$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4ff2be3-8241-38ed-a443-fe4f4cde702d.roa File: b4ff2be3-8241-38ed-a443-fe4f4cde702d.roa (raw, json) Hash identifier: yYclnzCG6HaQj0Tehi2aghG45stHeGZiMlk/vpERUYI= Subject key identifier: 5D:3A:ED:B1:F6:4A:E9:54:47:45:02:AC:02:04:91:AB:C1:65:D8:12 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983CA1F7E599B983C642000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4ff2be3-8241-38ed-a443-fe4f4cde702d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.224.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ca:1f:7e:59:9b:98:3c:64:20:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=21ed6917-9cf5-42b3-8117-7188feba9ecb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:bd:23:c2:ab:a5:8b:9f:61:56:17:6c:5f: 02:fc:f2:3e:8e:dd:d3:3c:02:61:44:c4:32:ab:91: a7:4c:7e:7c:84:16:75:0d:de:96:9a:f3:29:d3:34: 8d:c1:ed:cd:7f:7d:45:19:82:83:5c:d3:58:1b:db: f6:b6:97:78:87:57:4b:02:15:ba:e0:d0:9a:56:8d: 8c:39:75:cb:a1:0e:bf:91:9d:54:27:e9:3e:6c:3a: 45:f4:8a:26:33:e8:f4:8f:42:97:76:03:3f:8b:58: 9f:77:a8:05:7e:06:a4:76:54:81:52:a7:55:70:ee: e3:0d:dc:20:6a:64:f5:ea:e4:ea:4e:1b:10:d4:f0: 29:43:40:77:65:45:e4:00:5f:30:98:f8:da:81:1e: 60:62:84:d6:74:e1:d4:c8:01:4b:fe:55:5e:34:1b: f9:e9:8e:ff:8f:a8:fc:ee:68:a8:5a:6c:ee:23:ae: 82:ea:c2:5f:0b:a9:d4:46:5a:fc:d0:b1:5a:69:79: e8:8e:7c:2c:93:e6:49:12:98:e9:51:88:07:c5:20: 3d:76:83:de:8b:3b:db:d4:61:3d:42:c2:04:7e:30: 48:5d:05:33:45:b3:7f:bc:7e:fe:92:d9:70:61:18: 2b:a2:0a:d6:73:f7:a5:f8:7d:19:72:a4:5f:79:bb: e0:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:3A:ED:B1:F6:4A:E9:54:47:45:02:AC:02:04:91:AB:C1:65:D8:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b4ff2be3-8241-38ed-a443-fe4f4cde702d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.224.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:12:3e:90:ea:50:e6:c7:7f:99:f8:d4:b9:6e:8f:3c:5c:eb: cc:fb:f8:fe:6f:3b:bc:f5:82:ce:05:a4:ed:0e:6d:2b:83:82: 80:cd:c3:55:0f:cb:1a:e6:f2:e7:2d:27:3b:12:ba:1e:6b:63: 25:e6:10:2f:dd:a8:63:ed:af:98:f8:28:0e:5a:38:a7:9b:d8: e4:93:67:6a:11:80:b5:32:71:49:7f:9f:3f:aa:55:eb:99:e5: aa:0c:f5:4e:38:e0:c6:3b:62:b3:f2:61:8b:6e:95:87:84:ab: 09:2f:17:b2:8e:ba:bd:d6:97:e2:f7:27:70:6b:ca:62:b5:43: 0d:8d:50:86:4e:0f:24:ac:12:4c:7d:b4:e1:0b:63:2d:50:0e: ce:34:67:b6:5e:3f:80:da:de:5e:93:9b:10:72:22:b0:e1:5b: fd:17:fe:ac:68:72:ef:6f:37:91:9b:6b:5e:cb:b0:a6:79:b2: 2e:a9:d6:59:89:af:c6:c8:85:ec:b1:6c:c7:8d:61:70:23:ee: fb:96:a5:2e:47:33:3b:4b:49:52:4e:7d:24:3d:0f:af:90:3e: ba:94:ba:b2:59:a4:d7:54:84:3c:de:15:a8:29:53:6e:88:f8: 56:53:ab:45:4f:48:d0:11:55:20:ba:bd:02:39:94:cb:d6:ef: 46:ec:4e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg8offlmbmDxkIAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjFlZDY5MTctOWNmNS00MmIzLTgxMTctNzE4OGZlYmE5ZWNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSW9I8KrpYufYVYXbF8C/PI+jt3TPAJhRMQy q5GnTH58hBZ1Dd6WmvMp0zSNwe3Nf31FGYKDXNNYG9v2tpd4h1dLAhW64NCaVo2M OXXLoQ6/kZ1UJ+k+bDpF9IomM+j0j0KXdgM/i1ifd6gFfgakdlSBUqdVcO7jDdwg amT16uTqThsQ1PApQ0B3ZUXkAF8wmPjagR5gYoTWdOHUyAFL/lVeNBv56Y7/j6j8 7mioWmzuI66C6sJfC6nURlr80LFaaXnojnwsk+ZJEpjpUYgHxSA9doPeizvb1GE9 QsIEfjBIXQUzRbN/vH7+ktlwYRgrogrWc/el+H0ZcqRfebvgaQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF067bH2SulUR0UCrAIEkavBZdgSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjRmZjJiZTMtODI0MS0z OGVkLWE0NDMtZmU0ZjRjZGU3MDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokjgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4SPpDqUObHf5n41Llujzxc68z7+P5vO7z1gs4FpO0ObSuDgoDNw1UP yxrm8uctJzsSuh5rYyXmEC/dqGPtr5j4KA5aOKeb2OSTZ2oRgLUycUl/nz+qVeuZ 5aoM9U444MY7YrPyYYtulYeEqwkvF7KOur3Wl+L3J3BrymK1Qw2NUIZODySsEkx9 tOELYy1QDs40Z7ZeP4Da3l6TmxByIrDhW/0X/qxocu9vN5Gba17LsKZ5si6p1lmJ r8bIheyxbMeNYXAj7vuWpS5HMztLSVJOfSQ9D6+QPrqUurJZpNdUhDzeFagpU26I +FZTq0VPSNARVSC6vQI5lMvW70bsTok= -----END CERTIFICATE-----Generated at Sat Sep 26 12:17:40 2026 by rpki-client