$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa File: 0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa (raw, json) Hash identifier: u4lvoE9EWLpaT7jZ0fdZx3fDBiY4oDdbdXgCPbhU85o= Subject key identifier: 32:00:2A:47:85:D2:D4:A8:75:15:FE:80:EF:80:79:44:F6:0F:B5:FE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D8B72615B407194BB1000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:8b:72:61:5b:40:71:94:bb:10:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3a03a9d8-e387-4b87-8819-a0051536791f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ea:88:0b:e0:55:cf:5f:8e:77:b1:1d:f5:30: 4a:9a:0f:e2:8f:a6:8a:5b:ea:ef:fd:7b:81:17:42: c8:44:d0:5d:0b:e4:fc:f5:f7:1e:fb:f3:dc:35:30: d3:00:a7:a1:d0:88:f3:8f:5e:3c:b0:3e:ae:ff:f7: 5f:3c:84:71:9b:45:8f:2b:43:c8:85:4e:f5:ee:66: 06:f1:c3:41:45:70:94:3e:55:fc:d7:7f:cd:32:00: ed:a3:64:3e:62:c3:6a:00:c5:20:88:4c:a2:ab:dc: 65:96:b1:ef:5f:e6:9d:11:93:6a:49:ef:b4:75:eb: 44:12:02:c7:5a:47:81:ba:26:b6:3e:2f:17:40:5d: 67:72:28:83:22:38:08:ec:09:74:5f:db:37:e5:4e: 61:95:4b:b3:e9:ec:c7:a9:ff:48:ea:0d:16:51:d6: e7:45:08:91:4b:66:c7:ed:8b:a7:4f:5b:83:3a:77: 21:0d:39:25:4b:26:ce:67:a1:88:72:3c:29:01:f8: 2d:e3:1e:96:8c:09:d3:8b:d0:49:c0:cf:7e:32:78: 66:38:91:d2:58:95:5c:df:78:04:40:af:43:59:f4: 22:98:ec:50:03:94:26:8b:24:79:dc:a0:ac:47:47: e4:05:87:1d:90:66:0f:a4:dd:e0:b8:d4:20:7f:13: bc:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:00:2A:47:85:D2:D4:A8:75:15:FE:80:EF:80:79:44:F6:0F:B5:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/0a4c20b5-cd4b-396c-839a-2b9c3a5e3de2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.111.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:c3:d9:db:e5:76:c3:7a:1b:e3:02:fd:d7:fb:a6:8d:bb:2f: ac:60:07:6f:84:28:c1:31:ba:d2:d8:2c:7b:6f:db:b0:15:64: 39:49:e8:2e:12:42:e9:60:89:8b:db:42:a0:10:ae:52:37:e7: d4:3b:0c:67:19:f3:ae:04:ed:44:36:49:95:3e:2b:67:79:89: 38:24:ec:96:ec:d2:c2:50:c3:80:e4:ed:0d:ac:d1:8d:89:9b: 98:27:28:85:51:fa:e7:f6:7b:cb:be:83:09:93:94:cb:68:80: a7:0b:f9:25:62:8f:fd:d9:03:b8:72:39:0a:29:62:bc:58:9d: f8:ef:f8:76:72:08:27:d5:26:bd:32:c8:5f:ac:2b:31:c7:0b: 3a:8e:20:8d:26:49:1a:ce:9e:b0:61:6b:ed:30:8d:dc:eb:5a: 32:b0:85:d6:a1:5a:5a:d4:d4:31:d4:48:52:35:1d:22:84:7b: 00:d1:5e:fe:75:ce:b3:e5:d4:59:09:46:bd:bc:9c:fa:c3:90: b1:45:d3:ac:de:82:03:c2:4e:dd:aa:8c:07:dc:e9:67:a2:1f: 25:ff:0b:6a:d0:a0:b1:16:2c:6e:36:24:ff:26:29:fc:79:af: 63:09:29:12:9d:fa:f3:83:36:a3:a3:af:7f:6f:a4:4a:9b:ec: 19:1b:c5:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnYtyYVtAcZS7EAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2EwM2E5ZDgtZTM4Ny00Yjg3LTg4MTktYTAwNTE1MzY3OTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+qIC+BVz1+Od7Ed9TBKmg/ij6aKW+rv/XuB F0LIRNBdC+T89fce+/PcNTDTAKeh0Ijzj148sD6u//dfPIRxm0WPK0PIhU717mYG 8cNBRXCUPlX813/NMgDto2Q+YsNqAMUgiEyiq9xllrHvX+adEZNqSe+0detEEgLH WkeBuia2Pi8XQF1nciiDIjgI7Al0X9s35U5hlUuz6ezHqf9I6g0WUdbnRQiRS2bH 7YunT1uDOnchDTklSybOZ6GIcjwpAfgt4x6WjAnTi9BJwM9+MnhmOJHSWJVc33gE QK9DWfQimOxQA5QmiyR53KCsR0fkBYcdkGYPpN3guNQgfxO8owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIAKkeF0tSodRX+gO+AeUT2D7X+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMGE0YzIwYjUtY2Q0Yi0z OTZjLTgzOWEtMmI5YzNhNWUzZGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK1vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLD2dvldsN6G+MC/df7po27L6xgB2+EKMExutLYLHtv27AVZDlJ6C4S QulgiYvbQqAQrlI359Q7DGcZ864E7UQ2SZU+K2d5iTgk7Jbs0sJQw4Dk7Q2s0Y2J m5gnKIVR+uf2e8u+gwmTlMtogKcL+SVij/3ZA7hyOQopYrxYnfjv+HZyCCfVJr0y yF+sKzHHCzqOII0mSRrOnrBha+0wjdzrWjKwhdahWlrU1DHUSFI1HSKEewDRXv51 zrPl1FkJRr28nPrDkLFF06zeggPCTt2qjAfc6WeiHyX/C2rQoLEWLG42JP8mKfx5 r2MJKRKd+vODNqOjr39vpEqb7Bkbxfk= -----END CERTIFICATE-----Generated at Thu Sep 10 16:21:37 2026 by rpki-client