$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa File: ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa (raw, json) Hash identifier: TCWR3GY9Qa/IYEjhbYr4drVcsvW18GRmIlWlVqPtgfc= Subject key identifier: 52:B9:5C:25:D9:5E:7F:AD:07:8C:8B:70:DB:33:39:46:57:AD:84:DD Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D927431D13B18BE5D0880 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.228.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:92:74:31:d1:3b:18:be:5d:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=3f54841f-9c1f-438e-9e49-0890139c1a82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:e0:dd:f3:62:eb:38:5a:53:a3:d1:ee:38:2c: b9:b0:94:19:a1:0a:f3:3a:cf:38:3f:90:4b:7f:58: d6:5e:b9:cf:34:28:8a:c5:41:6e:1f:05:de:4f:92: ab:ab:87:6b:85:85:10:1a:8b:35:ff:2a:c9:d8:a9: 6d:50:d6:ca:29:14:f8:0f:19:0a:20:18:66:13:b5: 10:c4:f8:a7:65:73:49:41:cb:62:a0:c3:49:d4:10: ec:19:88:38:75:21:40:0c:b0:22:e7:8c:9e:17:28: cc:a5:f2:1a:8f:25:b5:6f:87:04:0d:32:91:fc:e0: 57:ea:c9:9c:c2:eb:ca:ef:58:ac:b8:93:44:e7:75: 20:57:57:30:4c:c4:2b:bb:70:b6:97:fa:2a:25:60: b9:49:3e:cb:3f:dd:23:62:3b:e1:79:10:3b:b0:4b: 21:7e:63:6f:53:64:19:4a:f1:ea:0a:51:18:a6:5f: f2:c8:04:26:54:bc:79:99:49:3a:c6:b8:a2:ca:53: 96:d4:06:85:9a:8a:e0:e2:06:06:eb:3c:17:ff:81: cb:cb:4b:d9:c4:5d:16:2c:63:3d:68:51:ab:de:9f: 7b:9d:29:96:f4:33:6e:59:53:14:7a:7f:c6:d3:c0: 8b:bd:4a:7b:56:ab:07:b3:8b:0b:73:6c:12:e2:19: d6:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:B9:5C:25:D9:5E:7F:AD:07:8C:8B:70:DB:33:39:46:57:AD:84:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ae4ba867-b077-3f54-a8af-9fb12fe7e977.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.228.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:f7:0a:dd:f6:30:b0:c4:e9:77:c1:b8:c2:bd:6b:90:5a:e5: 7b:fa:2b:f7:36:ef:94:4d:e5:2e:7c:20:a5:48:3d:58:15:c1: 60:23:e6:01:e0:e2:89:bd:b6:08:05:05:a6:ce:9c:26:62:77: d8:bb:62:2e:29:82:27:68:5d:e5:71:f8:ad:d9:e7:1b:f0:b5: 65:75:02:a1:34:f7:7d:2b:b3:db:43:34:70:6d:30:67:80:5f: 7f:94:11:29:70:c6:17:39:4e:95:f4:a7:41:56:ba:05:2b:ad: 38:26:cf:94:dd:21:f9:b7:35:8b:7b:b8:16:a3:fa:68:0b:47: 6d:5f:ff:6e:7b:98:c7:a3:1e:b3:3a:1d:90:a5:a1:01:83:91: c5:39:ca:75:af:77:60:4a:c1:ca:0d:43:0b:d4:86:e6:b5:b4: 41:5c:ee:c5:5b:a7:47:9a:dd:61:97:17:7b:0b:08:d6:29:62: ba:25:77:58:a7:6a:b0:eb:05:d1:2a:6e:39:ec:7e:b7:79:e4: 44:ed:c6:62:a6:ea:47:54:eb:72:10:8c:04:1d:6d:a4:70:b6: 62:51:7c:c2:d2:47:e2:47:ef:d8:59:92:0d:28:90:81:e0:6d: e1:22:0d:81:a4:92:e0:4f:16:23:d9:48:69:70:52:ce:d6:57: 32:76:cc:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnZJ0MdE7GL5dCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk M2Y1NDg0MWYtOWMxZi00MzhlLTllNDktMDg5MDEzOWMxYTgyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj+Dd82LrOFpTo9HuOCy5sJQZoQrzOs84P5BL f1jWXrnPNCiKxUFuHwXeT5Krq4drhYUQGos1/yrJ2KltUNbKKRT4DxkKIBhmE7UQ xPinZXNJQctioMNJ1BDsGYg4dSFADLAi54yeFyjMpfIajyW1b4cEDTKR/OBX6smc wuvK71isuJNE53UgV1cwTMQru3C2l/oqJWC5ST7LP90jYjvheRA7sEshfmNvU2QZ SvHqClEYpl/yyAQmVLx5mUk6xriiylOW1AaFmorg4gYG6zwX/4HLy0vZxF0WLGM9 aFGr3p97nSmW9DNuWVMUen/G08CLvUp7VqsHs4sLc2wS4hnWMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFK5XCXZXn+tB4yLcNszOUZXrYTdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWU0YmE4NjctYjA3Ny0z ZjU0LWE4YWYtOWZiMTJmZTdlOTc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK3kMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD73Ct32MLDE6XfBuMK9a5Ba5Xv6K/c275RN5S58IKVIPVgVwWAj5gHg 4om9tggFBabOnCZid9i7Yi4pgidoXeVx+K3Z5xvwtWV1AqE0930rs9tDNHBtMGeA X3+UESlwxhc5TpX0p0FWugUrrTgmz5TdIfm3NYt7uBaj+mgLR21f/257mMejHrM6 HZCloQGDkcU5ynWvd2BKwcoNQwvUhua1tEFc7sVbp0ea3WGXF3sLCNYpYrold1in arDrBdEqbjnsfrd55ETtxmKm6kdU63IQjAQdbaRwtmJRfMLSR+JH79hZkg0okIHg beEiDYGkkuBPFiPZSGlwUs7WVzJ2zF8= -----END CERTIFICATE-----Generated at Thu Sep 10 15:38:18 2026 by rpki-client