$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa File: e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa (raw, json) Hash identifier: UJlkLr56rx9lntwrciDlxo2WdwN+VVcxgNffpv0GIG0= Subject key identifier: 68:D5:25:F4:81:BD:30:D8:F4:56:E0:69:AF:3C:A1:E3:1B:10:FC:17 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49832160838FB6B8EC805520 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.1.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:21:60:83:8f:b6:b8:ec:80:55:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f4086370-b715-4b22-90ec-e1c3bb605ca9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:50:04:a1:4d:b6:a2:be:4f:56:ae:4a:33:8c: 08:b1:95:8b:c0:7b:ea:7a:e5:73:1e:2b:b7:48:89: 6b:6a:e9:a1:9d:9b:93:09:15:53:1d:a9:ce:1e:99: c3:9a:ff:b9:ef:05:77:b9:04:ea:62:69:e8:71:a8: e9:01:3f:8b:3c:cf:5e:e8:1a:5f:79:1a:a5:c4:38: da:2c:24:33:97:d1:22:96:82:a4:97:94:46:2a:24: f6:19:b4:35:6c:59:be:14:d0:10:68:73:06:67:4c: 28:80:29:2a:17:65:83:bd:aa:0d:fc:9c:79:4c:dd: 6f:59:45:ee:46:3d:56:17:e5:e5:29:61:d4:7d:6f: 82:30:56:ae:70:d7:d9:89:39:e2:c1:97:02:7c:1e: f9:13:e1:e6:ab:3b:8e:b8:4f:1e:e1:5e:d4:2e:3f: c8:9a:35:4e:6f:e9:0c:83:41:84:44:3e:13:59:91: 7f:4f:eb:d3:d5:fb:b1:d3:0c:9b:dc:86:a3:dc:1e: f8:29:41:e0:9a:25:b1:d2:1e:af:4a:43:10:dd:1d: a9:57:5f:9b:07:29:35:9a:53:ca:79:d8:ac:24:e1: 85:57:ab:69:8c:7b:cf:f2:08:e5:b4:6c:b1:4f:eb: 82:3c:21:75:a9:01:9e:cc:63:bc:17:f2:bd:de:f2: 1b:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D5:25:F4:81:BD:30:D8:F4:56:E0:69:AF:3C:A1:E3:1B:10:FC:17 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e5e26d7b-0f83-31a0-8bdb-e0d213378a66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.1.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ae:9b:80:73:8d:70:e5:bc:36:e1:f6:85:1c:1c:09:15:2d:e0: c6:d1:84:c6:21:75:d4:78:6b:52:81:83:0a:c2:52:a4:bc:7a: 91:d8:18:b8:52:ad:66:60:c0:7b:2c:aa:88:0e:d8:b2:47:7a: 55:32:64:64:01:93:a1:ec:52:12:b4:26:02:d3:67:18:c2:5e: a3:4d:d8:cb:15:90:14:58:ae:59:bc:83:3e:ba:06:9f:ff:a9: d4:51:8d:ee:d6:fd:55:0e:7f:ac:8c:e3:0a:1e:84:ca:72:69: ee:db:22:e6:2b:fc:8c:39:17:77:7a:4b:5d:3b:de:a0:a4:4c: 15:38:63:ae:9e:7e:91:2e:f0:32:53:b6:4b:af:3b:b6:c7:7d: ef:32:4e:51:50:01:17:bd:5e:1d:93:09:dd:29:5b:c5:bb:b5: 3d:cc:23:b4:dc:09:1a:51:87:46:11:09:ff:24:2e:73:1c:bf: 88:78:6f:17:6f:b1:4b:49:8a:f2:25:68:92:52:4e:9f:d7:7e: 8e:15:ad:ce:3f:2f:bf:19:93:7e:77:b2:3a:90:9b:93:4a:ec: b4:79:b2:15:78:f6:25:f4:b1:bc:20:37:78:b0:04:90:05:de: b8:6d:f1:63:57:e5:ac:bc:34:a2:44:db:47:3d:44:58:b5:9f: 4d:57:f3:11 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyFgg4+2uOyAVSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjQwODYzNzAtYjcxNS00YjIyLTkwZWMtZTFjM2JiNjA1Y2E5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9FAEoU22or5PVq5KM4wIsZWLwHvqeuVzHiu3 SIlraumhnZuTCRVTHanOHpnDmv+57wV3uQTqYmnocajpAT+LPM9e6BpfeRqlxDja LCQzl9EiloKkl5RGKiT2GbQ1bFm+FNAQaHMGZ0wogCkqF2WDvaoN/Jx5TN1vWUXu Rj1WF+XlKWHUfW+CMFaucNfZiTniwZcCfB75E+HmqzuOuE8e4V7ULj/ImjVOb+kM g0GERD4TWZF/T+vT1fux0wyb3Iaj3B74KUHgmiWx0h6vSkMQ3R2pV1+bByk1mlPK edisJOGFV6tpjHvP8gjltGyxT+uCPCF1qQGezGO8F/K93vIbSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjVJfSBvTDY9Fbgaa88oeMbEPwXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTVlMjZkN2ItMGY4My0z MWEwLThiZGItZTBkMjEzMzc4YTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK0BMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK6bgHONcOW8NuH2hRwcCRUt4MbRhMYhddR4a1KBgwrCUqS8epHYGLhS rWZgwHssqogO2LJHelUyZGQBk6HsUhK0JgLTZxjCXqNN2MsVkBRYrlm8gz66Bp// qdRRje7W/VUOf6yM4woehMpyae7bIuYr/Iw5F3d6S1073qCkTBU4Y66efpEu8DJT tkuvO7bHfe8yTlFQARe9Xh2TCd0pW8W7tT3MI7TcCRpRh0YRCf8kLnMcv4h4bxdv sUtJivIlaJJSTp/Xfo4Vrc4/L78Zk353sjqQm5NK7LR5shV49iX0sbwgN3iwBJAF 3rht8WNX5ay8NKJE20c9RFi1n01X8xE= -----END CERTIFICATE-----Generated at Wed Oct 28 03:15:21 2026 by rpki-client