$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa File: 494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa (raw, json) Hash identifier: mvdYn4a5wp/S0Oc1mHlPXLhbfUal5upDVSMpIP3v4AU= Subject key identifier: 2C:63:3D:36:88:41:9D:82:25:4E:F7:3E:9D:9F:90:40:8A:F9:A1:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498322547ECFFF21B551D500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.12.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:22:54:7e:cf:ff:21:b5:51:d5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5dfe88b0-e354-4644-8542-f8544ccece64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:5c:2b:91:cf:80:29:ac:2d:e7:f8:5f:a0:bf: d7:61:bb:f4:9c:a3:70:ee:87:bd:3f:cf:27:ae:4f: e2:07:a8:1e:73:e5:e8:69:66:50:81:a4:a1:7b:10: 03:ab:bc:5a:7d:5b:52:f7:09:e3:43:8e:d4:4e:d7: 3f:53:4f:f4:ec:43:1c:74:f3:a9:a3:c4:f5:72:e5: 60:09:f9:41:e3:d6:ec:dc:17:c9:96:e4:75:9c:e1: fa:68:fa:12:c2:1d:cb:52:ed:23:74:c6:0d:93:28: 21:80:12:72:5d:1a:8d:93:25:6b:3d:d8:20:4e:9c: ad:ef:a2:39:96:d7:8e:1b:93:f1:13:6b:1f:61:5c: 89:cf:19:3b:7d:57:57:6e:24:5d:44:2a:3d:04:b7: ac:61:40:fe:f6:f0:3f:90:23:3a:be:57:f3:b1:c1: b9:7b:77:3b:bc:1a:3b:0a:c1:a9:70:48:75:bc:fa: 67:c5:c9:a0:5c:c0:79:30:f7:26:cf:73:40:19:f5: fe:c1:15:4c:42:74:d1:30:53:5d:30:54:59:3b:28: f8:4a:b5:c3:66:49:db:09:55:18:27:32:40:e6:57: e0:04:b9:60:89:0c:97:23:94:60:26:83:96:e9:b6: d6:78:90:7f:08:95:6d:5f:50:d9:80:a0:f6:ce:ff: 6e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:63:3D:36:88:41:9D:82:25:4E:F7:3E:9D:9F:90:40:8A:F9:A1:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/494d5fa3-309a-3f85-8eb4-a1b59ffc6c61.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.12.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:b4:e6:54:f2:37:7a:61:52:72:18:9c:24:c6:c6:75:3e:08: 18:a5:8e:5e:34:08:60:75:66:88:33:d9:c6:e0:76:a5:6f:6e: 9b:ed:6a:f4:e8:6b:d8:1d:b2:62:a6:7e:b7:84:c3:ed:c1:f3: f9:2b:3e:e9:1e:6b:49:99:7f:c2:0c:5c:d0:ce:91:c4:ad:d3: e7:69:9f:da:95:3c:fd:e1:16:29:67:e6:f7:80:3b:67:d2:15: d7:ae:35:5b:8c:87:08:1f:8d:b1:f1:79:1c:ed:be:99:2f:9d: 87:16:e9:91:9b:6e:84:09:75:6a:d6:17:eb:07:8c:70:c0:c1: 93:ba:34:bb:02:c6:87:f1:d6:61:9b:28:2d:21:e4:9e:ab:18: a6:39:81:38:8b:e1:96:ee:63:28:e5:a5:0b:01:36:1f:a7:01: 65:3f:1f:e0:11:68:60:99:fe:43:5d:11:7d:52:e9:b1:4f:4b: fd:49:77:88:0c:ad:56:44:fc:e7:e1:37:59:d5:dc:94:86:b4: ad:b6:24:93:80:75:ab:3d:10:a0:7f:eb:ac:c0:ff:7e:18:a6: 89:19:cd:10:ee:93:5f:57:aa:dd:2c:75:e9:50:74:f4:39:83: f6:d9:0a:76:c4:a3:db:1c:2d:df:8e:c3:a0:e5:b2:9a:77:d1: ed:99:1a:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyJUfs//IbVR1QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWRmZTg4YjAtZTM1NC00NjQ0LTg1NDItZjg1NDRjY2VjZTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVwrkc+AKawt5/hfoL/XYbv0nKNw7oe9P88n rk/iB6gec+XoaWZQgaShexADq7xafVtS9wnjQ47UTtc/U0/07EMcdPOpo8T1cuVg CflB49bs3BfJluR1nOH6aPoSwh3LUu0jdMYNkyghgBJyXRqNkyVrPdggTpyt76I5 lteOG5PxE2sfYVyJzxk7fVdXbiRdRCo9BLesYUD+9vA/kCM6vlfzscG5e3c7vBo7 CsGpcEh1vPpnxcmgXMB5MPcmz3NAGfX+wRVMQnTRMFNdMFRZOyj4SrXDZknbCVUY JzJA5lfgBLlgiQyXI5RgJoOW6bbWeJB/CJVtX1DZgKD2zv9uFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCxjPTaIQZ2CJU73Pp2fkECK+aFXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDk0ZDVmYTMtMzA5YS0z Zjg1LThlYjQtYTFiNTlmZmM2YzYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0MMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHm05lTyN3phUnIYnCTGxnU+CBiljl40CGB1Zogz2cbgdqVvbpvtavTo a9gdsmKmfreEw+3B8/krPukea0mZf8IMXNDOkcSt0+dpn9qVPP3hFiln5veAO2fS FdeuNVuMhwgfjbHxeRztvpkvnYcW6ZGbboQJdWrWF+sHjHDAwZO6NLsCxofx1mGb KC0h5J6rGKY5gTiL4ZbuYyjlpQsBNh+nAWU/H+ARaGCZ/kNdEX1S6bFPS/1Jd4gM rVZE/OfhN1nV3JSGtK22JJOAdas9EKB/66zA/34YpokZzRDuk19Xqt0sdelQdPQ5 g/bZCnbEo9scLd+Ow6Dlspp30e2ZGsI= -----END CERTIFICATE-----Generated at Wed Oct 28 00:04:01 2026 by rpki-client