$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa File: f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa (raw, json) Hash identifier: W8JcPG8bC0e0/oaIaF6bqK/HXxWPHCAQEawfWyItxF8= Subject key identifier: 62:8A:44:F0:EB:2F:F9:A0:7A:E7:E3:55:56:3A:AA:FC:37:52:39:E3 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0CD33D88F745F7734DB0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0c:d3:3d:88:f7:45:f7:73:4d:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=22f9ef44-fb35-4ed0-85dc-062abd3c8d1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:6d:b8:4d:89:7c:97:94:33:8b:96:66:dd:fc: 7d:ea:80:7a:22:cf:82:63:15:17:84:4e:f2:d1:41: 87:b4:e4:40:9e:65:82:22:da:8e:9c:8c:51:9e:5a: 75:7c:8c:a8:0c:27:67:09:5c:ee:19:b3:f7:38:b1: 9d:30:74:38:9b:55:40:0d:c4:af:75:3a:40:91:d4: fb:54:86:5e:e2:37:f3:e5:93:83:ce:2b:03:bf:d0: 2c:9a:a5:c0:27:a8:05:f5:a6:4f:07:8c:23:58:25: 74:e9:94:43:15:2f:95:d4:18:d7:ab:87:9b:ac:6c: 23:93:22:e8:76:bd:85:78:ce:fa:47:a3:7c:84:3f: 67:4a:7f:a0:0c:3c:92:f2:f1:a8:0e:cf:ba:cc:5a: ab:e4:b8:18:87:7a:28:29:b6:9b:82:1d:1c:00:20: 50:31:92:0e:91:9c:59:3c:f8:d5:f0:d8:d0:d5:b7: cd:02:b6:57:60:82:4e:f3:f9:0e:22:6c:ca:23:d0: 61:b6:97:f3:50:2d:fa:30:aa:12:03:46:5f:2b:62: 00:3a:f7:09:90:65:ad:3b:65:f4:ca:ac:7a:5b:1d: 6a:0c:99:7a:f3:b7:a6:9e:f2:a7:9d:71:66:7a:08: b3:85:84:c0:e6:48:a0:bf:6d:1c:54:01:c3:1d:82: 8f:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:8A:44:F0:EB:2F:F9:A0:7A:E7:E3:55:56:3A:AA:FC:37:52:39:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f6ed4437-2c07-3f5d-b07d-5ecf28fdc5e3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bd:ba:ab:cb:96:77:cb:1e:f8:a1:0c:40:4d:68:66:6e:4a:19: 7b:a2:be:d5:6e:2a:d7:1b:58:19:5e:b5:fd:e6:ec:97:ac:6b: 4a:03:01:f5:49:02:95:68:7e:5c:29:e2:50:a1:10:13:b2:74: bb:01:fc:f2:87:2b:b8:18:07:3b:56:26:13:d7:53:57:fa:49: f0:86:fb:f5:45:a5:91:e4:28:c4:20:a4:4b:77:f2:be:37:65: da:51:12:74:c8:cf:1e:9b:c7:e5:3d:01:fd:79:27:cf:50:c8: 35:29:aa:fd:37:c8:7d:be:fd:06:f1:d7:ca:e8:4e:73:5b:3d: 0e:5d:58:c3:82:c3:4e:9b:02:21:7d:77:c6:01:ff:da:3a:8c: 59:5b:f1:f4:f5:ff:66:04:45:20:3d:15:de:ae:dd:5f:69:db: b9:99:0b:98:17:dd:7a:a2:c3:ca:d3:bf:7b:49:11:2d:be:aa: 43:32:de:94:e4:0d:6b:40:fd:54:37:eb:10:c6:eb:2d:7c:a5: de:69:fe:8b:bc:a0:c0:ae:c1:01:a5:15:7f:c5:c0:68:89:30: 7c:ae:56:89:fb:a2:b1:a8:99:b8:58:98:55:b0:68:b9:18:f9: ee:85:db:3e:50:56:da:bd:6a:29:d4:ac:8a:55:dc:b8:60:c4: 12:1c:e5:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewzTPYj3RfdzTbAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjJmOWVmNDQtZmIzNS00ZWQwLTg1ZGMtMDYyYWJkM2M4ZDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmG24TYl8l5Qzi5Zm3fx96oB6Is+CYxUXhE7y 0UGHtORAnmWCItqOnIxRnlp1fIyoDCdnCVzuGbP3OLGdMHQ4m1VADcSvdTpAkdT7 VIZe4jfz5ZODzisDv9AsmqXAJ6gF9aZPB4wjWCV06ZRDFS+V1BjXq4ebrGwjkyLo dr2FeM76R6N8hD9nSn+gDDyS8vGoDs+6zFqr5LgYh3ooKbabgh0cACBQMZIOkZxZ PPjV8NjQ1bfNArZXYIJO8/kOImzKI9BhtpfzUC36MKoSA0ZfK2IAOvcJkGWtO2X0 yqx6Wx1qDJl687emnvKnnXFmegizhYTA5kigv20cVAHDHYKPJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGKKRPDrL/mgeufjVVY6qvw3UjnjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjZlZDQ0MzctMmMwNy0z ZjVkLWIwN2QtNWVjZjI4ZmRjNWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2VMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAL26q8uWd8se+KEMQE1oZm5KGXuivtVuKtcbWBletf3m7Jesa0oDAfVJ ApVoflwp4lChEBOydLsB/PKHK7gYBztWJhPXU1f6SfCG+/VFpZHkKMQgpEt38r43 ZdpREnTIzx6bx+U9Af15J89QyDUpqv03yH2+/Qbx18roTnNbPQ5dWMOCw06bAiF9 d8YB/9o6jFlb8fT1/2YERSA9Fd6u3V9p27mZC5gX3Xqiw8rTv3tJES2+qkMy3pTk DWtA/VQ36xDG6y18pd5p/ou8oMCuwQGlFX/FwGiJMHyuVon7orGombhYmFWwaLkY +e6F2z5QVtq9ainUrIpV3LhgxBIc5aI= -----END CERTIFICATE-----Generated at Mon Sep 28 18:26:54 2026 by rpki-client