$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dde80129-c7fb-3202-845b-bf1e1eaf868b.roa File: dde80129-c7fb-3202-845b-bf1e1eaf868b.roa (raw, json) Hash identifier: 0GBWQ3dmLCmyVMRhafGxJEgHMDaVnq8iC/6nLi7Xb5I= Subject key identifier: E9:F8:2E:ED:74:C3:AA:CB:8B:1E:18:60:BD:01:98:48:A4:89:55:AF Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0BD844B795C20E518400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dde80129-c7fb-3202-845b-bf1e1eaf868b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0b:d8:44:b7:95:c2:0e:51:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba4a7332-71c8-44aa-bc27-a673d51a254e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:fc:04:d0:33:74:f3:36:20:4a:13:ea:e7:a5: 42:6d:ee:03:a6:3d:f8:d7:03:90:36:5b:f5:be:42: c7:8c:73:72:68:cf:45:ee:a3:27:a0:6a:06:99:18: ed:cb:fa:15:e8:d8:32:71:c5:5f:74:e5:10:1e:ef: 73:07:a4:e6:b7:b5:d9:df:96:8c:7c:5d:46:42:3a: 97:3f:e0:55:17:2a:22:4f:5c:6c:01:0a:89:da:99: c8:10:1c:44:73:24:1b:f9:ce:68:87:a2:43:3f:45: 98:64:f3:c7:3a:e5:e2:6f:f0:de:30:5b:b2:22:5b: 59:f5:c7:50:0d:86:80:50:e8:5b:c3:df:fa:a3:96: c5:fa:59:e8:ce:d9:17:01:e6:bf:28:ab:c0:1b:da: bc:0c:5e:cf:42:6b:f9:a8:c7:22:24:96:ff:57:92: 91:8b:92:19:1a:22:77:a2:b2:d2:c8:bf:f1:6c:a1: 47:22:47:55:ac:3d:d2:19:7a:6f:ef:59:e3:48:9c: c8:a1:b4:dc:3d:af:16:ad:5f:d5:b2:4f:c8:49:ba: e0:4e:61:e6:9e:71:1f:c1:5e:44:ee:82:70:bd:59: 2a:55:4c:6f:d1:9a:ed:0b:e8:5e:56:28:e7:42:aa: ce:c1:9d:83:f9:a7:4d:68:50:b8:23:48:9f:e1:9d: b7:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:F8:2E:ED:74:C3:AA:CB:8B:1E:18:60:BD:01:98:48:A4:89:55:AF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dde80129-c7fb-3202-845b-bf1e1eaf868b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:db:50:a4:1c:43:86:8a:2a:7b:ef:65:cf:cc:62:7c:c5:c6: 25:e9:09:be:a6:e5:40:71:2e:c7:24:0e:dd:65:5b:91:7b:1a: f5:92:6d:79:a7:f9:26:19:76:ca:dc:e0:8f:35:58:d7:7f:0e: ba:64:e4:6c:dc:d6:f6:e1:17:c5:de:f0:b6:fb:59:e0:53:87: 1e:40:e3:57:98:05:a1:0e:69:bb:bf:ca:88:95:54:e5:56:25: 98:ca:15:67:30:0a:47:cf:14:40:bb:9c:63:b3:27:e0:63:6a: 88:d9:31:d7:9c:10:fa:d6:f8:aa:b0:01:73:31:f2:fe:2b:cd: 94:b7:3d:34:99:c6:9e:1f:de:bf:15:ee:08:a9:ca:ef:87:04: 1b:b7:e0:1b:3f:87:0e:7a:d1:33:52:05:20:c2:7b:be:7c:93: c0:8c:f9:14:1e:5b:f6:d6:1d:cd:1b:e8:7c:63:24:55:16:71: 54:04:13:52:95:67:51:14:ec:b7:e9:94:19:64:f7:9d:3d:fc: fc:91:a7:b8:ae:61:6f:55:9b:02:5c:f3:38:52:3a:5e:6c:31: 19:fe:a8:08:52:b3:d9:0e:34:d8:d2:1b:5b:6f:a8:65:02:9f: 1d:d0:6b:ac:73:39:d5:38:93:33:72:12:26:c2:57:89:16:bb: f0:91:ba:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewvYRLeVwg5RhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE0YTczMzItNzFjOC00NGFhLWJjMjctYTY3M2Q1MWEyNTRlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/wE0DN08zYgShPq56VCbe4Dpj341wOQNlv1 vkLHjHNyaM9F7qMnoGoGmRjty/oV6NgyccVfdOUQHu9zB6Tmt7XZ35aMfF1GQjqX P+BVFyoiT1xsAQqJ2pnIEBxEcyQb+c5oh6JDP0WYZPPHOuXib/DeMFuyIltZ9cdQ DYaAUOhbw9/6o5bF+lnoztkXAea/KKvAG9q8DF7PQmv5qMciJJb/V5KRi5IZGiJ3 orLSyL/xbKFHIkdVrD3SGXpv71njSJzIobTcPa8WrV/Vsk/ISbrgTmHmnnEfwV5E 7oJwvVkqVUxv0ZrtC+heVijnQqrOwZ2D+adNaFC4I0if4Z23FwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOn4Lu10w6rLix4YYL0BmEikiVWvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGRlODAxMjktYzdmYi0z MjAyLTg0NWItYmYxZTFlYWY4NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2HMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHvbUKQcQ4aKKnvvZc/MYnzFxiXpCb6m5UBxLsckDt1lW5F7GvWSbXmn +SYZdsrc4I81WNd/Drpk5Gzc1vbhF8Xe8Lb7WeBThx5A41eYBaEOabu/yoiVVOVW JZjKFWcwCkfPFEC7nGOzJ+BjaojZMdecEPrW+KqwAXMx8v4rzZS3PTSZxp4f3r8V 7gipyu+HBBu34Bs/hw560TNSBSDCe758k8CM+RQeW/bWHc0b6HxjJFUWcVQEE1KV Z1EU7LfplBlk9509/PyRp7iuYW9VmwJc8zhSOl5sMRn+qAhSs9kONNjSG1tvqGUC nx3Qa6xzOdU4kzNyEibCV4kWu/CRutM= -----END CERTIFICATE-----Generated at Thu Oct 1 13:29:34 2026 by rpki-client