$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa File: c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa (raw, json) Hash identifier: bA4l41qeY+rymwxyLIews663YXMhURFM7f2ZrFg4h7c= Subject key identifier: CE:A0:CC:55:7F:5E:39:C5:7A:0E:03:0C:4D:61:A5:48:B5:D2:B6:3F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0BCD6B29B81E73827F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0b:cd:6b:29:b8:1e:73:82:7f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=860d373d-3304-49de-b1e9-6e78fa34617b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:7c:33:2f:f8:e3:86:51:18:9b:4f:14:e7:ab: 14:b3:ed:87:59:f4:75:6d:b3:8b:ed:b4:fb:1b:0d: 16:13:45:9d:2f:06:71:bf:ed:05:8d:af:84:c9:d7: cc:26:fe:6a:f3:4f:fb:c0:e1:ea:6c:8f:b5:26:86: e6:e1:0f:ca:ce:81:6e:23:b5:a5:d6:14:09:2e:8c: 25:d6:db:00:b3:30:4d:ba:0d:65:bb:7f:70:92:ca: ef:70:f9:a6:5d:d4:ca:38:48:02:2d:2f:64:7e:13: f4:4b:ab:17:40:53:df:3a:11:81:db:45:a6:7d:e4: ba:86:69:22:38:bb:a2:95:05:da:d5:2e:6c:3d:86: 19:d9:e8:9e:b5:1e:e0:5b:cd:73:e7:84:ca:94:ff: cd:18:58:f6:17:32:0e:4d:ed:4e:7d:e9:a2:5b:26: 7e:24:24:e6:9b:ee:27:57:bc:ba:2f:59:14:fb:69: 99:1d:ba:a3:22:02:91:5f:19:6f:b8:65:98:06:30: cc:d8:35:24:59:ce:ca:83:0d:ff:9c:fc:98:5a:0b: 44:2a:0f:5c:c1:9b:24:73:a2:ad:1b:d9:8f:0a:3b: 10:ed:73:7f:6f:79:33:d2:6c:4d:ce:20:07:07:62: 82:87:b0:60:c8:83:8f:18:af:e3:0d:e2:b8:86:4a: 07:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:A0:CC:55:7F:5E:39:C5:7A:0E:03:0C:4D:61:A5:48:B5:D2:B6:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/c9aa3dee-bc31-32a2-8b81-9604798e7a19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a9:7c:0d:9b:e3:3e:65:e4:10:a7:c1:41:80:21:40:9b:29:70: 27:3a:ff:51:04:06:94:d0:81:c4:ff:76:b0:ad:fd:f1:0c:f4: 3f:ff:6c:b3:f6:59:6e:92:3d:be:3e:15:57:7a:d8:ab:37:3a: 2c:26:d3:ad:06:78:2b:d3:5e:04:28:a3:de:bd:81:e2:80:0c: 47:b4:40:1f:a0:df:35:ea:51:b7:3c:71:70:79:3c:8f:9e:02: c3:3a:52:57:e2:69:da:74:b5:8e:af:28:bd:60:8a:44:5a:b0: e4:bb:0d:8e:da:8f:d2:a0:04:00:b0:30:9f:d1:f9:e7:a5:72: 5b:d9:87:db:7d:1d:65:26:99:39:79:3d:fd:db:04:30:72:a2: 34:12:60:cd:a5:48:5e:c6:be:8a:1e:38:ee:99:bd:8c:59:16: 39:8b:b5:eb:f4:08:04:37:4c:e4:04:77:17:05:0e:1b:4a:3b: 3a:95:c4:d9:1a:9f:68:e1:29:80:fc:b2:9c:6e:27:4a:70:7f: 6b:70:b7:8b:45:7d:e9:36:e9:b8:4b:57:71:ef:25:75:86:e4: a7:ba:9a:e9:63:61:09:f7:67:f3:31:37:0a:a4:33:4e:46:5c: 99:3e:8c:82:42:bf:98:a6:3b:de:68:bc:4e:7d:e9:ca:33:21: 9a:e2:8d:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewvNaym4HnOCfwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODYwZDM3M2QtMzMwNC00OWRlLWIxZTktNmU3OGZhMzQ2MTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2nwzL/jjhlEYm08U56sUs+2HWfR1bbOL7bT7 Gw0WE0WdLwZxv+0Fja+EydfMJv5q80/7wOHqbI+1Jobm4Q/KzoFuI7Wl1hQJLowl 1tsAszBNug1lu39wksrvcPmmXdTKOEgCLS9kfhP0S6sXQFPfOhGB20WmfeS6hmki OLuilQXa1S5sPYYZ2eietR7gW81z54TKlP/NGFj2FzIOTe1OfemiWyZ+JCTmm+4n V7y6L1kU+2mZHbqjIgKRXxlvuGWYBjDM2DUkWc7Kgw3/nPyYWgtEKg9cwZskc6Kt G9mPCjsQ7XN/b3kz0mxNziAHB2KCh7BgyIOPGK/jDeK4hkoHFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6gzFV/XjnFeg4DDE1hpUi10rY/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYzlhYTNkZWUtYmMzMS0z MmEyLThiODEtOTYwNDc5OGU3YTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2FMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKl8DZvjPmXkEKfBQYAhQJspcCc6/1EEBpTQgcT/drCt/fEM9D//bLP2 WW6SPb4+FVd62Ks3Oiwm060GeCvTXgQoo969geKADEe0QB+g3zXqUbc8cXB5PI+e AsM6Ulfiadp0tY6vKL1gikRasOS7DY7aj9KgBACwMJ/R+eelclvZh9t9HWUmmTl5 Pf3bBDByojQSYM2lSF7GvooeOO6ZvYxZFjmLtev0CAQ3TOQEdxcFDhtKOzqVxNka n2jhKYD8spxuJ0pwf2twt4tFfek26bhLV3HvJXWG5Ke6muljYQn3Z/MxNwqkM05G XJk+jIJCv5imO95ovE596cozIZrijQI= -----END CERTIFICATE-----Generated at Sun Sep 27 07:22:31 2026 by rpki-client