$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa File: 2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa (raw, json) Hash identifier: TxUshggRDZCIAEY1C9HoRSjKvjq4D/2AHKJEjuKPfiQ= Subject key identifier: 2E:8C:35:83:8C:D9:A1:E0:F4:FF:7E:D4:38:39:14:43:52:98:11:73 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498321881D24B61C0CBB0400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:21:88:1d:24:b6:1c:0c:bb:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=558d8331-bd5e-4408-b359-243070849c65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f1:b3:d5:d1:12:06:99:81:56:0d:e3:72:b2: e9:9e:e5:88:fa:59:74:22:ac:d7:44:f3:2e:b4:08: 8f:79:e6:e7:17:bf:38:ae:78:8b:f3:05:43:39:b1: 03:7b:e2:b3:8d:83:95:3b:cc:cb:35:a3:1a:a7:53: 58:6f:0a:2a:14:27:97:4a:44:76:a7:3f:53:bd:2d: 41:dc:77:d1:6c:23:50:31:ff:78:03:9a:3e:a2:4e: 38:77:dc:fb:11:f7:d9:b7:6c:a0:55:57:e0:74:d3: 47:2c:e1:74:16:3d:14:12:78:3a:ff:3d:48:f6:69: ed:08:eb:fb:8c:ef:a4:19:7a:05:53:91:6f:6a:96: 7b:32:3e:61:2b:16:cb:7c:0c:99:6a:40:37:cb:83: a6:9b:12:69:45:1b:59:94:e2:15:a9:85:66:b8:bc: d6:cc:8d:b1:5e:69:5f:93:d6:81:0f:2e:ba:f0:42: c6:11:f1:89:44:d1:8e:9b:55:54:f0:27:95:cb:9b: c0:b5:f0:21:f3:ba:48:9d:83:ee:e8:79:42:99:2c: 03:b5:4c:06:d8:9f:26:1f:2b:b4:31:31:16:fe:56: 9f:2e:8d:4a:75:96:66:42:48:b8:de:88:a3:7a:73: 71:88:23:24:42:3e:7f:a6:a7:af:59:08:2e:41:d1: 7e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:8C:35:83:8C:D9:A1:E0:F4:FF:7E:D4:38:39:14:43:52:98:11:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2d0094d1-a63d-34a6-b180-d7ffbbb6b6ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c6:95:79:5f:9d:71:75:78:60:dd:4a:6d:c8:b8:13:1b:9a:57: f8:37:60:ef:ee:ad:b7:bc:85:b4:cf:33:83:43:93:51:59:63: cb:be:aa:1f:11:94:06:88:76:ad:55:53:8b:a9:e6:9a:98:88: cb:4e:46:78:de:bd:0a:ed:87:d2:66:e4:5f:91:b2:b4:ea:13: 06:db:ba:28:f2:99:1a:cb:06:a0:31:cd:6d:03:a9:f5:40:0f: a8:25:b3:51:8e:66:26:3e:d9:ae:03:f5:d5:76:38:49:90:29: 18:e8:6f:76:41:7e:0f:70:0f:4e:9d:5a:33:f3:87:14:32:68: 5a:9e:f7:7a:2f:c5:fe:7d:48:ae:aa:fe:7b:bd:5b:1a:b0:db: b1:31:18:20:73:6c:b8:1b:e8:b0:2c:b9:2c:5b:70:4d:b8:b4: b6:8e:7a:99:b3:ab:50:bc:b2:a8:6a:a0:b9:81:78:44:a4:0b: 25:25:bd:f9:46:4c:0c:e6:ae:9b:01:b4:61:eb:fa:2d:a5:ac: 9b:d3:8f:8c:3a:72:22:39:84:6f:c1:7d:c3:be:6f:67:54:1d: 29:99:ca:e3:4b:df:a0:c2:8b:3f:42:0a:76:5c:a2:6b:14:80: 4c:74:77:15:03:bb:2e:54:bd:9b:6c:f5:a7:31:b1:53:2c:ce: 19:e5:55:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyGIHSS2HAy7BAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTU4ZDgzMzEtYmQ1ZS00NDA4LWIzNTktMjQzMDcwODQ5YzY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/Gz1dESBpmBVg3jcrLpnuWI+ll0IqzXRPMu tAiPeebnF784rniL8wVDObEDe+KzjYOVO8zLNaMap1NYbwoqFCeXSkR2pz9TvS1B 3HfRbCNQMf94A5o+ok44d9z7EffZt2ygVVfgdNNHLOF0Fj0UEng6/z1I9mntCOv7 jO+kGXoFU5FvapZ7Mj5hKxbLfAyZakA3y4OmmxJpRRtZlOIVqYVmuLzWzI2xXmlf k9aBDy668ELGEfGJRNGOm1VU8CeVy5vAtfAh87pInYPu6HlCmSwDtUwG2J8mHyu0 MTEW/lafLo1KdZZmQki43oijenNxiCMkQj5/pqevWQguQdF+kwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6MNYOM2aHg9P9+1Dg5FENSmBFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmQwMDk0ZDEtYTYzZC0z NGE2LWIxODAtZDdmZmJiYjZiNmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0DMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMaVeV+dcXV4YN1Kbci4ExuaV/g3YO/urbe8hbTPM4NDk1FZY8u+qh8R lAaIdq1VU4up5pqYiMtORnjevQrth9Jm5F+RsrTqEwbbuijymRrLBqAxzW0DqfVA D6gls1GOZiY+2a4D9dV2OEmQKRjob3ZBfg9wD06dWjPzhxQyaFqe93ovxf59SK6q /nu9Wxqw27ExGCBzbLgb6LAsuSxbcE24tLaOepmzq1C8sqhqoLmBeESkCyUlvflG TAzmrpsBtGHr+i2lrJvTj4w6ciI5hG/BfcO+b2dUHSmZyuNL36DCiz9CCnZcomsU gEx0dxUDuy5UvZts9acxsVMszhnlVcU= -----END CERTIFICATE-----Generated at Wed Oct 28 22:52:23 2026 by rpki-client