$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea768d16-91fb-31d4-b130-297acf8b6172.roa File: ea768d16-91fb-31d4-b130-297acf8b6172.roa (raw, json) Hash identifier: vKxP8S7qGpbOu5cqxCR17WNs8Kp1ZM4qaqD+N4MQloY= Subject key identifier: A4:30:20:85:08:E6:A3:7E:2D:98:79:BF:37:A7:A3:13:4A:D4:E1:32 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D289CF34B6C601734680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea768d16-91fb-31d4-b130-297acf8b6172.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d2:89:cf:34:b6:c6:01:73:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9029d52c-b19e-4f87-b0f9-18e064cfd4c5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:3a:3e:6f:1a:71:e3:cc:8a:99:9a:37:3a:6d: 48:2a:36:88:53:93:94:8e:aa:58:c8:b3:b0:39:da: 29:86:a9:7f:28:3d:4e:00:03:1d:72:72:47:68:70: fc:d7:1c:3a:55:5b:36:20:e1:56:e4:2c:58:38:2e: 4c:f9:a0:37:7e:b4:03:ff:0b:17:d2:e3:03:d1:ca: 09:f1:a8:9a:62:83:ea:76:05:9f:6c:7a:bd:f4:75: 45:3c:49:7b:1c:60:cd:f8:90:e1:04:ed:9b:09:c8: 8a:ab:30:43:c3:99:60:1e:9a:1b:67:53:20:97:d5: 1f:8c:3f:64:3f:fa:b5:a4:67:39:de:91:0a:69:76: 1e:d1:17:ea:a8:4f:68:ff:d3:7d:d0:3a:04:3f:b8: c1:ab:3c:20:db:b9:fb:79:ba:99:6d:a1:9a:76:f0: 02:19:67:c9:bd:d5:6d:31:03:8d:77:6e:e1:27:6e: 8a:ec:ee:06:77:42:3d:51:96:8c:db:ab:a5:4e:b6: ea:54:c5:78:86:c7:2d:9c:82:07:9e:4f:5c:38:e4: 67:7d:cc:18:a0:43:63:9b:e8:d1:72:c5:d7:c8:87: 4e:52:19:47:f7:83:b9:51:97:11:e6:66:a7:f0:91: c4:99:52:a9:c0:34:b1:c8:2d:35:4e:86:3a:06:2a: a7:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:30:20:85:08:E6:A3:7E:2D:98:79:BF:37:A7:A3:13:4A:D4:E1:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ea768d16-91fb-31d4-b130-297acf8b6172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:f6:29:2b:5e:29:a9:13:e8:d1:d4:a8:28:0e:a7:f4:a3:be: b8:34:e6:0a:fe:5a:1e:17:07:c0:0f:41:d3:b5:64:23:45:3f: 77:2b:18:01:5b:53:55:6a:5e:64:24:46:3f:35:57:87:dc:f4: e3:5c:f2:b8:53:39:83:4f:f3:25:ae:fd:d6:bb:4f:46:a7:53: 11:87:7f:b3:2e:1d:4a:e4:db:0a:56:9c:70:55:31:47:7f:ac: ee:c4:ec:cb:e6:8f:26:d8:0c:d5:9a:94:a5:52:64:49:42:d0: 57:25:72:a2:7e:12:f5:c7:03:4a:9a:91:c8:60:b4:1a:9c:1a: 12:c8:cf:69:d8:d8:4b:46:10:e4:58:2a:f6:f6:5b:4d:50:56: f0:37:ab:06:dc:b6:9f:a7:da:e7:97:37:52:8c:a6:85:07:2c: 60:d1:00:9e:20:77:f2:68:b5:7e:8a:43:b0:83:80:0b:86:a2: c6:94:c1:07:4c:e6:51:e5:8e:cc:eb:e6:b5:09:c9:06:ee:6f: e9:b4:68:50:40:df:d6:58:b7:86:6e:b8:6b:ae:bc:81:70:ec: 6b:e0:77:4b:d0:41:bf:3d:9b:98:f3:b7:8e:8c:36:19:c5:18: 5b:da:b2:de:ba:ad:29:63:92:c7:34:3a:ca:ed:9e:57:92:b1: e9:57:8b:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9KJzzS2xgFzRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTAyOWQ1MmMtYjE5ZS00Zjg3LWIwZjktMThlMDY0Y2ZkNGM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmzo+bxpx48yKmZo3Om1IKjaIU5OUjqpYyLOw Odophql/KD1OAAMdcnJHaHD81xw6VVs2IOFW5CxYOC5M+aA3frQD/wsX0uMD0coJ 8aiaYoPqdgWfbHq99HVFPEl7HGDN+JDhBO2bCciKqzBDw5lgHpobZ1Mgl9UfjD9k P/q1pGc53pEKaXYe0RfqqE9o/9N90DoEP7jBqzwg27n7ebqZbaGadvACGWfJvdVt MQONd27hJ26K7O4Gd0I9UZaM26ulTrbqVMV4hsctnIIHnk9cOORnfcwYoENjm+jR csXXyIdOUhlH94O5UZcR5man8JHEmVKpwDSxyC01ToY6BiqnRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQwIIUI5qN+LZh5vzenoxNK1OEyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWE3NjhkMTYtOTFmYi0z MWQ0LWIxMzAtMjk3YWNmOGI2MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMH2KSteKakT6NHUqCgOp/Sjvrg05gr+Wh4XB8APQdO1ZCNFP3crGAFb U1VqXmQkRj81V4fc9ONc8rhTOYNP8yWu/da7T0anUxGHf7MuHUrk2wpWnHBVMUd/ rO7E7MvmjybYDNWalKVSZElC0FclcqJ+EvXHA0qakchgtBqcGhLIz2nY2EtGEORY Kvb2W01QVvA3qwbctp+n2ueXN1KMpoUHLGDRAJ4gd/JotX6KQ7CDgAuGosaUwQdM 5lHljszr5rUJyQbub+m0aFBA39ZYt4ZuuGuuvIFw7Gvgd0vQQb89m5jzt46MNhnF GFvast66rSljksc0OsrtnleSselXi1A= -----END CERTIFICATE-----Generated at Mon Sep 28 21:17:58 2026 by rpki-client