$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afed4d81-5468-32b4-9572-1af22c3e5dbf.roa File: afed4d81-5468-32b4-9572-1af22c3e5dbf.roa (raw, json) Hash identifier: 6fCgBfHtogIypxv1hHDAkZYgZRj8IkI7JBm/UPsKq5s= Subject key identifier: 42:F1:2E:DA:CD:6A:54:3F:21:A0:15:EC:C8:8D:A5:FB:D3:48:98:EB Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B02574F3A67929104E040 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afed4d81-5468-32b4-9572-1af22c3e5dbf.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:02:57:4f:3a:67:92:91:04:e0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=20d9871f-d0b5-4b7e-911f-17f3f7e5ee08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:c7:31:72:84:a2:6a:21:22:db:34:e3:4d: 66:28:b7:3e:e1:8a:ea:25:0a:f8:f0:dd:b7:ac:46: a5:0e:56:53:72:42:94:75:ab:c1:1a:44:e1:39:c7: 53:8f:bb:4c:46:b8:3f:60:e3:1d:97:84:85:29:1a: af:23:18:1a:dd:15:d2:32:2e:64:94:b6:3f:3b:03: 14:b7:06:be:22:53:ef:8e:94:e2:f4:db:a5:9d:c2: 13:51:04:68:ee:53:58:e0:eb:2b:3d:93:6d:5d:bf: 01:af:65:81:6c:a6:ea:18:00:a9:f4:66:ec:66:5f: 54:13:6e:12:6e:fa:f8:26:63:c5:34:be:e2:e2:f7: 06:de:85:83:31:ff:2d:f4:48:31:4c:e8:60:2c:75: b3:5e:29:ef:ba:b4:fd:7f:2c:9e:a1:61:ef:c8:ed: 33:0e:a9:19:a4:e9:4e:9a:f8:2d:a6:41:cc:5c:1c: 67:e1:b7:3d:a9:41:87:a2:9f:b0:93:7a:15:76:6a: 11:c2:25:03:f7:e3:7a:5c:d1:a8:5a:80:5b:91:01: 17:fb:af:14:da:88:07:8d:8a:30:20:6e:fe:7b:86: d3:5a:44:74:1b:75:e1:71:78:3b:2a:84:48:80:e5: ca:61:7b:76:67:e2:6f:76:90:1c:d9:9b:00:f7:2c: 4f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F1:2E:DA:CD:6A:54:3F:21:A0:15:EC:C8:8D:A5:FB:D3:48:98:EB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/afed4d81-5468-32b4-9572-1af22c3e5dbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:b0:6b:5b:58:c1:20:55:8c:19:5c:18:85:77:64:0b:db:92: 58:fa:c1:7d:8b:f9:5d:7e:48:62:73:e7:af:df:78:d2:4d:fa: 4e:1f:cb:23:11:57:c3:a8:d6:b5:3d:e8:14:c1:ab:57:f4:42: ca:6d:93:01:ee:8c:71:20:f8:a9:19:91:a9:b3:97:2e:a7:c6: b8:8c:5e:7d:ab:04:bf:9c:4f:48:fd:91:4e:45:9b:45:a7:87: 6a:8f:32:65:b2:4a:d8:00:0c:20:47:b2:0a:05:7e:b2:55:71: 02:30:f5:ae:5c:c0:9c:96:c8:dd:2c:c2:69:8c:d6:af:2b:bb: c8:14:7d:eb:58:a7:ed:c6:c2:f7:d3:eb:ab:05:32:50:70:48: db:2b:ed:3b:c7:b8:ad:74:c3:d2:e0:c8:d9:22:6a:d3:f5:55: 9e:1f:d7:fc:71:09:25:f1:34:db:56:a9:91:8c:86:03:a1:d7: d3:f0:18:81:bb:ab:44:1d:9c:96:d4:69:c5:0e:7e:5c:28:30: 44:e5:e1:fc:40:e8:19:01:1a:65:8f:35:96:08:38:3f:90:74: 0e:09:bf:9f:09:0e:4f:b7:ec:a9:f2:c4:0a:b7:0c:bd:17:29: ba:90:4b:a6:c3:f3:71:be:6c:94:36:44:00:2a:3a:13:ff:af: e4:e6:47:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewJXTzpnkpEE4EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjBkOTg3MWYtZDBiNS00YjdlLTkxMWYtMTdmM2Y3ZTVlZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnLHMXKEomohIts0401mKLc+4YrqJQr48N23 rEalDlZTckKUdavBGkThOcdTj7tMRrg/YOMdl4SFKRqvIxga3RXSMi5klLY/OwMU twa+IlPvjpTi9NulncITUQRo7lNY4OsrPZNtXb8Br2WBbKbqGACp9GbsZl9UE24S bvr4JmPFNL7i4vcG3oWDMf8t9EgxTOhgLHWzXinvurT9fyyeoWHvyO0zDqkZpOlO mvgtpkHMXBxn4bc9qUGHop+wk3oVdmoRwiUD9+N6XNGoWoBbkQEX+68U2ogHjYow IG7+e4bTWkR0G3XhcXg7KoRIgOXKYXt2Z+JvdpAc2ZsA9yxPZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFELxLtrNalQ/IaAV7MiNpfvTSJjrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWZlZDRkODEtNTQ2OC0z MmI0LTk1NzItMWFmMjJjM2U1ZGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK01MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACawa1tYwSBVjBlcGIV3ZAvbklj6wX2L+V1+SGJz56/feNJN+k4fyyMR V8Oo1rU96BTBq1f0QsptkwHujHEg+KkZkamzly6nxriMXn2rBL+cT0j9kU5Fm0Wn h2qPMmWyStgADCBHsgoFfrJVcQIw9a5cwJyWyN0swmmM1q8ru8gUfetYp+3GwvfT 66sFMlBwSNsr7TvHuK10w9LgyNkiatP1VZ4f1/xxCSXxNNtWqZGMhgOh19PwGIG7 q0QdnJbUacUOflwoMETl4fxA6BkBGmWPNZYIOD+QdA4Jv58JDk+37KnyxAq3DL0X KbqQS6bD83G+bJQ2RAAqOhP/r+TmRyE= -----END CERTIFICATE-----Generated at Thu Oct 8 16:17:34 2026 by rpki-client