$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa File: d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa (raw, json) Hash identifier: CDEjeEINxRt2H9OtpANkHvVxRMieCLy9yDS/salWI2g= Subject key identifier: F7:FC:ED:E4:E2:19:ED:05:C6:BE:A8:3A:A9:26:D6:E1:DB:EE:EA:AA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D941AFE9D338B928E9F98 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:94:1a:fe:9d:33:8b:92:8e:9f:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=aaa4e73d-8a9e-4a0f-a679-329c74bff8bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:46:71:a4:5e:c5:b0:33:ab:61:24:d3:6b:8a: b9:c3:f2:c2:61:a3:cd:22:00:16:66:00:30:a7:39: b2:0d:e4:d2:23:6b:f3:35:cd:4b:b7:2a:90:ab:06: 08:c5:8e:e5:33:b1:67:59:3b:ec:c7:5e:7a:84:a0: a0:72:12:19:c3:4c:7a:e9:89:01:f4:9c:08:f2:00: 90:08:e8:97:b2:48:e7:75:79:13:23:7c:55:45:13: ba:05:94:47:f0:91:1d:76:2a:e6:f4:26:8a:8c:71: bd:f3:1b:f2:57:f8:d3:80:39:2e:a6:98:c5:36:6f: e1:b1:47:3c:e0:98:d9:d3:99:63:9f:1b:ad:49:cc: 76:61:ee:13:50:9e:ec:40:56:56:06:71:fa:da:58: 55:ee:c8:21:85:9d:0a:be:f2:ee:cc:ea:4f:5e:35: ec:33:9c:f7:bf:ab:a8:2a:06:b6:3a:07:95:34:d2: 42:e1:b7:3f:bf:f8:d4:32:77:a7:cd:77:7b:c8:a2: f3:c1:e2:5b:8b:f4:86:7f:60:fe:e1:fe:30:a9:32: e8:18:bf:02:00:37:a1:9e:22:05:84:6a:98:f8:b9: 4c:43:fe:a0:1b:c3:ad:62:6e:5b:2f:83:a2:44:ed: 87:77:cb:da:76:e5:e9:ad:70:ff:84:ea:59:76:cd: 20:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:ED:E4:E2:19:ED:05:C6:BE:A8:3A:A9:26:D6:E1:DB:EE:EA:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d13d43a9-1cbb-32fc-97e0-2454dfe769fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:71:34:d7:b0:d7:6b:fd:ac:e0:58:fa:df:47:ac:e3:64:b8: a4:58:5a:ac:3a:87:5f:e4:99:dc:79:f2:be:14:82:5c:58:ca: 80:4e:4f:58:0a:fa:43:b5:5b:bd:1e:ba:23:1e:d1:04:75:11: f5:c0:12:ea:a6:f0:16:38:71:dc:50:ea:e7:f6:d3:33:63:b1: da:2b:c8:d4:60:88:35:f6:3d:3b:17:76:c0:41:21:a2:0a:28: 9e:ba:87:e5:c9:b8:38:ee:1d:cf:5c:2b:69:04:36:43:8a:85: e0:c9:0c:af:6e:50:46:28:24:3b:2d:5f:04:5b:a0:52:52:9b: be:a5:ba:a7:98:8f:74:77:60:f0:16:03:fc:60:36:86:d0:6c: 86:81:a2:bf:d6:5f:b7:e8:09:ab:2c:b6:b8:61:9c:72:7c:95: 0e:cf:43:8c:23:c4:6d:31:35:55:06:0b:4d:fe:90:49:75:37: e7:85:2e:7f:20:0b:b2:71:33:e5:2b:7d:47:d3:3f:c5:46:1a: 9d:4c:61:59:2e:c4:51:a6:7d:bc:6a:22:fc:8d:fa:69:13:ad: 10:bf:4f:f1:dc:b2:4c:d3:c4:72:7f:2b:a3:be:e8:fb:7c:ec: ba:a4:cf:93:d3:18:43:b1:60:8c:f0:a2:1b:8e:28:fd:06:4e: 05:83:70:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnZQa/p0zi5KOn5gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YWFhNGU3M2QtOGE5ZS00YTBmLWE2NzktMzI5Yzc0YmZmOGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvUZxpF7FsDOrYSTTa4q5w/LCYaPNIgAWZgAw pzmyDeTSI2vzNc1LtyqQqwYIxY7lM7FnWTvsx156hKCgchIZw0x66YkB9JwI8gCQ COiXskjndXkTI3xVRRO6BZRH8JEddirm9CaKjHG98xvyV/jTgDkuppjFNm/hsUc8 4JjZ05ljnxutScx2Ye4TUJ7sQFZWBnH62lhV7sghhZ0KvvLuzOpPXjXsM5z3v6uo Kga2OgeVNNJC4bc/v/jUMnenzXd7yKLzweJbi/SGf2D+4f4wqTLoGL8CADehniIF hGqY+LlMQ/6gG8OtYm5bL4OiRO2Hd8vaduXprXD/hOpZds0gyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPf87eTiGe0Fxr6oOqkm1uHb7uqqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEzZDQzYTktMWNiYi0z MmZjLTk3ZTAtMjQ1NGRmZTc2OWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK37MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJZxNNew12v9rOBY+t9HrONkuKRYWqw6h1/kmdx58r4UglxYyoBOT1gK +kO1W70euiMe0QR1EfXAEuqm8BY4cdxQ6uf20zNjsdoryNRgiDX2PTsXdsBBIaIK KJ66h+XJuDjuHc9cK2kENkOKheDJDK9uUEYoJDstXwRboFJSm76luqeYj3R3YPAW A/xgNobQbIaBor/WX7foCasstrhhnHJ8lQ7PQ4wjxG0xNVUGC03+kEl1N+eFLn8g C7JxM+UrfUfTP8VGGp1MYVkuxFGmfbxqIvyN+mkTrRC/T/HcskzTxHJ/K6O+6Pt8 7Lqkz5PTGEOxYIzwohuOKP0GTgWDcGE= -----END CERTIFICATE-----Generated at Thu Sep 10 10:19:55 2026 by rpki-client