$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa File: 07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa (raw, json) Hash identifier: z0Jec/LRkocjj03JaNcP8rpXpt17XHXH+JatnHUumIM= Subject key identifier: C3:94:43:0B:F9:16:2F:01:BF:81:D5:CC:D3:E7:48:44:67:36:C1:F4 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D9113D6AC38AE62B31280 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:91:13:d6:ac:38:ae:62:b3:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=784ac7ec-3fae-4ad9-aba2-d3e8b7c94e5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5f:00:ec:e6:bf:e0:5b:ac:39:68:ed:51:60: c8:f3:3c:a6:4d:c2:91:da:83:5b:8b:75:ad:c2:3d: e3:76:96:79:cd:f5:e0:1f:7c:57:71:1e:e6:12:1b: 50:ba:9c:9b:33:64:08:84:24:7d:c9:b9:d5:3a:7f: 54:9a:94:01:86:a0:2d:e9:00:55:2c:72:1b:da:4e: be:90:f2:61:b4:06:d9:85:86:50:58:ff:a8:04:7f: 5a:25:33:87:57:06:9a:75:15:31:c9:d8:9d:04:5c: f9:2e:b7:d1:59:38:d0:d5:41:92:d2:85:ff:0b:f9: fa:f3:26:59:f0:72:7e:ff:58:12:59:bc:a3:b1:96: b5:76:49:60:a3:1d:36:62:70:bd:09:22:b0:80:d1: 4d:a2:46:13:53:dc:13:3d:3d:2b:ef:19:88:51:df: 6e:7f:ed:d4:d1:77:e5:44:52:44:7f:cd:3c:24:21: d7:c5:9a:cf:c8:50:a7:0f:3a:da:b1:c3:5d:27:d2: 99:da:35:16:c8:aa:87:e9:61:d5:aa:50:ec:14:28: 48:24:e0:b1:83:57:c1:48:7f:d2:50:a2:50:36:6c: 55:a6:ae:78:b9:6b:1a:91:87:1a:f2:0f:aa:4a:81: 47:7c:87:be:c3:76:b7:3e:22:94:02:37:1a:96:ec: 57:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:94:43:0B:F9:16:2F:01:BF:81:D5:CC:D3:E7:48:44:67:36:C1:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/07da9258-5fd4-34df-8d3d-fe0bc0f5c423.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:8d:ae:2c:75:98:0b:b6:a6:82:ba:37:7f:5a:67:c3:68:90: bc:fa:f5:13:47:f1:3f:f7:5a:61:7d:b4:5c:68:f9:c8:58:57: cc:18:10:10:a4:b0:4e:77:df:a0:46:35:46:05:38:e9:dc:66: 8d:d9:8f:20:cc:6b:9e:2d:50:62:30:4b:29:d6:11:18:16:9d: 50:e0:90:d7:be:a7:2d:93:ab:57:f6:7c:b3:90:c6:36:99:e5: 1e:10:df:22:b0:6d:5c:06:10:b2:1c:43:73:a6:b7:ca:c0:92: fd:1d:a7:70:25:1a:c5:0e:dc:a2:56:ad:63:7f:91:d4:98:eb: ad:51:58:36:96:da:33:28:04:6b:17:81:4a:5f:c2:c5:aa:7f: 51:cc:14:e1:29:7e:12:6b:08:2d:d3:32:cd:32:3e:06:42:4b: ef:e8:1c:da:a1:08:16:19:75:ec:75:01:a4:8d:b3:91:50:7f: 6a:25:30:e5:eb:a5:e8:1d:53:17:7e:45:cb:c8:be:f6:48:26: 2e:c5:47:37:7f:46:5a:da:c3:0b:ea:69:d9:d1:5b:01:4b:11: c1:04:3f:2b:25:ea:93:f9:8d:e9:9f:95:e9:e1:c5:d6:49:d2: f0:ba:12:63:d0:4b:1a:b4:0d:a3:ba:71:b9:b9:69:54:21:df: 11:75:15:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnZET1qw4rmKzEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk Nzg0YWM3ZWMtM2ZhZS00YWQ5LWFiYTItZDNlOGI3Yzk0ZTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmV8A7Oa/4FusOWjtUWDI8zymTcKR2oNbi3Wt wj3jdpZ5zfXgH3xXcR7mEhtQupybM2QIhCR9ybnVOn9UmpQBhqAt6QBVLHIb2k6+ kPJhtAbZhYZQWP+oBH9aJTOHVwaadRUxydidBFz5LrfRWTjQ1UGS0oX/C/n68yZZ 8HJ+/1gSWbyjsZa1dklgox02YnC9CSKwgNFNokYTU9wTPT0r7xmIUd9uf+3U0Xfl RFJEf808JCHXxZrPyFCnDzrascNdJ9KZ2jUWyKqH6WHVqlDsFChIJOCxg1fBSH/S UKJQNmxVpq54uWsakYca8g+qSoFHfIe+w3a3PiKUAjcaluxXPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMOUQwv5Fi8Bv4HVzNPnSERnNsH0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDdkYTkyNTgtNWZkNC0z NGRmLThkM2QtZmUwYmMwZjVjNDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3IMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADSNrix1mAu2poK6N39aZ8NokLz69RNH8T/3WmF9tFxo+chYV8wYEBCk sE5336BGNUYFOOncZo3ZjyDMa54tUGIwSynWERgWnVDgkNe+py2Tq1f2fLOQxjaZ 5R4Q3yKwbVwGELIcQ3Omt8rAkv0dp3AlGsUO3KJWrWN/kdSY661RWDaW2jMoBGsX gUpfwsWqf1HMFOEpfhJrCC3TMs0yPgZCS+/oHNqhCBYZdex1AaSNs5FQf2olMOXr pegdUxd+RcvIvvZIJi7FRzd/RlrawwvqadnRWwFLEcEEPysl6pP5jemflenhxdZJ 0vC6EmPQSxq0DaO6cbm5aVQh3xF1FXY= -----END CERTIFICATE-----Generated at Thu Sep 10 17:33:51 2026 by rpki-client