$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2fe37762-0a82-3d08-975b-f89031a4485b.roa File: 2fe37762-0a82-3d08-975b-f89031a4485b.roa (raw, json) Hash identifier: ETpkJnATLonBV5zg73djoUCJwPdYWRQHtezOE9Amyb4= Subject key identifier: F1:5E:57:73:2D:14:69:7E:E6:50:DB:D1:C9:84:88:2C:69:1B:58:61 Certificate issuer: /CN=e699b02b-ca04-4557-94f4-189989d49ccd Certificate serial: 010D0C9F4328584F146795E4C10F6B0096CE9140 Authority key identifier: 5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2fe37762-0a82-3d08-975b-f89031a4485b.roa Signing time: Sun 06 Sep 2026 01:00:11 +0000 ROA not before: Sun 06 Sep 2026 01:00:11 +0000 ROA not after: Sat 05 Dec 2026 02:00:11 +0000 asID: 31898 IP address blocks: 72.18.79.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 07:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:14:67:95:e4:c1:0f:6b:00:96:ce:91:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e699b02b-ca04-4557-94f4-189989d49ccd Validity Not Before: Sep 6 01:00:11 2026 GMT Not After : Dec 5 02:00:11 2026 GMT Subject: CN=5f4c3838-aab6-4276-84ff-2746b3c9e07c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cf:32:d9:2e:4d:55:b2:29:a7:b1:5b:6c:02: 62:e7:ed:2b:86:68:23:e3:da:aa:bd:8a:61:9d:fa: 86:88:a8:42:f0:06:4e:a0:64:22:82:8d:d4:46:ad: 74:f2:97:33:76:c8:0c:3c:e4:b9:2c:da:8c:38:3a: b9:87:34:10:99:3b:70:f1:06:3a:ca:81:a1:b0:80: 69:81:5e:f5:c7:55:ce:d3:57:ab:79:39:f4:03:e3: ec:96:20:3b:68:26:13:f2:d8:5e:23:fe:8d:1d:cd: ba:ca:ab:a4:47:5f:8a:e2:ca:a2:86:c4:2b:6a:90: 1e:a1:23:20:ea:23:5f:56:68:30:fc:1a:e4:fe:8a: 1e:bb:a5:35:91:31:fc:00:09:72:7f:27:0b:26:d8: fe:35:e6:d1:8a:84:e7:5a:82:e5:79:d9:06:b8:27: 5e:c2:3f:5c:ee:99:6c:43:e5:c3:79:68:15:50:0d: 8b:ef:87:87:8a:80:49:11:0a:10:d7:a7:14:23:a7: 02:d1:17:20:d7:e3:e5:36:84:8c:a6:22:f0:0e:63: 79:db:5c:b0:35:f7:3c:a6:e2:b2:5f:e2:30:59:b3: 25:f6:d7:de:44:24:7a:e8:b0:68:87:58:aa:50:d2: 2a:32:62:6d:3a:21:d9:56:76:70:ba:93:86:10:63: 8b:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:5E:57:73:2D:14:69:7E:E6:50:DB:D1:C9:84:88:2C:69:1B:58:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/2fe37762-0a82-3d08-975b-f89031a4485b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd/e699b02b-ca04-4557-94f4-189989d49ccd.crl X509v3 Authority Key Identifier: keyid:5E:AF:98:D1:00:83:CD:28:7D:A6:48:52:90:CA:41:DB:EC:6E:31:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e699b02b-ca04-4557-94f4-189989d49ccd.cer sbgp-ipAddrBlock: critical IPv4: 72.18.79.