$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa File: daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa (raw, json) Hash identifier: e84KdJcIDZxo0A9+deVuyfvxmUvkFxr2zRS5K/ril7s= Subject key identifier: 01:52:A0:BC:35:8F:5D:04:4E:5B:EF:83:8A:7B:44:EB:CA:C9:AD:1C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4982FF3985DB36769BB85780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 40306 IP address blocks: 72.173.176.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:82:ff:39:85:db:36:76:9b:b8:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=47cd13f8-ad24-49ef-91ef-a5c813b67bb3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:c7:5a:d6:5b:bf:ba:f0:14:ea:2e:f6:87:8d: 14:26:4d:7f:60:ed:74:11:61:78:f5:11:d2:5b:99: 64:b4:3d:ea:94:bd:c0:77:24:e1:0b:6e:98:4c:ba: 69:05:7e:cc:27:c3:99:ea:dc:53:e5:cd:11:db:f4: ce:ee:27:5c:02:bf:a4:a3:28:22:3e:2b:ca:2f:43: 05:f7:b4:6d:00:21:f8:01:10:1c:dd:e0:ab:d2:ec: 64:07:9b:46:5e:a8:bf:90:26:90:c8:5b:86:11:38: d9:7d:fc:a0:51:9b:39:f5:9b:13:e3:ea:63:1f:d9: 87:9e:a9:24:b4:e8:74:5c:48:91:54:19:77:5e:5e: 43:00:b8:bc:5a:be:ec:59:d0:d4:7b:0b:3b:0c:cf: 26:3b:54:7f:8c:df:90:9a:61:65:3e:36:78:0a:77: 1b:52:e3:b1:03:d3:d2:7c:82:5c:cc:f3:7a:b6:ca: 45:b3:dc:6f:77:96:ba:f4:3e:f6:f2:bc:19:73:7d: a7:8c:07:fb:25:d6:3c:21:5b:e0:d3:46:4f:c7:1a: fa:b7:26:1a:21:e2:4c:94:75:06:e9:68:3f:05:cf: f8:c7:e2:bb:78:aa:09:9c:41:f2:52:5b:88:d8:c9: b1:4a:a2:3a:6d:0c:21:7e:7d:b9:37:d9:3e:14:0a: 49:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:52:A0:BC:35:8F:5D:04:4E:5B:EF:83:8A:7B:44:EB:CA:C9:AD:1C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/daec439b-654f-3c3e-adcb-2a02a9a4aa17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.176.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:b0:61:fa:b4:d2:ca:57:66:2b:3d:a8:1c:a2:e9:96:51:3f: 75:4f:49:55:df:bc:21:5d:f0:d0:67:ed:a5:8d:53:dd:a2:c6: 8d:c5:60:4f:ce:37:20:a5:70:69:86:b5:6a:c1:c1:09:08:02: 1e:6a:41:a2:e8:83:dc:fa:6a:93:8c:8b:95:0e:52:3a:d6:23: be:33:e8:25:fb:21:f6:c2:37:7e:c1:b5:06:6a:4e:34:43:39: 71:7d:0d:44:c3:65:e0:59:f5:75:dc:76:a2:c6:6d:41:b8:42: 06:42:da:0b:3a:3d:69:9c:c0:f4:10:3b:e4:a7:64:2f:f1:23: 7d:77:b6:f9:68:30:c8:af:2c:36:86:2c:fd:64:cf:e6:2b:86: 25:36:e3:88:53:aa:58:43:33:67:bd:56:83:bc:64:e3:93:4c: 68:8a:94:f2:c3:5d:74:ee:85:d2:4c:35:c0:ff:7e:d8:48:5c: 1f:a6:47:02:36:7f:b8:70:25:b4:e7:49:f0:54:ef:2c:e4:e4: 54:47:3c:9f:a0:93:bf:e8:35:0b:62:ae:c1:f1:19:24:8d:6b: 19:e9:e7:da:1d:ba:6e:a0:db:6e:1f:90:5f:b0:22:68:f5:6c: 86:c2:7f:0f:8f:af:81:ad:f6:b0:21:b5:8c:8a:e4:06:15:97: ec:f0:f3:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgv85hds2dpu4V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NDdjZDEzZjgtYWQyNC00OWVmLTkxZWYtYTVjODEzYjY3YmIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8da1lu/uvAU6i72h40UJk1/YO10EWF49RHS W5lktD3qlL3AdyThC26YTLppBX7MJ8OZ6txT5c0R2/TO7idcAr+koygiPivKL0MF 97RtACH4ARAc3eCr0uxkB5tGXqi/kCaQyFuGETjZffygUZs59ZsT4+pjH9mHnqkk tOh0XEiRVBl3Xl5DALi8Wr7sWdDUews7DM8mO1R/jN+QmmFlPjZ4CncbUuOxA9PS fIJczPN6tspFs9xvd5a69D728rwZc32njAf7JdY8IVvg00ZPxxr6tyYaIeJMlHUG 6Wg/Bc/4x+K7eKoJnEHyUluI2MmxSqI6bQwhfn25N9k+FApJbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAFSoLw1j10ETlvvg4p7ROvKya0cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGFlYzQzOWItNjU0Zi0z YzNlLWFkY2ItMmEwMmE5YTRhYTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6wYfq00spXZis9qByi6ZZRP3VPSVXfvCFd8NBn7aWNU92ixo3FYE/O NyClcGmGtWrBwQkIAh5qQaLog9z6apOMi5UOUjrWI74z6CX7IfbCN37BtQZqTjRD OXF9DUTDZeBZ9XXcdqLGbUG4QgZC2gs6PWmcwPQQO+SnZC/xI313tvloMMivLDaG LP1kz+YrhiU244hTqlhDM2e9VoO8ZOOTTGiKlPLDXXTuhdJMNcD/fthIXB+mRwI2 f7hwJbTnSfBU7yzk5FRHPJ+gk7/oNQtirsHxGSSNaxnp59odum6g224fkF+wImj1 bIbCfw+Pr4Gt9rAhtYyK5AYVl+zw81I= -----END CERTIFICATE-----Generated at Tue Sep 29 15:23:51 2026 by rpki-client