$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa File: 9955a230-31b9-3682-979e-f08e04a1df4d.roa (raw, json) Hash identifier: njKhkQTi5k57yJApATSOhayPpQ1INSuWM+PUZAiu5y4= Subject key identifier: 69:67:B9:2B:F2:89:96:C0:3F:69:11:E8:9E:59:E3:02:1A:19:B5:8D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49832C518D976C4B48418690 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:2c:51:8d:97:6c:4b:48:41:86:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=05caead8-ae30-4cd9-ae13-c9b40db740c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:a9:01:f7:a4:04:00:45:ee:93:46:43:ba:1b: 5e:e3:90:60:a9:26:73:92:f6:5a:20:f4:6e:bf:3c: 2d:d8:d9:28:16:07:a6:86:e1:6c:e6:33:10:b3:b5: 00:2e:00:3d:ce:e3:d0:b0:a2:77:25:40:4f:b7:9e: 3b:5e:75:46:ad:5b:c7:38:9d:9b:ea:71:b9:55:8c: 16:f6:1a:28:c6:e1:b6:02:e2:d8:68:e6:2d:e5:a7: 2b:89:32:ea:0c:08:6f:05:6a:db:8a:a0:f9:b6:5e: 2d:b7:ea:19:b7:6d:7b:14:82:94:17:12:09:8e:19: 96:91:02:17:d1:cd:16:e2:89:84:73:4a:aa:03:d4: 85:4a:1b:08:36:a6:c1:4b:b5:65:f3:7d:66:ae:5a: fe:17:5f:50:4d:1a:24:a6:41:2e:07:36:53:fc:88: 10:98:f9:18:e1:11:c0:66:bd:d9:7b:15:ff:50:9d: 2d:d7:8c:17:1d:ee:40:6d:0d:6b:8f:80:81:1a:13: cf:5b:b3:67:4b:86:5d:73:7d:0f:8a:a4:58:20:19: 70:3a:cb:20:7f:c4:a7:24:f0:cb:e7:a2:2b:21:bc: 8f:57:7c:48:e1:58:b0:62:4a:8b:18:00:4d:e3:fe: 5b:c8:f8:bd:a3:52:cb:0d:51:7c:90:f6:bd:ca:56: 95:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:67:B9:2B:F2:89:96:C0:3F:69:11:E8:9E:59:E3:02:1A:19:B5:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9955a230-31b9-3682-979e-f08e04a1df4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:c6:30:ed:af:ab:25:9a:87:ef:86:9b:54:26:70:38:de:c9: 14:8a:69:28:81:2e:42:1c:fc:31:64:af:b0:cb:05:fb:eb:2d: 62:92:4a:da:ec:db:df:96:1e:38:59:ba:2e:36:ea:bb:17:1e: be:8b:54:bb:0c:03:69:7f:a6:68:95:eb:e7:13:48:3d:47:7f: 91:24:56:7b:8b:b9:81:00:fc:c5:cc:23:cc:6e:4b:ee:7c:a1: a1:59:f2:ef:70:41:c2:74:d8:8f:3f:95:f6:f3:18:87:82:90: 88:c9:57:30:5f:ee:c1:9b:4f:98:53:a2:10:cd:2a:d8:3d:6d: 07:22:23:64:05:e1:06:16:0c:56:77:14:f4:98:31:d2:04:c0: 43:34:1a:df:e4:c9:40:48:13:5d:b0:d7:a9:4d:8c:ff:25:0b: 2e:2e:14:12:e4:8d:dc:a5:da:13:ab:dc:57:21:61:0e:17:72: f5:5c:24:b3:8c:8f:68:6a:c3:5f:fb:f7:1b:00:e0:60:06:66: 25:71:9a:c1:9d:23:2d:69:48:86:02:d9:ea:d3:04:bf:72:7b: 1a:81:4a:66:cd:60:1e:a5:4d:20:65:96:1d:9f:eb:48:46:72: 26:aa:d7:09:9f:05:83:7f:60:5b:d8:19:20:d8:81:88:05:54: bc:19:a2:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyxRjZdsS0hBhpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDVjYWVhZDgtYWUzMC00Y2Q5LWFlMTMtYzliNDBkYjc0MGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgakB96QEAEXuk0ZDuhte45BgqSZzkvZaIPRu vzwt2NkoFgemhuFs5jMQs7UALgA9zuPQsKJ3JUBPt547XnVGrVvHOJ2b6nG5VYwW 9hooxuG2AuLYaOYt5acriTLqDAhvBWrbiqD5tl4tt+oZt217FIKUFxIJjhmWkQIX 0c0W4omEc0qqA9SFShsINqbBS7Vl831mrlr+F19QTRokpkEuBzZT/IgQmPkY4RHA Zr3ZexX/UJ0t14wXHe5AbQ1rj4CBGhPPW7NnS4Zdc30PiqRYIBlwOssgf8SnJPDL 56IrIbyPV3xI4ViwYkqLGABN4/5byPi9o1LLDVF8kPa9ylaV8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlnuSvyiZbAP2kR6J5Z4wIaGbWNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTk1NWEyMzAtMzFiOS0z NjgyLTk3OWUtZjA4ZTA0YTFkZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2aMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAITGMO2vqyWah++Gm1QmcDjeyRSKaSiBLkIc/DFkr7DLBfvrLWKSStrs 29+WHjhZui426rsXHr6LVLsMA2l/pmiV6+cTSD1Hf5EkVnuLuYEA/MXMI8xuS+58 oaFZ8u9wQcJ02I8/lfbzGIeCkIjJVzBf7sGbT5hTohDNKtg9bQciI2QF4QYWDFZ3 FPSYMdIEwEM0Gt/kyUBIE12w16lNjP8lCy4uFBLkjdyl2hOr3FchYQ4XcvVcJLOM j2hqw1/79xsA4GAGZiVxmsGdIy1pSIYC2erTBL9yexqBSmbNYB6lTSBllh2f60hG ciaq1wmfBYN/YFvYGSDYgYgFVLwZouw= -----END CERTIFICATE-----Generated at Tue Oct 6 23:19:49 2026 by rpki-client