$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8ceaf3-0753-3878-8414-c7c99dca5d32.roa File: ce8ceaf3-0753-3878-8414-c7c99dca5d32.roa (raw, json) Hash identifier: lrTHf026MknBttMytI8SIwV9xJ9ogHRCYgTlkd/SfH8= Subject key identifier: 1B:AF:11:0B:57:E4:5B:FF:F8:7A:EC:1A:1D:A3:77:E4:8A:13:A1:5E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B05EC88D1D190DED03440 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8ceaf3-0753-3878-8414-c7c99dca5d32.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:05:ec:88:d1:d1:90:de:d0:34:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=445dd62b-b3db-43d5-985b-e903580f0830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a7:fc:cf:9f:6a:20:3d:8f:6f:62:c9:ea:08: 22:e7:ac:25:8e:39:2a:17:6c:6a:a3:80:91:15:a2: 10:71:32:a7:71:e4:20:00:92:1b:35:b4:f2:61:69: a9:b4:5f:db:1d:0a:67:ab:5a:51:2f:21:a5:d4:2e: 02:d6:22:74:47:ce:34:5c:f8:d7:8a:91:ec:35:e8: e6:b2:43:d7:25:7c:bc:06:41:71:7f:02:cd:4d:dd: 46:ee:43:15:3b:6c:a5:79:d1:83:1e:73:8b:6f:6d: 61:4d:ac:e7:d2:d8:44:7b:9a:40:2f:e4:a8:d7:e8: a0:1d:d4:a7:08:dc:d3:7a:1e:cf:3d:23:8b:2a:55: 4f:06:2b:c5:6f:15:9b:29:9a:d0:b4:f8:cd:96:2c: 23:5f:f7:96:5d:c0:c8:53:f0:d5:45:7b:ab:9b:ab: c8:77:21:77:e5:98:14:e9:db:64:37:a8:53:7d:43: c0:45:14:89:16:ab:1b:8e:88:ee:44:8f:c9:f6:83: 8a:05:c2:27:ee:ec:c3:8f:c6:0a:7d:06:99:b4:a1: 68:c6:68:9d:17:13:0e:e1:39:39:cf:7e:97:ac:8b: 71:34:17:44:51:3f:3a:2a:5a:f3:5b:c8:ca:8e:38: 0f:08:b3:21:e8:e4:cf:87:9d:2e:ef:99:5c:ac:be: 0d:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:AF:11:0B:57:E4:5B:FF:F8:7A:EC:1A:1D:A3:77:E4:8A:13:A1:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ce8ceaf3-0753-3878-8414-c7c99dca5d32.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:3f:1c:d8:3a:30:fd:fb:26:bb:f0:da:8d:5c:b1:2c:cc:14: 75:9f:e8:19:d3:6a:c5:3b:d0:d5:03:76:f3:1d:ff:d9:10:fa: 63:59:60:d5:03:1b:34:9b:b1:14:e0:ba:09:36:be:46:96:44: 82:f4:f5:3c:a3:45:ca:c4:be:86:9c:b6:66:44:f5:5b:23:5c: 8b:60:a3:4e:97:86:91:a2:41:18:14:87:77:04:8f:e1:5f:c4: 2d:f0:0e:b4:b6:c0:85:fb:d6:76:f8:9e:ab:61:23:51:46:1f: 50:2f:77:8a:1a:30:2d:87:8e:a1:4e:ee:75:c4:a7:e3:2c:df: cf:fc:2b:71:f3:94:e0:dc:19:2c:08:5b:68:03:4b:77:f5:55: 51:43:cc:45:02:a6:94:cd:99:80:b8:2e:48:3a:c3:81:71:da: 47:91:e7:be:d5:50:54:b7:81:68:26:17:68:04:ec:15:5e:7e: 8c:c8:e4:93:ba:0b:a9:08:c6:51:42:dc:c9:63:e3:5f:17:82: b5:41:4f:de:a5:89:96:c7:da:61:39:05:a3:1a:77:d1:3b:b0: ee:7e:d5:17:66:fa:50:37:f5:6b:24:5a:21:d1:5f:20:48:f2: 94:d2:ee:16:ef:19:bb:20:5f:9a:b7:2c:e6:0a:01:25:56:cf: e0:0d:b1:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewXsiNHRkN7QNEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDQ1ZGQ2MmItYjNkYi00M2Q1LTk4NWItZTkwMzU4MGYwODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKf8z59qID2Pb2LJ6ggi56wljjkqF2xqo4CR FaIQcTKnceQgAJIbNbTyYWmptF/bHQpnq1pRLyGl1C4C1iJ0R840XPjXipHsNejm skPXJXy8BkFxfwLNTd1G7kMVO2yledGDHnOLb21hTazn0thEe5pAL+So1+igHdSn CNzTeh7PPSOLKlVPBivFbxWbKZrQtPjNliwjX/eWXcDIU/DVRXurm6vIdyF35ZgU 6dtkN6hTfUPARRSJFqsbjojuRI/J9oOKBcIn7uzDj8YKfQaZtKFoxmidFxMO4Tk5 z36XrItxNBdEUT86KlrzW8jKjjgPCLMh6OTPh50u75lcrL4NkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuvEQtX5Fv/+HrsGh2jd+SKE6FeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvY2U4Y2VhZjMtMDc1My0z ODc4LTg0MTQtYzdjOTlkY2E1ZDMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEU/HNg6MP37Jrvw2o1csSzMFHWf6BnTasU70NUDdvMd/9kQ+mNZYNUD GzSbsRTgugk2vkaWRIL09TyjRcrEvoactmZE9VsjXItgo06XhpGiQRgUh3cEj+Ff xC3wDrS2wIX71nb4nqthI1FGH1Avd4oaMC2HjqFO7nXEp+Ms38/8K3HzlODcGSwI W2gDS3f1VVFDzEUCppTNmYC4Lkg6w4Fx2keR577VUFS3gWgmF2gE7BVefozI5JO6 C6kIxlFC3Mlj418XgrVBT96liZbH2mE5BaMad9E7sO5+1Rdm+lA39WskWiHRXyBI 8pTS7hbvGbsgX5q3LOYKASVWz+ANsSg= -----END CERTIFICATE-----Generated at Sun Oct 4 17:31:46 2026 by rpki-client