$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa File: 8aa0414c-8126-3e49-be44-eb2af2892430.roa (raw, json) Hash identifier: k1XqGWoiTir4n5VKnj1/Y/I06NlbaDa8hfC32uY1nww= Subject key identifier: 34:27:86:DB:30:6C:A8:4D:46:62:13:21:CD:24:34:63:7F:3F:15:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0015FAFC3E9EF3E9E380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.42.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:00:15:fa:fc:3e:9e:f3:e9:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4fc9d14f-282d-4bcb-b30d-45d206ad22d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:26:49:40:17:4e:4a:a2:56:61:e8:af:1c:5e: 3e:f9:b6:74:be:da:5b:24:33:6a:90:67:40:bd:1f: 74:17:df:8d:8f:e3:3f:31:8e:9f:8b:83:48:c6:79: 16:ef:f6:7b:ac:68:51:2d:34:6d:57:b5:1c:9b:b8: e9:c2:6c:89:ae:16:be:00:c6:87:ae:1f:43:b9:29: 6f:58:57:de:c0:3c:48:ce:9b:d1:2b:2d:a5:70:88: 00:a6:cf:3d:a1:2d:d4:1e:a2:6c:40:dc:5b:f3:75: 46:6f:d2:a4:72:8e:0f:83:99:ce:2a:57:19:25:ab: 52:d0:8a:f5:6c:8d:a8:f4:09:42:1d:3f:c7:13:87: 08:e2:e3:b8:0a:d3:e9:cf:f0:16:cd:a0:62:2c:bf: 17:57:f4:dc:26:87:e7:d9:d9:90:af:dd:57:ad:04: 7d:e7:f9:32:9f:75:6a:7b:03:18:28:c6:54:7f:8a: dc:8c:d9:54:eb:3e:32:56:c2:f8:b2:b1:b5:90:00: 82:e3:03:d3:1a:8b:4e:72:88:48:6d:99:c6:41:a4: 73:54:a5:45:cc:99:a8:fd:1e:ee:f6:32:b5:3f:e7: e8:6b:e5:de:a5:d6:0a:d9:b9:68:a9:51:04:9b:f9: 69:83:13:4b:87:5a:c4:c3:57:98:63:be:67:15:dc: 6e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:27:86:DB:30:6C:A8:4D:46:62:13:21:CD:24:34:63:7F:3F:15:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/8aa0414c-8126-3e49-be44-eb2af2892430.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.42.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:43:94:47:90:4b:e2:f8:17:04:27:8d:24:7d:8a:9d:0a:16: 7c:33:bd:3d:30:a1:43:d5:40:4d:ab:57:51:78:c0:05:8e:08: d7:80:67:8e:0d:65:84:03:1b:c1:21:e9:ac:e7:3f:75:91:dc: eb:fd:d4:19:11:03:46:79:d6:84:5b:c9:10:d2:4f:0f:cc:89: ea:cd:c0:0e:6a:4a:e3:0e:62:d6:a6:be:5b:b8:0f:b3:c4:74: fa:64:8d:7b:7a:30:1e:fb:28:57:1d:f1:9b:ab:ae:44:4a:a2: da:59:7b:52:e2:bb:9e:c4:76:e5:c5:d4:c9:c2:ae:f3:81:17: c8:b4:4a:96:af:a2:a0:af:5d:e1:e3:de:00:d8:99:78:c1:eb: 25:ba:1d:05:d6:43:a3:99:47:22:e1:c1:11:8a:c8:bf:7b:e8: 7e:f7:ee:cb:cd:82:c4:ec:d7:08:bb:e6:a7:05:6c:06:78:39: 31:bf:44:f1:10:8e:66:4b:a4:03:22:92:a8:5c:59:9f:87:37: 0e:29:d7:b6:40:a5:62:35:86:e6:be:36:e1:cb:4d:df:a2:4a: ac:cc:7b:34:37:26:1d:f1:37:b3:9c:fc:7a:45:55:1f:5a:3e: e0:6f:8d:10:26:1e:b1:b6:01:6b:60:2f:8d:99:a3:fe:cb:01: de:bf:30:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewAV+vw+nvPp44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGZjOWQxNGYtMjgyZC00YmNiLWIzMGQtNDVkMjA2YWQyMmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyZJQBdOSqJWYeivHF4++bZ0vtpbJDNqkGdA vR90F9+Nj+M/MY6fi4NIxnkW7/Z7rGhRLTRtV7Ucm7jpwmyJrha+AMaHrh9DuSlv WFfewDxIzpvRKy2lcIgAps89oS3UHqJsQNxb83VGb9Kkco4Pg5nOKlcZJatS0Ir1 bI2o9AlCHT/HE4cI4uO4CtPpz/AWzaBiLL8XV/TcJofn2dmQr91XrQR95/kyn3Vq ewMYKMZUf4rcjNlU6z4yVsL4srG1kACC4wPTGotOcohIbZnGQaRzVKVFzJmo/R7u 9jK1P+foa+XepdYK2bloqVEEm/lpgxNLh1rEw1eYY75nFdxuDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDQnhtswbKhNRmITIc0kNGN/PxWaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOGFhMDQxNGMtODEyNi0z ZTQ5LWJlNDQtZWIyYWYyODkyNDMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0qMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJDlEeQS+L4FwQnjSR9ip0KFnwzvT0woUPVQE2rV1F4wAWOCNeAZ44N ZYQDG8Eh6aznP3WR3Ov91BkRA0Z51oRbyRDSTw/MierNwA5qSuMOYtamvlu4D7PE dPpkjXt6MB77KFcd8ZurrkRKotpZe1Liu57EduXF1MnCrvOBF8i0SpavoqCvXeHj 3gDYmXjB6yW6HQXWQ6OZRyLhwRGKyL976H737svNgsTs1wi75qcFbAZ4OTG/RPEQ jmZLpAMikqhcWZ+HNw4p17ZApWI1hua+NuHLTd+iSqzMezQ3Jh3xN7Oc/HpFVR9a PuBvjRAmHrG2AWtgL42Zo/7LAd6/MJI= -----END CERTIFICATE-----Generated at Fri Oct 9 21:17:52 2026 by rpki-client