$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99fed77-b85e-3f5b-81fd-11f3e4e5f260.roa File: c99fed77-b85e-3f5b-81fd-11f3e4e5f260.roa (raw, json) Hash identifier: NZEjzD3elXPTs5FiEsypSDix6BMeuv/7GR+qvGMBNE8= Subject key identifier: A8:C9:E4:83:FD:06:80:9D:E7:E4:AC:43:A6:E4:30:1B:3B:70:93:5D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49833382912722602D231700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99fed77-b85e-3f5b-81fd-11f3e4e5f260.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:33:82:91:27:22:60:2d:23:17:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=66351a40-e3e2-44d5-9006-c73e348f77ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:31:e4:e5:f8:cf:9d:a8:b3:8a:e7:50:22: 0d:be:2d:0e:bd:d6:c3:37:17:ea:fe:aa:4e:04:5b: 58:bf:06:e4:a3:79:92:04:0f:01:93:08:43:89:84: fe:ef:a6:d5:43:90:ee:82:38:e2:62:e0:f9:01:f7: eb:d3:df:e5:ea:a9:57:22:fb:ed:0e:75:7e:3a:70: 77:43:4e:fc:9c:2f:28:55:09:ac:6d:5d:61:3a:c3: ce:89:43:f4:52:e5:a8:cc:f4:4a:d1:ec:ce:b2:37: 2d:69:f6:b8:08:15:3c:5b:71:af:a4:0f:fb:d7:cc: f9:31:63:05:fa:3e:c1:9d:2e:fc:66:40:fd:ce:0c: a7:1e:47:c3:bc:1c:95:89:b7:c3:5e:a5:93:6a:fd: 47:3e:ce:5f:46:d5:dc:d0:86:bb:c9:5b:dc:3a:b5: 6a:7f:01:07:d4:e1:bc:6d:0e:60:67:41:eb:90:44: 63:5f:82:b0:ec:32:35:87:a1:fc:16:d0:e7:2b:f7: 65:d0:c8:a6:b9:43:06:b9:80:2d:a1:79:58:ca:40: be:d5:a2:6e:c9:ad:98:60:b6:94:30:66:74:18:9f: 7d:59:c3:d8:ae:d6:93:d2:3e:24:b0:bd:e2:8e:88: e4:b6:cf:6a:61:bf:2e:c3:ab:ba:41:d9:fa:a1:97: a5:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:C9:E4:83:FD:06:80:9D:E7:E4:AC:43:A6:E4:30:1B:3B:70:93:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c99fed77-b85e-3f5b-81fd-11f3e4e5f260.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:7f:90:68:8b:23:96:37:e4:c1:42:cb:82:ba:ae:47:bf:10: b6:d5:ba:01:8f:8e:45:2d:e1:3c:8a:ff:da:be:78:78:3e:f2: 26:5b:2f:58:da:d9:52:f6:b1:55:ed:c6:32:9b:e2:00:ef:5c: 7b:a0:0c:ee:50:f5:b7:8b:98:81:e1:59:7e:a1:68:c6:bd:43: be:72:3e:1f:24:65:67:63:ce:99:f7:9e:e2:9f:12:c1:f3:b5: 26:54:6b:41:61:20:bb:6b:90:0f:d7:37:b9:00:71:13:03:d3: 22:ac:6a:c2:55:b7:28:fc:da:e0:3e:44:4d:7d:6d:d0:89:c4: 36:02:dd:84:92:e3:b0:aa:ad:5e:b2:53:34:68:87:1f:3c:2b: 22:38:62:fa:51:fa:20:d8:2d:f5:65:10:4a:ac:05:d8:cb:4c: 4f:01:b0:cd:95:fc:5e:af:63:38:ff:14:e8:80:e0:26:c0:40: 7a:5e:71:71:59:dd:cb:8a:04:20:8e:58:b0:25:88:95:d2:fb: 7e:fe:93:5f:cc:c1:7d:2c:07:ae:e8:f4:a3:05:a5:b9:68:48: e0:ed:60:53:f0:1e:f4:6c:b6:af:42:fc:7e:fc:94:71:c2:d7: b0:5b:fe:75:66:43:d3:9a:9f:ad:8d:e7:4e:4f:fe:f5:16:50: af:b2:1c:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgzOCkSciYC0jFwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjYzNTFhNDAtZTNlMi00NGQ1LTkwMDYtYzczZTM0OGY3N2NlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zUx5OX4z52os4rnUCINvi0OvdbDNxfq/qpO BFtYvwbko3mSBA8BkwhDiYT+76bVQ5DugjjiYuD5Affr09/l6qlXIvvtDnV+OnB3 Q078nC8oVQmsbV1hOsPOiUP0UuWozPRK0ezOsjctafa4CBU8W3GvpA/718z5MWMF +j7BnS78ZkD9zgynHkfDvByVibfDXqWTav1HPs5fRtXc0Ia7yVvcOrVqfwEH1OG8 bQ5gZ0HrkERjX4Kw7DI1h6H8FtDnK/dl0MimuUMGuYAtoXlYykC+1aJuya2YYLaU MGZ0GJ99WcPYrtaT0j4ksL3ijojkts9qYb8uw6u6Qdn6oZel/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjJ5IP9BoCd5+SsQ6bkMBs7cJNdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzk5ZmVkNzctYjg1ZS0z ZjViLTgxZmQtMTFmM2U0ZTVmMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK32MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHV/kGiLI5Y35MFCy4K6rke/ELbVugGPjkUt4TyK/9q+eHg+8iZbL1ja 2VL2sVXtxjKb4gDvXHugDO5Q9beLmIHhWX6haMa9Q75yPh8kZWdjzpn3nuKfEsHz tSZUa0FhILtrkA/XN7kAcRMD0yKsasJVtyj82uA+RE19bdCJxDYC3YSS47CqrV6y UzRohx88KyI4YvpR+iDYLfVlEEqsBdjLTE8BsM2V/F6vYzj/FOiA4CbAQHpecXFZ 3cuKBCCOWLAliJXS+37+k1/MwX0sB67o9KMFpbloSODtYFPwHvRstq9C/H78lHHC 17Bb/nVmQ9Oan62N505P/vUWUK+yHJc= -----END CERTIFICATE-----Generated at Thu Oct 1 11:05:45 2026 by rpki-client