$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa File: ef3bb060-55cf-3033-a86b-5a573f947a0d.roa (raw, json) Hash identifier: c24KLMJ66ebazQLZ08EhyKO8JQNUG4ChD9rM/BSy5I0= Subject key identifier: 13:06:05:E5:B9:A5:F4:55:73:ED:12:12:0F:A0:6A:78:43:26:5D:E4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498327BC7253782C6CF9F5A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:27:bc:72:53:78:2c:6c:f9:f5:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5f7573d8-6283-4430-90f1-bd14b05d1d31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cd:84:fa:63:85:04:39:fa:e1:5f:9a:bf:83: e2:47:52:50:6c:cb:cf:47:5f:bd:dc:18:5e:03:2b: 24:1d:db:d6:cd:d9:24:5f:06:e5:26:8a:7f:94:4b: dc:42:52:b6:cd:41:d4:34:d6:36:a4:cc:4c:6a:6f: e4:44:b9:fc:61:e2:a4:58:7d:6a:1f:c7:8b:f7:a7: f4:e6:2d:44:fa:1d:e0:9e:81:1d:9f:68:83:f6:36: f6:a1:7b:64:07:2b:bb:24:8e:8e:38:c2:6b:4c:6d: ba:91:58:88:ee:71:e8:a2:04:ce:0b:be:db:14:7f: 04:1c:b3:a1:b3:b1:f9:db:93:8c:2b:e6:cc:76:91: 66:db:58:ba:4a:a9:74:b6:07:9a:34:48:fc:1a:6f: 3b:ee:4c:9a:03:81:f1:be:99:9a:c3:84:9d:9c:ab: a1:9c:a3:d3:4e:64:d1:f1:96:15:7d:c0:6b:f4:88: 61:e8:b8:e6:ed:8f:53:e0:bf:ec:85:48:cb:0c:92: 51:8f:13:35:ec:9e:9a:3f:1b:3a:16:d5:10:5e:98: a3:db:2b:4e:5a:22:d0:8d:df:e0:1a:d5:a9:7f:25: 8a:f3:ab:bb:e0:c2:bc:6c:72:ae:e8:a9:b9:0e:5f: 09:62:5c:9f:7a:4d:85:0d:59:c2:46:5e:c1:4d:fe: c3:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:06:05:E5:B9:A5:F4:55:73:ED:12:12:0F:A0:6A:78:43:26:5D:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ef3bb060-55cf-3033-a86b-5a573f947a0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:e7:8a:fe:a2:f3:89:70:81:bb:62:78:19:4e:31:df:ec:58: a6:4c:05:96:61:b7:9c:8b:d1:75:63:d3:fd:5a:5d:86:ae:5a: c5:75:d3:e9:ed:ef:ff:fd:2a:c5:87:db:d4:d2:d5:4d:b1:c3: 11:1d:6a:5d:7f:e9:62:44:98:e3:d0:ca:16:f2:15:29:17:df: b9:b5:74:b5:cd:9d:9a:bf:2d:cb:83:2b:6c:e8:e6:49:c6:98: e3:94:4a:85:10:df:42:54:64:5e:e9:a2:de:24:b8:98:91:7e: ee:90:dc:07:e6:76:67:db:24:86:fe:24:c7:e4:7f:fc:89:bc: 6d:e1:39:2a:f4:e3:a1:12:9e:96:b8:ff:ac:4a:e1:fb:92:74: a1:1e:37:fa:96:df:5f:eb:9d:1b:dc:bf:dc:6a:88:3b:de:f6: 7c:cf:38:f0:0a:94:05:16:7b:41:e6:ba:fc:40:62:10:0e:f4: 1c:83:ff:58:12:a4:5f:58:8b:e0:43:9d:bf:a1:0f:66:83:b2: 73:d9:80:a8:34:81:7c:65:34:0e:5e:e1:3a:f6:4a:3f:e5:33: 13:72:57:0f:a5:75:23:bc:42:19:ca:d4:77:05:94:ef:b2:db: b1:1d:da:a6:22:00:93:c5:d5:21:bd:3d:aa:42:8f:94:e1:70: b1:e4:16:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jgye8clN4LGz59aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWY3NTczZDgtNjI4My00NDMwLTkwZjEtYmQxNGIwNWQxZDMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc2E+mOFBDn64V+av4PiR1JQbMvPR1+93Bhe AyskHdvWzdkkXwblJop/lEvcQlK2zUHUNNY2pMxMam/kRLn8YeKkWH1qH8eL96f0 5i1E+h3gnoEdn2iD9jb2oXtkByu7JI6OOMJrTG26kViI7nHoogTOC77bFH8EHLOh s7H525OMK+bMdpFm21i6Sql0tgeaNEj8Gm877kyaA4Hxvpmaw4SdnKuhnKPTTmTR 8ZYVfcBr9Ihh6Ljm7Y9T4L/shUjLDJJRjxM17J6aPxs6FtUQXpij2ytOWiLQjd/g GtWpfyWK86u74MK8bHKu6Km5Dl8JYlyfek2FDVnCRl7BTf7D/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBMGBeW5pfRVc+0SEg+ganhDJl3kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZWYzYmIwNjAtNTVjZi0z MDMzLWE4NmItNWE1NzNmOTQ3YTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1CMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/niv6i84lwgbtieBlOMd/sWKZMBZZht5yL0XVj0/1aXYauWsV10+nt 7//9KsWH29TS1U2xwxEdal1/6WJEmOPQyhbyFSkX37m1dLXNnZq/LcuDK2zo5knG mOOUSoUQ30JUZF7pot4kuJiRfu6Q3AfmdmfbJIb+JMfkf/yJvG3hOSr046ESnpa4 /6xK4fuSdKEeN/qW31/rnRvcv9xqiDve9nzPOPAKlAUWe0HmuvxAYhAO9ByD/1gS pF9Yi+BDnb+hD2aDsnPZgKg0gXxlNA5e4Tr2Sj/lMxNyVw+ldSO8QhnK1HcFlO+y 27Ed2qYiAJPF1SG9PapCj5ThcLHkFno= -----END CERTIFICATE-----Generated at Sat Sep 26 07:44:59 2026 by rpki-client