$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa File: 993ad79a-98a2-3187-8b24-728cada43a62.roa (raw, json) Hash identifier: YMpl8bAXuzIiUpVZxv5XLM5vxunX8x/263oNnW9MX/I= Subject key identifier: 3B:53:66:BC:A1:9C:BC:C0:F6:8F:A7:D3:97:B6:6A:70:FF:17:A5:FF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498330DFA6F944E0CD1EC180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:30:df:a6:f9:44:e0:cd:1e:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ed5cc96b-f902-4203-8f54-6abec58e871e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:0d:cf:3f:00:1a:e8:5f:01:55:07:24:2a: 50:90:8d:bc:1a:b7:e0:60:c2:60:0c:b6:02:b5:b6: 94:0d:23:65:7a:d2:eb:3a:38:3b:c3:0c:01:78:6f: 86:a1:0f:b3:a8:a2:ee:3f:67:5f:1c:3c:fe:21:eb: 07:37:7e:4a:15:12:aa:2d:a9:94:c1:f7:83:8b:7f: 81:1e:f7:5b:d5:75:a8:ec:c7:14:ca:03:6e:ad:24: b5:89:d8:f9:f6:68:40:6f:7a:3f:74:8e:4a:bf:33: 3a:5a:c9:d6:1e:56:4b:18:12:45:f1:71:df:d4:c8: 81:c4:f0:2a:39:f6:40:ed:49:ee:02:76:55:09:08: d3:7a:be:d8:8c:1d:ca:c5:54:1a:3a:56:f1:fc:a5: a4:a1:69:f4:ff:e1:25:df:7d:09:63:b8:bd:e7:6b: 60:75:99:36:0e:b9:77:db:ae:34:f3:3a:40:fc:60: f5:16:fd:24:bc:eb:e2:ef:47:84:cd:fb:6f:32:b0: 85:74:10:e5:de:fb:31:7b:e3:e0:a7:18:57:2a:f7: 2a:a1:8b:bf:01:b8:93:c5:13:db:fa:74:cb:b6:1e: 64:d2:1e:5c:b7:95:e2:45:11:80:b4:84:24:ff:3b: 8b:72:3c:39:5b:91:3a:a4:6c:cd:30:b8:33:9b:04: 82:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:53:66:BC:A1:9C:BC:C0:F6:8F:A7:D3:97:B6:6A:70:FF:17:A5:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/993ad79a-98a2-3187-8b24-728cada43a62.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:05:64:01:c4:52:be:9e:22:fd:d8:b0:4c:ae:2b:0d:75:66: b7:a1:16:79:9f:ed:be:68:7a:24:df:2c:f6:d6:15:cc:f9:57: f3:3c:68:06:aa:23:8e:11:69:bb:ce:e6:55:19:a9:3c:2c:ea: 00:74:a6:76:e4:db:6b:d3:5d:6d:be:6a:77:c1:26:21:99:2b: c2:aa:af:38:5c:e2:82:14:5f:21:d1:f7:3a:95:b5:20:16:57: b9:4a:22:93:b3:0b:3d:38:98:9f:64:6f:fd:6d:68:c9:33:cb: b0:58:68:36:61:5c:1a:84:29:08:61:4f:c8:72:46:11:34:93: 07:ae:9d:ab:78:28:04:53:9d:54:83:96:96:a3:31:5d:0a:c3: ad:63:83:72:6f:bb:4f:a7:a0:4a:41:ba:0c:15:5e:02:58:0f: a8:18:ad:d9:18:95:19:6a:df:b9:e5:18:c6:c7:72:3e:a7:cc: 43:ac:26:e4:91:9c:e3:53:62:88:25:cd:21:e0:af:00:f5:3d: 29:30:f5:aa:37:11:63:35:13:a4:82:db:7f:d4:9e:7a:ab:d9: a9:c0:13:cc:9f:90:15:9a:a6:a7:ba:c4:07:1b:cb:4b:4b:5d: 73:93:ae:33:2d:1b:10:16:de:15:08:ec:b5:0b:cb:d4:7b:ad: 0b:b2:6b:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgzDfpvlE4M0ewYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZWQ1Y2M5NmItZjkwMi00MjAzLThmNTQtNmFiZWM1OGU4NzFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNANzz8AGuhfAVUHJCpQkI28GrfgYMJgDLYC tbaUDSNletLrOjg7wwwBeG+GoQ+zqKLuP2dfHDz+IesHN35KFRKqLamUwfeDi3+B Hvdb1XWo7McUygNurSS1idj59mhAb3o/dI5KvzM6WsnWHlZLGBJF8XHf1MiBxPAq OfZA7UnuAnZVCQjTer7YjB3KxVQaOlbx/KWkoWn0/+El330JY7i952tgdZk2Drl3 26408zpA/GD1Fv0kvOvi70eEzftvMrCFdBDl3vsxe+PgpxhXKvcqoYu/AbiTxRPb +nTLth5k0h5ct5XiRRGAtIQk/zuLcjw5W5E6pGzNMLgzmwSCMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDtTZryhnLzA9o+n05e2anD/F6X/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTkzYWQ3OWEtOThhMi0z MTg3LThiMjQtNzI4Y2FkYTQzYTYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMkFZAHEUr6eIv3YsEyuKw11ZrehFnmf7b5oeiTfLPbWFcz5V/M8aAaq I44RabvO5lUZqTws6gB0pnbk22vTXW2+anfBJiGZK8Kqrzhc4oIUXyHR9zqVtSAW V7lKIpOzCz04mJ9kb/1taMkzy7BYaDZhXBqEKQhhT8hyRhE0kweunat4KARTnVSD lpajMV0Kw61jg3Jvu0+noEpBugwVXgJYD6gYrdkYlRlq37nlGMbHcj6nzEOsJuSR nONTYoglzSHgrwD1PSkw9ao3EWM1E6SC23/Unnqr2anAE8yfkBWapqe6xAcby0tL XXOTrjMtGxAW3hUI7LULy9R7rQuyaw4= -----END CERTIFICATE-----Generated at Mon Sep 28 19:22:47 2026 by rpki-client