$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ce8a7f-39fd-336d-8478-6a5037ae2510.roa File: b7ce8a7f-39fd-336d-8478-6a5037ae2510.roa (raw, json) Hash identifier: /2coD1rgODb2KiEBsg3QIZ+Ag6CD3yF5HSep7cj5UUA= Subject key identifier: 8D:53:64:B9:A7:57:8D:84:74:65:C8:72:87:7A:B2:4A:F7:63:4D:A7 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B81208E44C56F57084800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ce8a7f-39fd-336d-8478-6a5037ae2510.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 162.72.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:81:20:8e:44:c5:6f:57:08:48:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1aed26b0-1e42-4403-9bc5-fd17f11693f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b9:0a:16:aa:00:89:82:e8:0a:75:6d:c3:80: 3f:11:be:0a:2d:e6:47:75:96:b3:85:e3:43:14:f4: 5f:e9:0a:88:60:87:de:f0:00:4d:a5:c3:3f:3d:8f: 2c:57:93:18:1d:7d:d4:a7:12:a1:5d:74:4c:a1:a6: 14:8c:97:39:2f:71:13:a0:ee:05:00:47:00:c2:9a: c7:55:34:74:ca:30:c4:09:25:d6:74:95:3e:32:91: 10:aa:0d:c9:86:7f:db:2e:9a:61:ab:b2:c9:6d:ac: 59:cc:17:a2:fc:f2:b6:13:96:2c:72:de:93:5d:7f: aa:08:eb:92:e8:56:f8:8d:c5:8c:55:8a:fd:6e:8f: b3:c1:cf:ee:e0:fc:f5:d1:1a:8b:ed:83:a2:bc:45: e4:51:49:73:27:12:84:db:2f:92:f9:03:a5:ad:19: b2:b8:e3:1f:46:e0:c3:ea:17:0c:c4:77:4d:49:8e: 6f:ad:d8:93:ad:17:b6:59:bf:21:7d:db:c6:43:d9: 1d:fd:3e:5d:5e:83:01:71:84:b6:65:81:95:0c:88: c5:90:2e:c2:bc:65:e6:f5:5c:42:6c:79:aa:b5:ad: c3:26:a9:70:3f:97:df:d5:ec:d7:ad:85:7f:b5:a6: e6:4e:ad:a3:fb:cb:6c:f8:48:dd:59:6c:b5:be:30: 19:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:53:64:B9:A7:57:8D:84:74:65:C8:72:87:7A:B2:4A:F7:63:4D:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b7ce8a7f-39fd-336d-8478-6a5037ae2510.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 162.72.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:44:c5:3d:74:18:2b:b2:4d:a3:90:f1:af:31:14:52:37:af: 33:13:95:90:a9:1a:bd:3f:2b:39:fd:f4:be:59:d9:fb:62:e1: ba:32:81:13:f2:d2:41:76:84:ab:15:0c:48:67:8f:68:a5:46: 7d:0b:dc:ea:a9:fc:77:93:f1:0d:5e:00:23:09:2a:3e:f0:67: 25:22:f3:ae:28:5a:89:51:f9:39:f4:ba:c9:ab:44:ad:18:02: f4:6d:91:18:cb:7d:a9:ad:5e:fe:98:bb:64:b2:15:ca:1b:7c: 61:81:aa:4c:09:46:14:47:ce:9a:43:41:eb:af:b8:a9:49:9c: 70:d3:91:f2:f6:cd:04:06:03:2c:36:cc:2f:e5:9e:3c:63:e3: 7d:a4:9c:93:23:b3:c8:9d:b6:c1:52:26:f0:d9:a1:2d:0c:34: 06:dc:96:64:31:8f:a5:4f:39:22:58:32:8e:5d:54:63:4d:e2: 14:23:36:cc:bb:7f:51:c6:ad:95:fc:b0:ae:da:c6:f8:f1:b6: bb:a7:13:c7:03:3e:56:9a:69:8f:b0:ef:89:cd:33:fb:ed:08: 12:f8:2b:75:b2:a0:d6:1b:5f:27:9b:c4:22:56:2a:4f:0a:2c: 63:5f:db:04:67:f7:a9:1d:5c:c3:eb:1c:c3:5c:67:35:50:0f: d1:5f:59:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je4EgjkTFb1cISAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWFlZDI2YjAtMWU0Mi00NDAzLTliYzUtZmQxN2YxMTY5M2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrkKFqoAiYLoCnVtw4A/Eb4KLeZHdZazheND FPRf6QqIYIfe8ABNpcM/PY8sV5MYHX3UpxKhXXRMoaYUjJc5L3EToO4FAEcAwprH VTR0yjDECSXWdJU+MpEQqg3Jhn/bLpphq7LJbaxZzBei/PK2E5Ysct6TXX+qCOuS 6Fb4jcWMVYr9bo+zwc/u4Pz10RqL7YOivEXkUUlzJxKE2y+S+QOlrRmyuOMfRuDD 6hcMxHdNSY5vrdiTrRe2Wb8hfdvGQ9kd/T5dXoMBcYS2ZYGVDIjFkC7CvGXm9VxC bHmqta3DJqlwP5ff1ezXrYV/tabmTq2j+8ts+EjdWWy1vjAZXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI1TZLmnV42EdGXIcod6skr3Y02nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjdjZThhN2YtMzlmZC0z MzZkLTg0NzgtNmE1MDM3YWUyNTEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAokh6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJExT10GCuyTaOQ8a8xFFI3rzMTlZCpGr0/Kzn99L5Z2fti4boygRPy 0kF2hKsVDEhnj2ilRn0L3Oqp/HeT8Q1eACMJKj7wZyUi864oWolR+Tn0usmrRK0Y AvRtkRjLfamtXv6Yu2SyFcobfGGBqkwJRhRHzppDQeuvuKlJnHDTkfL2zQQGAyw2 zC/lnjxj432knJMjs8idtsFSJvDZoS0MNAbclmQxj6VPOSJYMo5dVGNN4hQjNsy7 f1HGrZX8sK7axvjxtrunE8cDPlaaaY+w74nNM/vtCBL4K3WyoNYbXyebxCJWKk8K LGNf2wRn96kdXMPrHMNcZzVQD9FfWSA= -----END CERTIFICATE-----Generated at Mon Sep 28 06:09:10 2026 by rpki-client