$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931e25c1-a6fd-3dae-b6c6-af77c2204756.roa File: 931e25c1-a6fd-3dae-b6c6-af77c2204756.roa (raw, json) Hash identifier: F9MuIgJ+uj5dkhC0fnChIwtb9tcCdgEgavz+FdcWWIo= Subject key identifier: C1:AC:92:77:40:AE:8F:68:3A:7B:1C:DE:37:A8:A7:17:53:C0:FA:69 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D8DD9A30EA2E29AAF71A0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931e25c1-a6fd-3dae-b6c6-af77c2204756.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:8d:d9:a3:0e:a2:e2:9a:af:71:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=1af1129f-e275-4a3c-ac06-1ec251d322e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f0:57:a9:59:55:8c:0b:93:86:5f:41:1e:89: 60:36:97:70:58:97:cf:59:e6:b8:ee:85:04:01:4d: de:d2:52:70:ad:3d:9f:9b:f0:b1:4b:02:57:f3:3b: e6:bc:16:c6:dd:3d:1f:af:cd:27:df:78:e0:cb:61: 4d:78:f4:40:19:94:6f:57:f2:34:d2:2f:4c:74:65: 48:0a:72:94:2f:1f:fb:da:54:c9:4c:39:cb:1c:e3: 40:4b:51:ea:2b:ee:7d:09:79:fb:0b:42:9d:d2:ea: 83:9e:46:c3:d4:72:78:6d:dc:63:03:4f:05:24:e4: fb:fa:86:75:c6:2e:c2:a1:bc:07:ff:3f:d2:46:ff: eb:c5:74:a0:05:9a:58:65:8e:97:0d:e0:78:3f:47: b5:b5:81:d1:c2:3e:69:b4:2e:16:75:f0:26:b3:ea: 57:55:60:bd:cd:dc:e8:3e:3e:18:36:e5:37:05:c0: 5d:57:43:1b:0b:36:b5:6f:a7:cf:ac:dd:b4:3e:56: c1:d8:48:ad:a9:b2:eb:60:56:7f:8f:a6:d4:8f:d8: c4:2c:15:b5:b4:12:39:d6:1f:45:a3:1a:49:00:e6: 89:47:0e:6b:0a:25:d3:06:fa:51:0f:9f:63:12:7e: 30:ab:03:0c:79:ea:30:b7:1a:91:33:01:00:aa:d3: 8f:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:AC:92:77:40:AE:8F:68:3A:7B:1C:DE:37:A8:A7:17:53:C0:FA:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/931e25c1-a6fd-3dae-b6c6-af77c2204756.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:5a:1f:dd:27:55:2c:bf:d3:64:23:ac:aa:8e:31:6e:29:54: 31:64:5d:78:08:ef:c9:67:b9:ef:8c:59:a5:93:a5:15:24:fe: e8:94:d6:1a:13:03:4b:52:24:c5:55:d6:e1:ee:9b:f1:33:07: 58:2a:d4:7d:45:f1:5c:32:4c:5a:b7:fd:c5:ef:3d:26:f8:01: 92:91:7e:34:67:9b:30:80:fe:8e:0f:e0:79:0d:97:70:aa:ae: 0d:0d:6a:26:f3:04:6b:2e:27:0b:95:25:2f:97:1a:2f:3c:6e: 35:8c:57:d9:57:39:b9:ab:08:6a:18:76:5d:eb:42:3e:41:4b: 9b:b0:36:18:5f:d0:84:50:db:e0:d5:81:e8:d6:79:70:93:3e: 0e:b7:e9:d6:08:84:fd:f0:0d:dd:f1:87:5e:ca:2a:96:90:da: d5:39:a3:f6:7a:3c:e1:bd:4a:71:09:f2:f1:5c:74:aa:41:39: e1:15:2f:37:c2:d1:bb:e4:b3:db:4c:00:ce:5f:5a:11:b4:c0: 7a:fa:f5:dc:5e:cd:50:26:47:95:e9:d3:6d:8d:91:43:00:0e: 63:50:d2:bd:21:0d:a0:e0:91:3e:7f:34:72:17:d2:55:ca:ea: d8:e2:4e:dc:18:82:2d:e7:8d:cc:3a:e2:ae:43:60:7c:a3:70: 0b:e0:b2:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnY3Zow6i4pqvcaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk MWFmMTEyOWYtZTI3NS00YTNjLWFjMDYtMWVjMjUxZDMyMmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfBXqVlVjAuThl9BHolgNpdwWJfPWea47oUE AU3e0lJwrT2fm/CxSwJX8zvmvBbG3T0fr80n33jgy2FNePRAGZRvV/I00i9MdGVI CnKULx/72lTJTDnLHONAS1HqK+59CXn7C0Kd0uqDnkbD1HJ4bdxjA08FJOT7+oZ1 xi7CobwH/z/SRv/rxXSgBZpYZY6XDeB4P0e1tYHRwj5ptC4WdfAms+pXVWC9zdzo Pj4YNuU3BcBdV0MbCza1b6fPrN20PlbB2EitqbLrYFZ/j6bUj9jELBW1tBI51h9F oxpJAOaJRw5rCiXTBvpRD59jEn4wqwMMeeowtxqRMwEAqtOP4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGskndAro9oOnsc3jeopxdTwPppMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTMxZTI1YzEtYTZmZC0z ZGFlLWI2YzYtYWY3N2MyMjA0NzU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2KMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKZaH90nVSy/02QjrKqOMW4pVDFkXXgI78lnue+MWaWTpRUk/uiU1hoT A0tSJMVV1uHum/EzB1gq1H1F8VwyTFq3/cXvPSb4AZKRfjRnmzCA/o4P4HkNl3Cq rg0NaibzBGsuJwuVJS+XGi88bjWMV9lXObmrCGoYdl3rQj5BS5uwNhhf0IRQ2+DV gejWeXCTPg636dYIhP3wDd3xh17KKpaQ2tU5o/Z6POG9SnEJ8vFcdKpBOeEVLzfC 0bvks9tMAM5fWhG0wHr69dxezVAmR5Xp022NkUMADmNQ0r0hDaDgkT5/NHIX0lXK 6tjiTtwYgi3njcw64q5DYHyjcAvgslg= -----END CERTIFICATE-----Generated at Thu Sep 10 12:04:12 2026 by rpki-client