$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa File: c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa (raw, json) Hash identifier: ZbD+wYmgm8PhasbU3ZUIuF05a0rc9EzSkNBSiybR++Q= Subject key identifier: 69:34:58:4F:16:BD:21:4C:54:1F:00:E2:C5:01:6D:AD:FD:8E:60:A2 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0D3704877EEEEF3C4180 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0d:37:04:87:7e:ee:ef:3c:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fa2f9139-f446-425f-b8a9-ea3c7a5181b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:ee:15:59:3b:f8:ce:32:9d:1e:1a:b5:6c: 48:14:8d:ec:03:4f:19:a8:bd:0f:66:ad:08:6c:8e: d6:3c:97:50:6b:9c:4a:7f:74:aa:9a:b1:85:55:0a: ac:b0:6b:8e:d0:e9:33:58:32:e6:29:99:87:ea:96: 7a:e3:21:a1:f4:09:cb:db:8d:c6:f9:4d:22:6e:92: 26:b0:11:64:e2:20:75:f0:78:7e:db:de:9e:3b:50: d6:06:30:b3:d7:18:b6:8e:0a:6c:6e:78:d3:37:89: ac:4e:e8:e6:31:a2:35:31:36:6b:4c:a3:46:d9:18: a2:d2:c9:42:c1:71:2b:86:fe:03:72:f5:fe:69:fc: bc:98:46:5f:96:e1:35:ce:be:96:24:32:d5:e1:6b: d1:0e:33:f0:c1:55:c1:f6:11:63:2e:fa:ff:98:06: 1a:4f:9f:73:bb:8f:43:19:70:00:6f:ff:8b:80:58: 23:d6:59:97:82:17:ae:83:6b:4c:3e:ed:fd:d7:c0: 38:9c:2d:e4:6b:de:9f:53:41:66:b4:a4:3f:de:68: 6a:a9:9a:c5:c8:c1:ec:13:d6:dc:6e:5e:b1:e3:12: e1:fb:11:87:6d:15:4b:08:22:c3:fd:5c:64:fc:f0: 08:9c:32:91:c8:74:45:2c:cf:ef:9e:e0:0f:e7:10: 1a:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:34:58:4F:16:BD:21:4C:54:1F:00:E2:C5:01:6D:AD:FD:8E:60:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c1f6a7a6-07dc-354d-9fa6-0a1c4c177eee.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f0:0c:d8:8f:ea:81:e7:b4:da:0b:58:f2:f4:d5:1c:65:6a: f6:2e:7f:d2:78:1a:29:76:e2:e1:ec:70:45:72:fb:7a:60:91: b4:9c:6b:4b:47:1d:77:7c:fe:7c:fa:50:4e:00:68:e7:7a:de: f5:e0:54:00:ca:e2:65:99:16:36:cd:b2:fb:85:73:b4:d0:b2: 04:24:b2:c7:9c:8b:02:f0:03:b2:0a:ad:ef:43:65:70:c0:3f: 70:35:05:95:c5:37:79:da:b6:2c:c0:dc:90:74:57:ad:57:84: b0:9e:6d:37:d3:88:47:fc:2b:9c:de:2f:ed:70:ff:e8:94:90: 18:c1:2e:1b:e3:9c:ae:42:71:d9:f9:72:b0:12:06:9e:25:62: fb:61:f4:8d:02:98:b0:ee:68:89:77:a1:a6:cc:a2:48:e0:a4: a4:54:41:51:fc:f1:af:d4:ea:47:5c:4c:27:17:81:e9:24:79: 86:45:b9:f3:57:9f:d9:9c:19:c4:cc:23:30:d8:63:6a:50:d1: c1:d9:d7:6e:7b:14:8e:d4:55:67:10:d3:70:d9:3a:b4:c3:d7: f3:d9:6e:15:1d:f0:c9:b9:2f:c6:23:17:4a:5e:17:76:1e:ba: 81:09:a4:52:be:2d:55:7e:d1:aa:b7:82:5b:91:9a:2f:c4:53: 54:df:35:e1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jew03BId+7u88QYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmEyZjkxMzktZjQ0Ni00MjVmLWI4YTktZWEzYzdhNTE4MWI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokDuFVk7+M4ynR4atWxIFI3sA08ZqL0PZq0I bI7WPJdQa5xKf3SqmrGFVQqssGuO0OkzWDLmKZmH6pZ64yGh9AnL243G+U0ibpIm sBFk4iB18Hh+296eO1DWBjCz1xi2jgpsbnjTN4msTujmMaI1MTZrTKNG2Rii0slC wXErhv4DcvX+afy8mEZfluE1zr6WJDLV4WvRDjPwwVXB9hFjLvr/mAYaT59zu49D GXAAb/+LgFgj1lmXgheug2tMPu3918A4nC3ka96fU0FmtKQ/3mhqqZrFyMHsE9bc bl6x4xLh+xGHbRVLCCLD/Vxk/PAInDKRyHRFLM/vnuAP5xAaQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGk0WE8WvSFMVB8A4sUBba39jmCiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzFmNmE3YTYtMDdkYy0z NTRkLTlmYTYtMGExYzRjMTc3ZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2jMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbwDNiP6oHntNoLWPL01RxlavYuf9J4Gil24uHscEVy+3pgkbSca0tH HXd8/nz6UE4AaOd63vXgVADK4mWZFjbNsvuFc7TQsgQksseciwLwA7IKre9DZXDA P3A1BZXFN3natizA3JB0V61XhLCebTfTiEf8K5zeL+1w/+iUkBjBLhvjnK5Ccdn5 crASBp4lYvth9I0CmLDuaIl3oabMokjgpKRUQVH88a/U6kdcTCcXgekkeYZFufNX n9mcGcTMIzDYY2pQ0cHZ1257FI7UVWcQ03DZOrTD1/PZbhUd8Mm5L8YjF0peF3Ye uoEJpFK+LVV+0aq3gluRmi/EU1TfNeE= -----END CERTIFICATE-----Generated at Sat Sep 26 07:44:43 2026 by rpki-client