$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf7a83cc-d74a-3239-8176-c283c2babf20.roa File: bf7a83cc-d74a-3239-8176-c283c2babf20.roa (raw, json) Hash identifier: LqERl5a020gKPgEMPX9XtFZpGi3W/M0Ba1q2ZXJUMSU= Subject key identifier: EC:FC:20:7F:02:32:CF:FB:B7:C1:3C:7C:75:86:DB:B8:FE:52:B9:49 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B07A6E6C5457173986A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf7a83cc-d74a-3239-8176-c283c2babf20.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:07:a6:e6:c5:45:71:73:98:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=bbee2478-535b-43a8-8902-09864b718936 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:a3:08:1a:d2:ef:c7:1c:f1:f0:12:be:bd:bc: 98:96:98:d5:a1:6e:f8:94:d6:6a:1c:cb:73:f7:70: 7d:9c:15:a8:97:bd:ed:a0:63:46:df:f6:3d:19:30: 0e:28:5b:3a:62:37:4c:a3:88:47:a4:4f:47:de:59: 04:b6:2a:3a:de:33:65:84:33:ff:b0:5f:d5:6f:d4: ae:04:fc:dc:f7:31:63:a8:0d:26:c3:32:cd:07:74: 53:c6:82:16:c5:b8:3d:a4:63:eb:10:8e:f0:0f:bf: 93:92:3f:ba:23:de:be:6a:a4:4a:e7:df:2e:d5:6e: d2:ad:c6:27:ca:f5:de:3a:06:73:91:f8:f7:08:29: 17:27:a7:0a:4b:57:99:b8:5a:1d:c5:5e:d7:54:e4: 93:32:47:3c:1c:20:15:50:22:15:39:9e:f3:d1:30: 90:d3:85:c3:05:e3:35:f4:43:61:64:b2:10:c7:d3: c0:5a:00:d4:ba:f6:65:0d:8b:54:94:86:0f:7b:70: 12:53:08:78:7d:48:4c:1a:49:4f:05:f1:f4:f6:e9: c1:c2:9f:3a:6a:7c:62:b4:3b:63:2b:78:4a:7e:13: 31:bc:3b:1d:d6:1b:ad:3b:3a:e5:48:f7:7d:f7:0b: e4:a3:2f:b8:39:9e:6c:39:94:56:71:5b:a1:ec:12: c6:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:FC:20:7F:02:32:CF:FB:B7:C1:3C:7C:75:86:DB:B8:FE:52:B9:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/bf7a83cc-d74a-3239-8176-c283c2babf20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b1:53:60:c9:2b:07:5b:64:90:18:d8:79:0c:ac:53:71:f7:04: e9:7b:27:f8:58:76:73:6e:2b:eb:10:3f:92:0e:30:1f:25:b7: eb:58:51:02:a9:60:1f:45:37:2b:0d:74:60:9b:99:d9:36:90: 48:b2:e3:62:2a:12:9c:f2:d2:42:36:8a:11:52:49:bc:55:bc: 39:6f:f9:9b:00:52:69:b0:05:d0:14:65:8d:d6:7c:94:9f:4a: ed:cf:d1:14:ee:74:09:ab:e7:b0:1b:5e:9e:e4:40:cf:c0:32: 5b:11:fb:3c:06:de:c6:48:50:5d:fd:ac:7d:7a:90:99:0c:e4: f6:79:43:e2:9c:20:dc:62:4d:0f:95:78:fc:41:23:2a:a6:b1: 74:1e:5e:6a:9c:54:7c:73:f2:49:32:fb:b6:f9:f8:54:54:9f: ae:2a:a8:ba:27:90:cb:f1:ff:e7:f3:c8:c7:82:aa:4c:fb:cf: 02:f0:c1:1f:c0:79:46:80:fd:39:36:33:59:7d:e2:3a:e2:bc: 23:d3:3f:d8:f3:48:12:39:b3:cc:d3:30:5a:09:4a:5b:89:c4: 40:e7:9e:3b:9c:be:45:ef:72:d0:cf:4a:c3:13:62:bb:49:3d: a6:2c:e9:6b:cd:db:99:01:87:b9:05:d5:a1:97:49:48:b1:f4: 87:d8:a7:06 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jewem5sVFcXOYagAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmJlZTI0NzgtNTM1Yi00M2E4LTg5MDItMDk4NjRiNzE4OTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaMIGtLvxxzx8BK+vbyYlpjVoW74lNZqHMtz 93B9nBWol73toGNG3/Y9GTAOKFs6YjdMo4hHpE9H3lkEtio63jNlhDP/sF/Vb9Su BPzc9zFjqA0mwzLNB3RTxoIWxbg9pGPrEI7wD7+Tkj+6I96+aqRK598u1W7SrcYn yvXeOgZzkfj3CCkXJ6cKS1eZuFodxV7XVOSTMkc8HCAVUCIVOZ7z0TCQ04XDBeM1 9ENhZLIQx9PAWgDUuvZlDYtUlIYPe3ASUwh4fUhMGklPBfH09unBwp86anxitDtj K3hKfhMxvDsd1hutOzrlSPd99wvkoy+4OZ5sOZRWcVuh7BLGFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOz8IH8CMs/7t8E8fHWG27j+UrlJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYmY3YTgzY2MtZDc0YS0z MjM5LTgxNzYtYzI4M2MyYmFiZjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1WMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALFTYMkrB1tkkBjYeQysU3H3BOl7J/hYdnNuK+sQP5IOMB8lt+tYUQKp YB9FNysNdGCbmdk2kEiy42IqEpzy0kI2ihFSSbxVvDlv+ZsAUmmwBdAUZY3WfJSf Su3P0RTudAmr57AbXp7kQM/AMlsR+zwG3sZIUF39rH16kJkM5PZ5Q+KcINxiTQ+V ePxBIyqmsXQeXmqcVHxz8kky+7b5+FRUn64qqLonkMvx/+fzyMeCqkz7zwLwwR/A eUaA/Tk2M1l94jrivCPTP9jzSBI5s8zTMFoJSluJxEDnnjucvkXvctDPSsMTYrtJ PaYs6WvN25kBh7kF1aGXSUix9IfYpwY= -----END CERTIFICATE-----Generated at Sat Sep 26 09:32:11 2026 by rpki-client