$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa File: b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa (raw, json) Hash identifier: 6GDHmr8HQLUq8VhLjx3EawJ7wK+uSBLphY5TlI4HPyg= Subject key identifier: D5:90:41:1E:44:09:11:64:AF:36:52:DC:EF:02:8E:55:74:68:C6:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498333FB6C8AE17E4552DEE0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:33:fb:6c:8a:e1:7e:45:52:de:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1d3d7112-ccc3-47ef-a1d9-393102be9956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:25:76:78:f8:b0:e7:b3:b3:7e:0b:28:c3: 57:df:ad:01:e5:18:78:f8:7d:eb:6d:97:75:a9:d7: dd:51:8c:43:fc:15:d5:68:f3:c2:95:e0:b8:41:df: 8e:6f:89:a1:65:d3:87:fc:7f:5e:c3:e3:4a:3b:7d: c3:a4:e5:78:83:85:bf:4e:16:a3:14:16:ef:37:f7: 18:4b:54:22:fd:7d:47:10:18:ab:b2:a5:d0:9b:6a: 0a:78:b6:65:26:7b:f7:80:ea:a9:92:1c:17:4f:a3: 9b:85:0f:89:23:9f:5c:07:9a:b2:e5:41:79:58:cd: 51:26:8b:20:8e:1d:43:61:af:a5:57:fc:e3:14:1d: cf:62:ab:50:3d:3b:76:06:72:37:6d:13:b1:dd:22: 3b:64:8f:57:33:bc:ec:10:6c:36:ca:05:8b:e7:42: 5f:a5:24:11:7e:6d:5c:d0:4a:fe:7d:3d:b3:73:30: 5c:9a:fd:59:e5:c3:9a:dd:81:16:b3:f5:3b:0b:8c: 57:c3:53:50:91:73:0b:5a:4d:62:24:e1:fd:8e:f5: 59:8a:c2:40:80:79:80:fa:44:bb:73:48:db:64:ee: 3c:35:3c:ba:f5:10:de:1a:f3:34:72:34:ed:c2:fc: 53:aa:b2:41:b1:62:28:06:0e:a1:e0:05:4b:4e:c4: 88:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:90:41:1E:44:09:11:64:AF:36:52:DC:EF:02:8E:55:74:68:C6:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b95e22d9-06b0-35a7-b152-7b4f674c8ce4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:18:44:48:76:f6:3f:89:de:07:9d:c3:bc:52:82:e9:52:82: be:b1:49:19:0e:7c:30:39:00:4f:1f:7d:44:0c:da:20:38:7e: 1e:58:bd:52:cd:cd:81:b6:30:a8:b8:f1:91:00:fd:47:0c:9e: 1f:b3:97:e4:45:96:b1:0a:8a:dc:02:36:b3:7b:3f:df:e4:07: 88:c8:e6:db:fb:6b:92:ab:73:a9:1f:1e:22:52:4a:a1:c6:cb: 86:32:05:e1:eb:e4:1b:6c:f4:86:69:00:66:3e:15:34:39:48: b9:71:e2:e8:05:be:a2:aa:5a:4a:85:10:5f:ae:91:06:8e:e2: 6e:b8:66:60:a0:26:d1:f4:d4:48:cf:88:79:7f:5b:68:ab:f0: 21:f6:19:2e:54:4a:3a:82:6f:0a:82:ee:dc:3a:2a:69:9c:21: 09:26:b5:c7:71:cc:97:fc:6c:4e:da:31:89:8d:39:d3:59:35: 0d:8a:4b:51:37:fc:f2:b6:90:6e:41:11:55:ba:b2:d4:a8:76: c0:ac:65:61:55:7d:3d:b3:64:2a:6b:88:b4:87:f5:df:3e:72: 32:36:d0:57:4d:7e:30:17:0b:53:d9:6a:53:d5:1f:25:5a:88: 1c:b8:44:be:6c:4b:66:04:54:61:11:3b:6f:90:62:a1:d9:9e: 30:97:6c:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgzP7bIrhfkVS3uAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWQzZDcxMTItY2NjMy00N2VmLWExZDktMzkzMTAyYmU5OTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAomAldnj4sOezs34LKMNX360B5Rh4+H3rbZd1 qdfdUYxD/BXVaPPCleC4Qd+Ob4mhZdOH/H9ew+NKO33DpOV4g4W/ThajFBbvN/cY S1Qi/X1HEBirsqXQm2oKeLZlJnv3gOqpkhwXT6ObhQ+JI59cB5qy5UF5WM1RJosg jh1DYa+lV/zjFB3PYqtQPTt2BnI3bROx3SI7ZI9XM7zsEGw2ygWL50JfpSQRfm1c 0Er+fT2zczBcmv1Z5cOa3YEWs/U7C4xXw1NQkXMLWk1iJOH9jvVZisJAgHmA+kS7 c0jbZO48NTy69RDeGvM0cjTtwvxTqrJBsWIoBg6h4AVLTsSIzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNWQQR5ECRFkrzZS3O8CjlV0aMYHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk1ZTIyZDktMDZiMC0z NWE3LWIxNTItN2I0ZjY3NGM4Y2U0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK35MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkYREh29j+J3gedw7xSgulSgr6xSRkOfDA5AE8ffUQM2iA4fh5YvVLN zYG2MKi48ZEA/UcMnh+zl+RFlrEKitwCNrN7P9/kB4jI5tv7a5Krc6kfHiJSSqHG y4YyBeHr5Bts9IZpAGY+FTQ5SLlx4ugFvqKqWkqFEF+ukQaO4m64ZmCgJtH01EjP iHl/W2ir8CH2GS5USjqCbwqC7tw6KmmcIQkmtcdxzJf8bE7aMYmNOdNZNQ2KS1E3 /PK2kG5BEVW6stSodsCsZWFVfT2zZCpriLSH9d8+cjI20FdNfjAXC1PZalPVHyVa iBy4RL5sS2YEVGERO2+QYqHZnjCXbJI= -----END CERTIFICATE-----Generated at Mon Sep 28 11:20:30 2026 by rpki-client