$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d285b59d-1287-3746-b9b4-a47cd782f3ed.roa File: d285b59d-1287-3746-b9b4-a47cd782f3ed.roa (raw, json) Hash identifier: EKflt7GdjpP5Fbf7stNpCdkVIiPNt/c/hIp+DY8eQkY= Subject key identifier: F0:20:28:0C:9A:17:EF:45:27:BB:DF:DA:DF:6A:4A:D2:D4:1F:95:C6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0AAFB7552155FD7B6D00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d285b59d-1287-3746-b9b4-a47cd782f3ed.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0a:af:b7:55:21:55:fd:7b:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f7620e36-05c8-4e30-86cb-c3cebbc159fd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:48:ba:bf:9b:28:8b:33:09:c0:2e:84:87:ec: 02:fa:95:d7:90:e7:d1:81:a7:0d:e9:30:24:89:fb: b7:3d:80:90:f2:8f:21:b5:a5:46:d8:66:36:51:92: 01:cb:43:bc:76:d5:0e:41:55:4c:e4:4d:c7:a6:4d: 2a:af:60:5c:f6:7e:8d:69:65:f6:09:6a:7b:06:3e: 14:f8:48:84:f8:a3:a9:c2:69:45:d8:7d:55:f4:26: 96:58:22:9d:dc:f5:08:3e:ec:31:0b:2d:78:c1:5e: d0:80:a3:01:d9:54:bd:aa:57:7a:bf:ba:fc:2d:6b: 99:3a:bc:01:7e:2b:4c:68:e4:40:9f:d3:2d:2a:f0: 9b:7c:3e:75:06:03:79:52:2c:da:73:5d:d4:57:d5: a1:d3:10:5c:10:95:eb:ad:93:b9:bd:5c:24:d1:8a: a1:b1:8a:71:a7:f5:01:86:b7:47:53:71:2c:da:23: 66:8e:56:9e:d9:b7:71:b5:4b:3c:e2:1f:53:3b:28: 83:b6:d0:8c:dd:e1:f4:9b:7c:8b:7a:a4:87:5d:01: 00:b9:92:f1:6b:e9:d4:0e:a2:b4:e8:45:bd:32:b7: 61:5f:35:3d:f3:f9:2a:a9:32:e1:a4:27:13:72:30: f5:2f:83:92:0f:fb:68:4d:70:ca:12:65:fd:30:7d: 39:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:20:28:0C:9A:17:EF:45:27:BB:DF:DA:DF:6A:4A:D2:D4:1F:95:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d285b59d-1287-3746-b9b4-a47cd782f3ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:0a:31:21:37:6e:b7:31:9e:b8:cf:4b:76:36:61:8a:58:3a: ca:82:22:5e:a5:50:81:92:a4:a8:7f:03:43:e1:a3:c0:69:47: e2:08:dc:76:c3:7e:bc:e4:5e:ad:5e:c1:34:82:aa:b8:7e:4b: a9:c9:5b:63:2c:90:74:c8:be:f6:cc:79:8e:28:b9:ff:d3:3e: 1c:7a:4a:8a:39:e2:63:c0:5e:b6:df:d6:4b:1e:a3:81:dd:ce: d0:46:0d:df:d7:c6:ec:5a:6d:81:ed:71:73:f0:a2:cb:aa:13: 15:02:4d:4b:6c:82:3b:53:03:16:11:a2:39:38:c7:74:81:ba: 6b:86:b8:6b:b3:29:be:4e:57:f8:e1:dc:1e:24:eb:f5:dc:3b: 75:ca:e7:51:49:1a:be:1e:5e:77:21:fb:94:8c:3f:8d:64:b6: 6d:a5:97:e9:fd:16:05:7c:db:45:0e:c0:68:0b:42:03:da:fa: 37:b7:98:64:03:c4:01:7b:9f:4f:87:77:96:1c:93:fe:2a:ff: 7a:76:6d:14:bb:45:54:c7:93:66:6d:8f:98:5f:28:ba:2b:45: 15:4e:88:99:1e:92:ef:d7:ab:8f:74:f3:bf:5f:e2:45:80:8b: 71:a9:01:f9:a6:6d:2c:40:99:98:cf:2c:3e:5f:e0:27:4f:1b: 73:21:63:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jewqvt1UhVf17bQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjc2MjBlMzYtMDVjOC00ZTMwLTg2Y2ItYzNjZWJiYzE1OWZkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5Ui6v5soizMJwC6Eh+wC+pXXkOfRgacN6TAk ifu3PYCQ8o8htaVG2GY2UZIBy0O8dtUOQVVM5E3Hpk0qr2Bc9n6NaWX2CWp7Bj4U +EiE+KOpwmlF2H1V9CaWWCKd3PUIPuwxCy14wV7QgKMB2VS9qld6v7r8LWuZOrwB fitMaORAn9MtKvCbfD51BgN5Uizac13UV9Wh0xBcEJXrrZO5vVwk0YqhsYpxp/UB hrdHU3Es2iNmjlae2bdxtUs84h9TOyiDttCM3eH0m3yLeqSHXQEAuZLxa+nUDqK0 6EW9MrdhXzU98/kqqTLhpCcTcjD1L4OSD/toTXDKEmX9MH05/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAgKAyaF+9FJ7vf2t9qStLUH5XGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDI4NWI1OWQtMTI4Ny0z NzQ2LWI5YjQtYTQ3Y2Q3ODJmM2VkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK14MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA4KMSE3brcxnrjPS3Y2YYpYOsqCIl6lUIGSpKh/A0Pho8BpR+II3HbD frzkXq1ewTSCqrh+S6nJW2MskHTIvvbMeY4ouf/TPhx6Soo54mPAXrbf1kseo4Hd ztBGDd/XxuxabYHtcXPwosuqExUCTUtsgjtTAxYRojk4x3SBumuGuGuzKb5OV/jh 3B4k6/XcO3XK51FJGr4eXnch+5SMP41ktm2ll+n9FgV820UOwGgLQgPa+je3mGQD xAF7n0+Hd5Yck/4q/3p2bRS7RVTHk2Ztj5hfKLorRRVOiJkeku/Xq490879f4kWA i3GpAfmmbSxAmZjPLD5f4CdPG3MhY+k= -----END CERTIFICATE-----Generated at Sun Sep 27 06:58:12 2026 by rpki-client