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:4b:8a:c4:3c:b2:62:c5:79:65:b2:0d:43:08:6a:18:bb:7c: 93:3e:47:e4:8b:68:8c:6e:0c:28:01:96:84:2c:20:b4:2e:d7: be:75:5e:e4:3c:69:f4:7e:02:97:a8:a4:64:24:07:0c:9f:2b: 9d:5c:e8:15:38:b4:94:99:75:9f:83:20:2b:2e:9c:ec:7d:a2: 3d:f6:b3:9b:c1:56:a1:ba:4f:a2:98:95:12:82:88:80:62:76: d2:cb:88:0f:7b:22:81:09:92:c1:20:e2:5e:3f:0c:0e:0b:8f: a6:a6:bc:9d:55:36:b4:88:1d:f0:4f:96:a2:00:92:90:5e:48: df:17:12:2e:9d:46:58:2c:85:94:57:49:62:fd:43:35:74:bd: 4e:44:44:32:9f:8b:f2:3a:e8:84:b5:6c:9a:39:b8:f2:49:12: 05:15:76:aa:9e:19:1a:05:53:6c:ab:cd:9a:6e:c1:88:ff:87: 95:ec:cf:13:b4:d4:b4:ca:3e:d7:b2:3e:c3:63:87:c6:5d:09: 5f:a9:72:de:0a:18:fa:9b:78:dd:52:b8:30:ed:76:a6:d0:4c: 94:9d:a6:7f:fc:d6:5b:01:8c:27:4a:cf:b1:b9:2b:c8:aa:c3: c0:28:8f:e2:8d:26:2e:b9:2b:73:9d:b5:2b:7f:4b:6a:77:d6: 1e:c0:d5:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8UZ5XkwQ9rAJbOkUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTY5OWIwMmItY2EwNC00NTU3LTk0ZjQtMTg5OTg5ZDQ5 Y2NkMB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk NWY0YzM4MzgtYWFiNi00Mjc2LTg0ZmYtMjc0NmIzYzllMDdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs8y2S5NVbIpp7FbbAJi5+0rhmgj49qqvYph nfqGiKhC8AZOoGQigo3URq108pczdsgMPOS5LNqMODq5hzQQmTtw8QY6yoGhsIBp gV71x1XO01ereTn0A+PsliA7aCYT8theI/6NHc26yqukR1+K4sqihsQrapAeoSMg 6iNfVmgw/Brk/ooeu6U1kTH8AAlyfycLJtj+NebRioTnWoLledkGuCdewj9c7pls Q+XDeWgVUA2L74eHioBJEQoQ16cUI6cC0Rcg1+PlNoSMpiLwDmN521ywNfc8puKy X+IwWbMl9tfeRCR66LBoh1iqUNIqMmJtOiHZVnZwupOGEGOLGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPFeV3MtFGl+5lDb0cmEiCxpG1hhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5 YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5ODlkNDljY2QvMmZlMzc3NjItMGE4Mi0z ZDA4LTk3NWItZjg5MDMxYTQ0ODViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTY5OWIwMmItY2EwNC00NTU3LTk0 ZjQtMTg5OTg5ZDQ5Y2NkL2U2OTliMDJiLWNhMDQtNDU1Ny05NGY0LTE4OTk4OWQ0 OWNjZC5jcmwwHwYDVR0jBBgwFoAUXq+Y0QCDzSh9pkhSkMpB2+xuMXcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9lNjk5YjAyYi1jYTA0LTQ1NTctOTRmNC0xODk5 ODlkNDljY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBJPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIdLisQ8smLFeWWyDUMIahi7fJM+R+SLaIxuDCgBloQsILQu1751XuQ8 afR+ApeopGQkBwyfK51c6BU4tJSZdZ+DICsunOx9oj32s5vBVqG6T6KYlRKCiIBi dtLLiA97IoEJksEg4l4/DA4Lj6amvJ1VNrSIHfBPlqIAkpBeSN8XEi6dRlgshZRX SWL9QzV0vU5ERDKfi/I66IS1bJo5uPJJEgUVdqqeGRoFU2yrzZpuwYj/h5XszxO0 1LTKPteyPsNjh8ZdCV+pct4KGPqbeN1SuDDtdqbQTJSdpn/81lsBjCdKz7G5K8iq w8Aoj+KNJi65K3OdtSt/S2p31h7A1cE= -----END CERTIFICATE-----Generated at Sat Oct 10 10:23:48 2026 by rpki-client