$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa File: e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa (raw, json) Hash identifier: U72GiKus9ULC3AuBMkLm1v1+DsRNw4Uzu5isNwuTO/Y= Subject key identifier: 91:87:67:CA:F7:C4:1D:A9:3A:DF:AC:8A:C2:2A:D0:52:0A:02:38:60 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79D8C85BA6850E9122A692A Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 72.173.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9d:8c:85:ba:68:50:e9:12:2a:69:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=4dbbbf66-b758-4953-b0a0-0634a23b7979 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:8a:bb:db:5d:b2:d5:7e:81:d5:c6:10:6d:29: 96:7a:da:85:23:bb:67:90:ae:5f:e6:74:b7:a7:22: 1a:aa:49:ee:1f:b3:06:a3:55:59:67:32:0c:1c:a5: 22:33:8e:d7:60:21:9b:59:49:47:4b:df:fd:9b:dc: be:69:7c:a3:49:2e:4d:80:b1:8a:d3:cc:26:19:46: 3a:b4:ad:1a:79:15:0e:06:ad:6e:92:cd:05:cf:6e: 7e:81:ff:26:87:61:7f:4e:b5:f2:61:e8:8a:e7:a7: 07:f7:8e:17:30:c4:f5:20:20:0a:3e:b0:2a:02:da: eb:a2:6d:db:6c:e2:a2:92:9f:85:d0:f8:8a:40:31: 34:08:6a:6b:27:9f:13:d8:1b:5c:ff:d9:c5:ab:81: d4:0a:78:1e:95:f8:94:2e:9b:4a:1f:4d:e6:d8:80: 3b:c0:6b:d8:a0:29:8b:28:49:d6:20:81:09:8b:0e: 57:42:a0:92:1a:9c:ff:1c:d8:2d:59:14:69:b9:8c: f1:3b:a7:cb:c2:da:7e:a7:f6:31:32:ab:d0:78:17: b5:43:8d:26:22:c2:6e:8d:1d:c5:5c:27:e1:06:dc: 42:02:2a:41:64:c8:4d:3a:e4:0e:4a:65:c3:c0:b9: 89:68:62:5a:d7:bb:c6:46:64:00:06:d6:be:12:cd: cc:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:87:67:CA:F7:C4:1D:A9:3A:DF:AC:8A:C2:2A:D0:52:0A:02:38:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/e9c1c9f1-b46d-3fdd-9a68-b5c8cc28f8d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:83:3f:db:11:91:23:af:26:22:16:81:cb:8c:ea:18:8d:e6: 8e:68:b4:9d:f7:94:a2:e3:8b:f9:38:70:7c:1e:fc:56:61:c6: fc:42:71:2b:7b:07:b0:a0:11:9e:f0:a4:59:4f:66:05:21:26: 5d:4a:a1:5a:10:49:1a:91:ca:28:0f:0c:38:0e:5b:58:2a:e9: 87:9a:36:6e:c1:0e:16:67:6a:11:a5:70:ca:ab:7e:61:8d:8a: 8c:9e:d1:54:5a:81:df:2a:f2:a2:b2:32:fa:9d:58:5c:fe:f7: 1b:6a:ae:4d:99:fc:33:20:5a:ad:8d:64:a1:34:6c:a1:10:6f: d9:d2:c3:30:e7:a2:9d:7d:5f:5a:b9:52:cb:b7:73:44:9e:df: c5:f8:5d:78:8b:01:84:07:3b:ff:ab:63:d6:37:d7:b8:e6:8a: 02:1c:4d:c4:0f:3e:97:dd:47:10:22:26:20:df:b4:5a:a8:3c: 13:53:7a:52:5e:f0:39:85:ca:34:78:e5:cb:79:2f:e8:65:e0: 9e:84:2a:a2:31:22:79:0c:91:49:d6:6c:65:08:39:51:14:f3: fa:83:94:9c:46:ea:23:0c:cd:82:f2:59:51:cc:a3:7d:66:c5: 53:58:15:13:b2:05:29:de:5a:4c:cd:0e:7b:de:e2:f9:7b:8e: 21:b8:db:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnYyFumhQ6RIqaSowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk NGRiYmJmNjYtYjc1OC00OTUzLWIwYTAtMDYzNGEyM2I3OTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYq7212y1X6B1cYQbSmWetqFI7tnkK5f5nS3 pyIaqknuH7MGo1VZZzIMHKUiM47XYCGbWUlHS9/9m9y+aXyjSS5NgLGK08wmGUY6 tK0aeRUOBq1uks0Fz25+gf8mh2F/TrXyYeiK56cH944XMMT1ICAKPrAqAtrrom3b bOKikp+F0PiKQDE0CGprJ58T2Btc/9nFq4HUCngelfiULptKH03m2IA7wGvYoCmL KEnWIIEJiw5XQqCSGpz/HNgtWRRpuYzxO6fLwtp+p/YxMqvQeBe1Q40mIsJujR3F XCfhBtxCAipBZMhNOuQOSmXDwLmJaGJa17vGRmQABta+Es3MtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJGHZ8r3xB2pOt+sisIq0FIKAjhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZTljMWM5ZjEtYjQ2ZC0z ZmRkLTlhNjgtYjVjOGNjMjhmOGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD2DP9sRkSOvJiIWgcuM6hiN5o5otJ33lKLji/k4cHwe/FZhxvxCcSt7 B7CgEZ7wpFlPZgUhJl1KoVoQSRqRyigPDDgOW1gq6YeaNm7BDhZnahGlcMqrfmGN ioye0VRagd8q8qKyMvqdWFz+9xtqrk2Z/DMgWq2NZKE0bKEQb9nSwzDnop19X1q5 Usu3c0Se38X4XXiLAYQHO/+rY9Y317jmigIcTcQPPpfdRxAiJiDftFqoPBNTelJe 8DmFyjR45ct5L+hl4J6EKqIxInkMkUnWbGUIOVEU8/qDlJxG6iMMzYLyWVHMo31m xVNYFROyBSneWkzNDnve4vl7jiG423g= -----END CERTIFICATE-----Generated at Thu Sep 10 10:53:29 2026 by rpki-client