$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6e89f95-7353-3b90-b984-8fc385e68474.roa File: c6e89f95-7353-3b90-b984-8fc385e68474.roa (raw, json) Hash identifier: IeS2aYVhm1Li8pLnurQxwP6x4omOb9hl6d37QQQGhmA= Subject key identifier: 6A:0E:6D:FC:FD:B5:BD:72:E2:B1:EE:D6:2A:44:FB:55:F5:69:5F:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0AA4EA86E4BCF583FA80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6e89f95-7353-3b90-b984-8fc385e68474.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.118.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0a:a4:ea:86:e4:bc:f5:83:fa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c03ac9ab-b47c-469b-a71e-6e8c0595691e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:8e:ff:0c:a3:81:dd:a5:3c:a0:f3:37:89:24: d5:47:b8:7c:86:76:a4:6a:d8:a7:36:01:c4:7b:73: 2c:ae:dd:10:6d:ef:6e:a2:32:11:cb:55:90:58:24: 06:4f:7b:95:7c:9a:13:9c:62:6a:40:c9:93:3b:36: 74:09:95:2f:3a:f0:1e:34:ef:86:32:4d:69:5c:f9: 5c:64:39:dc:0e:64:de:c7:0d:74:2a:61:ea:ea:1e: 35:f9:ad:c5:b6:10:78:ac:7f:68:5f:85:58:95:75: 32:21:c6:24:7d:55:51:1d:0b:01:a6:5e:f1:10:ac: 8f:87:41:5b:92:8e:26:87:12:a4:66:25:60:fa:44: 99:4c:49:a8:af:d6:47:27:dc:9f:5c:2d:dc:56:db: 2b:33:48:fa:32:42:9a:d9:ea:cb:67:f1:76:f3:11: 32:90:37:ff:43:03:3f:b8:00:0c:b8:ce:22:62:51: c9:92:77:33:c0:19:18:0b:24:1c:11:3e:55:86:d1: 71:88:03:b6:5e:0a:d5:3c:37:66:b9:b8:88:68:c0: 6f:06:46:7c:14:e3:4c:7f:f3:57:ba:6b:db:d7:8f: 8d:a8:b6:da:c1:7f:8d:b9:5f:43:f2:a6:40:6a:fe: 45:a2:88:00:58:d4:c7:82:05:3a:51:2b:f7:1f:96: 34:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0E:6D:FC:FD:B5:BD:72:E2:B1:EE:D6:2A:44:FB:55:F5:69:5F:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c6e89f95-7353-3b90-b984-8fc385e68474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.118.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:8c:de:2b:70:3b:a0:ca:06:ff:55:1c:7a:7b:d4:d4:1f:1c: 4e:78:1e:94:b2:0a:ec:ac:7c:15:83:95:f2:06:9f:e6:9d:38: eb:6b:6f:ba:19:b2:0b:92:a0:8b:19:70:ad:03:0b:22:fd:30: d4:3f:a8:a7:da:12:f4:0f:8b:61:16:47:71:c2:82:b9:96:cf: 85:7a:96:be:e0:78:1d:a2:70:bf:7a:1b:10:f1:24:f7:4c:b7: 2d:e4:41:6a:fb:47:d1:00:50:af:c9:39:46:26:eb:12:d5:8d: c2:dd:13:42:78:3b:f4:b1:b3:c1:8c:84:7f:fb:cd:eb:f4:ac: 1f:67:c6:28:2f:aa:23:c7:c1:22:7b:eb:0f:e1:7d:5c:17:3b: 48:95:35:44:1a:d6:b8:3b:ed:8f:ac:69:d6:ef:65:54:a8:1e: 1b:c1:29:d1:f5:22:bc:e1:54:37:87:3d:5b:9b:8b:47:8c:4f: 61:50:69:de:6a:d8:e7:5d:aa:99:13:09:62:1f:ca:bb:08:9b: f0:39:a6:05:8c:4a:17:78:ee:88:52:f1:0c:65:d8:72:3d:31: f2:cd:6a:00:a7:46:1f:c9:3f:6f:89:f9:39:a0:c2:18:b0:c3: c7:54:d8:6d:81:c7:da:41:bc:71:87:8d:d5:c4:ab:fd:29:05: 6e:91:0e:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jewqk6obkvPWD+oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzAzYWM5YWItYjQ3Yy00NjliLWE3MWUtNmU4YzA1OTU2OTFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Y7/DKOB3aU8oPM3iSTVR7h8hnakatinNgHE e3Msrt0Qbe9uojIRy1WQWCQGT3uVfJoTnGJqQMmTOzZ0CZUvOvAeNO+GMk1pXPlc ZDncDmTexw10KmHq6h41+a3FthB4rH9oX4VYlXUyIcYkfVVRHQsBpl7xEKyPh0Fb ko4mhxKkZiVg+kSZTEmor9ZHJ9yfXC3cVtsrM0j6MkKa2erLZ/F28xEykDf/QwM/ uAAMuM4iYlHJknczwBkYCyQcET5VhtFxiAO2XgrVPDdmubiIaMBvBkZ8FONMf/NX umvb14+NqLbawX+NuV9D8qZAav5FoogAWNTHggU6USv3H5Y0rwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGoObfz9tb1y4rHu1ipE+1X1aV9hMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzZlODlmOTUtNzM1My0z YjkwLWI5ODQtOGZjMzg1ZTY4NDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK12MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACiM3itwO6DKBv9VHHp71NQfHE54HpSyCuysfBWDlfIGn+adOOtrb7oZ sguSoIsZcK0DCyL9MNQ/qKfaEvQPi2EWR3HCgrmWz4V6lr7geB2icL96GxDxJPdM ty3kQWr7R9EAUK/JOUYm6xLVjcLdE0J4O/Sxs8GMhH/7zev0rB9nxigvqiPHwSJ7 6w/hfVwXO0iVNUQa1rg77Y+sadbvZVSoHhvBKdH1IrzhVDeHPVubi0eMT2FQad5q 2OddqpkTCWIfyrsIm/A5pgWMShd47ohS8Qxl2HI9MfLNagCnRh/JP2+J+Tmgwhiw w8dU2G2Bx9pBvHGHjdXEq/0pBW6RDgw= -----END CERTIFICATE-----Generated at Mon Sep 28 08:53:38 2026 by rpki-client