$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8cc01d3-a108-3357-abc7-c3469889b8ba.roa File: b8cc01d3-a108-3357-abc7-c3469889b8ba.roa (raw, json) Hash identifier: KHr09Vk48XZOt34GIZhMwo6q2H8oo1Mc1dM+ZdAf1+g= Subject key identifier: 5B:D9:8B:D1:0C:23:9A:45:31:35:10:81:57:93:43:4F:C7:E3:93:2E Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E22C0076236B9729FAD80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8cc01d3-a108-3357-abc7-c3469889b8ba.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:22:c0:07:62:36:b9:72:9f:ad:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=fa35cfb5-4a8f-49f1-b3b8-e66a45c6cae2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:08:8a:76:29:b2:20:6a:ae:44:a1:3f:cd:37: 08:22:c6:c6:9f:99:74:ed:d5:27:ce:08:2f:63:3e: 12:e3:40:dc:9c:f2:3d:3f:c6:e4:2b:38:83:fa:32: 5c:39:c5:4f:ac:53:95:c8:82:a6:1b:fb:a2:88:fa: ee:98:41:7f:11:64:8e:e3:f0:af:6b:26:53:67:d0: 83:f6:8e:87:e2:b2:75:5a:f2:fd:b8:d1:fe:92:74: d3:a9:c1:b1:22:92:41:c8:50:cb:5d:a3:1b:38:12: 0e:d2:6c:3d:dc:d3:20:f5:85:bb:ad:a2:ed:3f:bd: ae:46:d3:1a:93:9b:8c:91:02:ef:d2:2f:f8:86:85: 32:58:e9:92:66:2d:29:d6:b3:f8:73:1a:87:10:52: 97:80:82:e2:44:b8:54:10:b2:28:04:cc:cf:e9:52: 1e:a6:f9:05:69:aa:52:e9:fc:f4:f9:e3:55:f4:bf: de:ee:c2:31:f9:3c:81:d3:ed:d2:57:e7:a3:64:94: 91:33:f0:01:61:ae:10:20:c7:11:94:21:25:68:ce: 46:61:db:f5:c0:71:4d:25:c6:b8:9e:d4:3f:e0:67: 56:ca:b4:49:25:69:71:bc:d8:ff:e5:f8:e4:1c:d4: 95:a5:1c:5b:3e:2f:41:46:73:ac:b8:24:03:07:81: 12:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D9:8B:D1:0C:23:9A:45:31:35:10:81:57:93:43:4F:C7:E3:93:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8cc01d3-a108-3357-abc7-c3469889b8ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:5e:9d:da:be:4c:0d:c8:22:58:a7:0c:1e:11:62:55:02:26: aa:3a:64:08:6a:2c:c2:f0:aa:55:c3:95:bc:26:6a:d2:7a:ca: 03:99:cd:f9:5c:a1:e0:34:e6:15:02:8c:7a:fd:57:bf:eb:e3: f5:19:6d:fe:68:a5:87:1e:19:8a:38:78:38:b6:2f:15:2d:22: ed:15:8f:35:2d:4a:90:5f:b8:7c:fa:2f:76:b6:8f:e0:1d:66: d5:f8:14:94:b1:38:6f:fb:e8:43:b7:91:36:61:6a:7b:fe:89: b2:b1:47:db:d9:55:fc:f1:30:8c:90:2a:84:7d:d5:18:b8:f9: 64:03:e8:ad:23:65:90:94:bf:49:46:b5:a0:6f:4f:17:fe:e4: 65:bb:67:d3:27:75:b9:3b:66:35:28:98:63:17:7e:28:25:68: c4:38:0d:6b:8f:15:b0:02:e5:73:22:07:60:e6:54:44:4a:9f: 1a:73:b5:85:78:61:70:43:78:96:f6:14:38:16:71:90:0f:47: d8:20:fc:ff:6b:fc:85:dd:11:ea:10:a0:af:50:84:1a:97:a7: bc:37:51:e4:5b:2c:55:f6:b7:5a:8a:bd:2f:39:36:14:f8:8a: 15:d2:d7:33:7b:06:3c:b6:ce:c0:6f:45:5d:d7:aa:a1:a1:96: c6:97:fd:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nniLAB2I2uXKfrYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ZmEzNWNmYjUtNGE4Zi00OWYxLWIzYjgtZTY2YTQ1YzZjYWUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwiKdimyIGquRKE/zTcIIsbGn5l07dUnzggv Yz4S40DcnPI9P8bkKziD+jJcOcVPrFOVyIKmG/uiiPrumEF/EWSO4/CvayZTZ9CD 9o6H4rJ1WvL9uNH+knTTqcGxIpJByFDLXaMbOBIO0mw93NMg9YW7raLtP72uRtMa k5uMkQLv0i/4hoUyWOmSZi0p1rP4cxqHEFKXgILiRLhUELIoBMzP6VIepvkFaapS 6fz0+eNV9L/e7sIx+TyB0+3SV+ejZJSRM/ABYa4QIMcRlCElaM5GYdv1wHFNJca4 ntQ/4GdWyrRJJWlxvNj/5fjkHNSVpRxbPi9BRnOsuCQDB4ESOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFvZi9EMI5pFMTUQgVeTQ0/H45MuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhjYzAxZDMtYTEwOC0z MzU3LWFiYzctYzM0Njk4ODliOGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJendq+TA3IIlinDB4RYlUCJqo6ZAhqLMLwqlXDlbwmatJ6ygOZzflc oeA05hUCjHr9V7/r4/UZbf5opYceGYo4eDi2LxUtIu0VjzUtSpBfuHz6L3a2j+Ad ZtX4FJSxOG/76EO3kTZhanv+ibKxR9vZVfzxMIyQKoR91Ri4+WQD6K0jZZCUv0lG taBvTxf+5GW7Z9Mndbk7ZjUomGMXfiglaMQ4DWuPFbAC5XMiB2DmVERKnxpztYV4 YXBDeJb2FDgWcZAPR9gg/P9r/IXdEeoQoK9QhBqXp7w3UeRbLFX2t1qKvS85NhT4 ihXS1zN7Bjy2zsBvRV3XqqGhlsaX/Zk= -----END CERTIFICATE-----Generated at Thu Sep 10 12:05:22 2026 by rpki-client