$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa File: b962e112-6342-31ad-aa41-e9b4c605e6c3.roa (raw, json) Hash identifier: 9N++6Kla5w012YabMaKjkw0zuULsZXJoWYHitfv6RHk= Subject key identifier: A4:7C:FD:10:F1:95:FE:1E:8F:4C:00:B2:03:76:3F:C9:5F:09:3B:6A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B0B43BC62CD3EB54DA400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:0b:43:bc:62:cd:3e:b5:4d:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cd1155c4-529f-412f-a982-84ab2e6aa1f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:94:b4:15:d9:85:72:52:96:22:fb:81:d9:f6: 42:b0:65:f0:e1:b0:0f:7d:37:b9:5d:36:c1:81:5f: ef:05:b3:bb:d3:87:45:8b:de:8d:45:47:1b:bf:6f: 26:5a:f9:40:31:d3:aa:81:b6:c5:5c:b3:bb:20:13: b9:13:8f:43:98:7d:29:ae:ac:84:b6:f7:a1:25:03: 37:98:61:6d:ee:4c:9e:b5:29:9d:fa:bc:42:03:ee: 09:28:93:be:ab:66:ee:37:4e:6d:37:5f:3b:0f:29: 27:19:d1:80:14:eb:bd:ae:93:5b:c0:2e:43:c1:05: 4c:75:18:97:5d:c1:ef:f2:80:32:44:d5:78:19:de: 45:93:44:23:46:dc:9d:96:af:10:c5:d9:7d:1f:c6: 14:ec:5e:2a:63:fa:04:10:b9:4f:f0:85:2f:c7:5c: eb:87:cb:86:af:6b:6c:3a:b7:63:7b:db:9b:07:44: 29:82:e7:b8:0f:1d:77:3e:6a:87:be:e0:9d:cc:5f: 18:70:e6:e6:35:a6:e1:8a:52:e3:54:5a:e1:9e:76: 56:d3:23:d0:ed:bf:26:8b:1c:3a:e5:ba:14:94:0a: 6d:99:64:ec:62:3a:14:91:14:08:df:82:48:22:fa: 12:77:e6:74:9f:29:b2:1b:cd:ea:da:f9:43:db:70: 60:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7C:FD:10:F1:95:FE:1E:8F:4C:00:B2:03:76:3F:C9:5F:09:3B:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b962e112-6342-31ad-aa41-e9b4c605e6c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:31:c4:73:f2:5d:5d:b6:b4:e2:90:6a:49:01:f3:3b:e5:20: 79:57:e3:a8:98:65:74:98:79:6c:88:a9:14:b0:7f:3c:db:98: 19:05:4e:aa:2a:41:69:9e:5f:26:f1:e2:fb:2a:d0:59:fe:ec: a9:67:5a:e8:67:1c:fd:fd:03:20:85:00:b7:7c:69:ed:a8:e4: 4c:08:04:e5:16:eb:1e:3f:9a:49:bd:ad:f2:30:d4:64:e5:70: b6:b8:88:31:5d:20:4a:fc:b7:7f:61:20:12:e4:4f:3a:cb:d9: 9d:41:09:7e:c9:75:8a:46:26:6b:49:a6:49:f7:b4:01:d1:27: f4:d3:68:cb:ba:2e:ae:d5:e3:0a:8a:fc:b5:2e:04:eb:eb:fc: 2e:c0:24:1a:c6:75:87:47:75:d5:27:43:32:70:ee:25:7b:c4: 7a:90:d4:f3:f1:0c:9b:45:b7:bb:18:f9:2e:24:0c:8c:a2:2a: cd:9e:4d:d2:e1:d4:58:28:6c:66:bc:2b:b8:c1:b9:b4:26:59: 82:2b:5f:e1:1d:52:d5:4e:c8:d2:cc:67:7d:65:ca:44:3b:30: 15:3f:1a:a0:a1:4e:c3:5c:79:ba:f1:03:c7:d9:64:90:ad:45: c4:cd:dd:6a:1c:77:d0:a4:12:0f:f8:cb:eb:73:c9:eb:16:02: 18:86:e2:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JewtDvGLNPrVNpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2QxMTU1YzQtNTI5Zi00MTJmLWE5ODItODRhYjJlNmFhMWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZS0FdmFclKWIvuB2fZCsGXw4bAPfTe5XTbB gV/vBbO704dFi96NRUcbv28mWvlAMdOqgbbFXLO7IBO5E49DmH0prqyEtvehJQM3 mGFt7kyetSmd+rxCA+4JKJO+q2buN05tN187DyknGdGAFOu9rpNbwC5DwQVMdRiX XcHv8oAyRNV4Gd5Fk0QjRtydlq8Qxdl9H8YU7F4qY/oEELlP8IUvx1zrh8uGr2ts Ordje9ubB0Qpgue4Dx13PmqHvuCdzF8YcObmNabhilLjVFrhnnZW0yPQ7b8mixw6 5boUlAptmWTsYjoUkRQI34JIIvoSd+Z0nymyG83q2vlD23BgoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR8/RDxlf4ej0wAsgN2P8lfCTtqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjk2MmUxMTItNjM0Mi0z MWFkLWFhNDEtZTliNGM2MDVlNmMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABYxxHPyXV22tOKQakkB8zvlIHlX46iYZXSYeWyIqRSwfzzbmBkFTqoq QWmeXybx4vsq0Fn+7KlnWuhnHP39AyCFALd8ae2o5EwIBOUW6x4/mkm9rfIw1GTl cLa4iDFdIEr8t39hIBLkTzrL2Z1BCX7JdYpGJmtJpkn3tAHRJ/TTaMu6Lq7V4wqK /LUuBOvr/C7AJBrGdYdHddUnQzJw7iV7xHqQ1PPxDJtFt7sY+S4kDIyiKs2eTdLh 1FgobGa8K7jBubQmWYIrX+EdUtVOyNLMZ31lykQ7MBU/GqChTsNcebrxA8fZZJCt RcTN3Wocd9CkEg/4y+tzyesWAhiG4og= -----END CERTIFICATE-----Generated at Wed Oct 28 16:36:35 2026 by rpki-client