:3a: 41:d9:32:76:e8:46:a7:4f:62:21:de:77:18:a2:db:c3:1e:e0: d6:4e:01:a0:8a:79:1b:85:63:18:3b:c9:8d:74:75:58:02:bf: f8:71:0b:bc:05:56:32:1a:49:ce:bb:a8:9a:f9:e0:ba:81:5c: 2b:94:d9:3b:87:80:75:35:9a:5a:f1:5d:e8:b1:4e:ae:b7:84: ec:23:0e:15:ea:39:b1:2a:6e:a4:16:b4:11:c5:d8:66:19:ea: de:55:90:eb:80:52:e4:f7:e9:58:31:c9:9e:06:29:96:dd:f2: e1:a8:9d:b5:fc:15:32:05:75:80:07:ee:d9:9b:c5:1c:d7:f1: 81:1e:6e:6a:6c:0e:3d:08:14:46:74:15:27:fa:e5:ad:4f:19: 59:c0:ce:e2:08:fe:fb:87:c0:b3:13:bf:8c:90:de:ef:0d:a2: 0d:80:2d:96:26:ef:4e:a1:ad:96:bf:34:11:c8:88:c0:4b:1f: e7:61:6c:b6:0d:ab:5b:96:ed:e7:72:bb:d6:6f:3e:01:a3:21: e1:3f:66:ce:38:f0:98:1c:19:90:fe:f6:cf:e3:ed:68:97:0b: 8d:1d:d6:36:97:d6:ef:64:9f:25:3c:ee:21:9f:41:c8:df:34: 1f:e9:38:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JexNDw9BudBeNlPgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmVkODFmODEtYzc5YS00ZGE3LThiNzMtN2FhMzY1ZjFiZTZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy3wlpJeZDqNcAOY6GXV2CS1Ya/iFU9W5CrVs Jl/wPJCP7f6WL+NjMP9fXuX83hyayf5HHP9/RYcxEVG6nHsn7DhUKw0Uw96KkNau Bvu87o9w7p00A4ZpgnTbgoGN8dp/yrQmkrof+3/q6fHSCoapwB//bSXHibeSA64E 1Wra97VVRVVPWCc8Lqfb15fXu96I+WX59vmOdooOG81oLak8nM7+QZf/lw0dk0b3 PiG033ifnDmhqMXMv6BnlmzP9myxsFIKsO/e8/giUoZ8CX+DUG5QBjoLQt9Na5Dz GtgK/jg4Kxe0XqeHWDDw+R6RSsx/Hf4aDRFny2i/WvOZJjX+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKTEmMBHavpl1S4oo93lLLYX7/c8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODI2MDFlNmItNDMwZC0z MWRlLTljOTktYTRhMDRhODg2ZmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK39MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9C7H4td7NwcIGXJCfVey2sOkHZMnboRqdPYiHedxii28Me4NZOAaCK eRuFYxg7yY10dVgCv/hxC7wFVjIaSc67qJr54LqBXCuU2TuHgHU1mlrxXeixTq63 hOwjDhXqObEqbqQWtBHF2GYZ6t5VkOuAUuT36VgxyZ4GKZbd8uGonbX8FTIFdYAH 7tmbxRzX8YEebmpsDj0IFEZ0FSf65a1PGVnAzuII/vuHwLMTv4yQ3u8Nog2ALZYm 706hrZa/NBHIiMBLH+dhbLYNq1uW7edyu9ZvPgGjIeE/Zs448JgcGZD+9s/j7WiX C40d1jaX1u9knyU87iGfQcjfNB/pON0= -----END CERTIFICATE-----Generated at Sun Sep 27 04:44:43 2026 by rpki-client