$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa File: e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa (raw, json) Hash identifier: lrmwOuCM30DOWw3Phi/Y6fhucduxHSnVVuKfZO4YSNk= Subject key identifier: 97:AE:71:DF:76:6A:B9:47:32:26:C3:4F:CF:AD:AC:06:93:4C:C7:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0FDD2EDF47DC3B7D4100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0f:dd:2e:df:47:dc:3b:7d:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ce648d1d-6cb3-42cf-b89b-a4587f11a21c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8b:8a:92:92:a3:05:be:69:a1:09:71:3b:e7: 94:6e:d7:bc:e1:ca:c1:48:4c:0e:f2:36:73:10:24: df:4d:aa:65:7c:45:43:bc:3f:2d:fc:57:24:16:32: d5:47:47:43:64:c0:5b:70:ad:00:1b:6e:37:4f:9a: 60:f9:bd:5a:ef:c8:8e:17:5f:a4:e1:e8:9d:23:53: 7b:08:55:4d:d5:22:0e:b5:bb:90:ac:16:18:ab:a8: 6a:a4:d2:1a:7b:ad:6f:72:43:ca:6b:0d:c9:bb:a6: fd:28:b9:c9:01:43:bd:da:cd:04:79:ff:89:8c:11: 25:31:ce:fa:3f:fc:65:58:c3:54:1f:82:15:b2:fb: 0d:09:58:ec:f5:7e:6a:80:81:31:dd:aa:16:d1:d5: 38:30:1e:ea:f3:4c:e2:0c:57:4f:ec:c7:d2:39:d5: 0f:c2:2a:5f:97:f4:ba:fd:ee:dd:af:26:8c:50:58: 0d:36:5c:a5:67:df:2d:57:04:89:ea:86:00:f9:4c: 0d:ab:1c:c3:10:01:6b:85:fc:70:ee:0d:d8:8f:37: 90:35:0c:a7:fc:77:ca:ae:1c:5a:91:ec:c7:31:f7: 84:43:f9:b1:65:dc:4c:d4:6b:7b:ca:5e:06:b5:2b: 00:77:48:b9:7f:80:2d:43:cd:26:55:c2:64:aa:a1: 36:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:AE:71:DF:76:6A:B9:47:32:26:C3:4F:CF:AD:AC:06:93:4C:C7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e23734b7-d6a4-399e-83b8-e9e1699c7f78.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:c6:4a:4a:d4:ef:49:d7:ba:31:02:82:a9:0a:2a:cf:27:df: 9e:37:f0:99:ae:be:fe:bf:1f:92:b9:38:78:f8:81:dd:0c:de: be:60:b8:e7:66:3a:e1:4a:90:5a:97:83:8f:60:e1:b2:49:51: cf:57:77:e0:7d:cc:d4:aa:d4:8a:3e:9f:1e:68:15:97:7b:e7: ca:ac:ec:26:e4:e3:79:65:f7:60:7e:84:59:d0:2d:f1:b4:1f: ee:f9:f4:4a:0c:af:7a:4b:a3:78:82:e3:11:2e:ae:13:f0:89: 71:28:65:1b:e4:3e:24:2d:8f:f4:47:65:2d:c6:e7:65:0b:ef: 87:c2:92:1c:d3:fc:d2:2c:ad:87:c1:04:66:97:e5:f1:46:a8: e5:2b:37:18:ad:da:89:c8:b3:43:03:3a:3f:0b:48:3e:24:cc: 6f:0d:a8:9d:e5:aa:76:06:95:9f:dc:8f:33:8d:21:a0:78:48: 29:81:c9:ab:85:1f:35:e7:70:c6:c2:25:5a:42:a4:47:5c:c6: c8:ad:db:76:6d:d9:a1:2c:68:df:05:15:84:9b:fb:14:ca:ea: ba:30:7f:a2:ea:f2:d7:6d:c4:4b:3e:9f:d2:65:5b:4a:6a:77: ba:b6:36:5e:bd:cd:8e:87:62:04:80:e7:51:72:fa:94:2f:aa: a5:b2:b3:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jew/dLt9H3Dt9QQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2U2NDhkMWQtNmNiMy00MmNmLWI4OWItYTQ1ODdmMTFhMjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4uKkpKjBb5poQlxO+eUbte84crBSEwO8jZz ECTfTaplfEVDvD8t/FckFjLVR0dDZMBbcK0AG243T5pg+b1a78iOF1+k4eidI1N7 CFVN1SIOtbuQrBYYq6hqpNIae61vckPKaw3Ju6b9KLnJAUO92s0Eef+JjBElMc76 P/xlWMNUH4IVsvsNCVjs9X5qgIEx3aoW0dU4MB7q80ziDFdP7MfSOdUPwipfl/S6 /e7dryaMUFgNNlylZ98tVwSJ6oYA+UwNqxzDEAFrhfxw7g3YjzeQNQyn/HfKrhxa kezHMfeEQ/mxZdxM1Gt7yl4GtSsAd0i5f4AtQ80mVcJkqqE2vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJeucd92arlHMibDT8+trAaTTMdxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTIzNzM0YjctZDZhNC0z OTllLTgzYjgtZTllMTY5OWM3Zjc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3PMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMHGSkrU70nXujECgqkKKs8n35438Jmuvv6/H5K5OHj4gd0M3r5guOdm OuFKkFqXg49g4bJJUc9Xd+B9zNSq1Io+nx5oFZd758qs7Cbk43ll92B+hFnQLfG0 H+759EoMr3pLo3iC4xEurhPwiXEoZRvkPiQtj/RHZS3G52UL74fCkhzT/NIsrYfB BGaX5fFGqOUrNxit2onIs0MDOj8LSD4kzG8NqJ3lqnYGlZ/cjzONIaB4SCmByauF HzXncMbCJVpCpEdcxsit23Zt2aEsaN8FFYSb+xTK6rowf6Lq8tdtxEs+n9JlW0pq d7q2Nl69zY6HYgSA51Fy+pQvqqWys8M= -----END CERTIFICATE-----Generated at Sun Sep 27 06:38:20 2026 by rpki-client