$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa File: fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa (raw, json) Hash identifier: UMQoPGHYn30THARqw0skdwoXThRaySRn/O19Ld37Yyg= Subject key identifier: 9F:19:3D:48:9F:D4:7F:FB:CF:B0:7F:A2:AD:E9:6E:E0:26:13:27:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F49832CC84B29CE08F8FD2F40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 72.173.160.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 29 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:2c:c8:4b:29:ce:08:f8:fd:2f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2b15686b-4072-4a67-964a-34437f96fadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:25:51:07:bc:bb:4f:10:46:56:71:54:4f:34: 50:a6:ad:f1:eb:65:7b:f1:5d:b3:0b:81:78:89:ee: d1:f0:40:7d:6c:5a:97:3d:d2:7b:2e:5d:0a:68:68: d5:da:91:68:e3:57:74:db:44:b0:6a:88:fd:0d:08: c7:7e:78:ad:f2:1d:8f:49:f4:18:46:4d:e8:c6:56: ee:da:19:97:58:be:8f:41:da:53:9f:68:8f:ae:66: 2a:c5:df:c7:5f:64:1c:a5:b4:62:70:24:50:20:a4: f4:9d:3a:f6:da:b7:65:37:e3:0c:37:10:3c:e8:7c: a7:4e:7f:8f:a4:9a:7d:88:3d:a4:8c:35:bd:9c:bb: 51:59:9b:af:6e:9c:17:f5:91:87:31:5d:56:a9:e1: 2f:d2:40:b9:f8:16:bb:07:7b:86:75:be:10:3f:4b: 18:cf:43:8d:8a:b6:16:a4:38:cf:78:50:b1:44:76: 9e:7d:e8:9a:60:29:f7:51:33:10:32:17:e6:5e:a9: 31:bb:49:9d:df:d6:ab:97:45:ff:e3:97:dd:7b:7a: 08:ba:92:3e:4c:c8:35:f6:c0:24:9e:6e:b4:a5:e8: fa:4c:77:46:67:63:f2:b7:ac:01:b1:29:89:a2:41: 52:35:f2:ed:ea:ce:4a:d8:b0:6b:ea:5b:10:78:e4: b7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:19:3D:48:9F:D4:7F:FB:CF:B0:7F:A2:AD:E9:6E:E0:26:13:27:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/fa3fec4a-3b5b-3c46-a316-b2e4d06006c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 72.173.160.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:8d:b1:a4:d8:22:7d:f4:0c:8a:68:7d:19:b6:09:7d:1e:17: 9f:52:cf:df:b0:c3:0f:a1:0b:b9:74:88:2a:3d:d6:31:8d:a0: 77:0b:39:d0:ad:8b:60:13:cc:ec:9e:81:c6:b4:82:39:0d:de: 4d:82:8e:d0:61:97:f6:45:36:78:b2:fa:2c:eb:5a:61:2d:e3: 85:6e:ad:49:ea:40:b0:0e:23:ab:b5:3e:41:53:92:02:6f:15: aa:1e:3a:0a:37:e6:94:47:7d:00:ad:aa:49:db:b4:d0:e1:42: fb:a1:b8:8d:ee:74:b6:e7:f5:91:72:82:dc:15:9e:34:c7:72: 23:1f:95:71:bc:4f:aa:21:1e:e0:17:e9:e0:d4:26:5b:42:2a: 4a:d5:c7:ce:30:20:c6:c4:d4:14:dc:04:b2:28:b6:7c:fe:d9: 38:30:31:07:e5:1f:4d:5b:12:d2:6a:7b:34:93:cb:ee:34:af: 04:61:29:56:e1:31:78:a1:ac:97:d5:40:59:89:10:3c:0e:d6: d8:22:b8:9c:42:db:a6:d7:d3:c0:05:45:f5:1d:72:ef:b5:13: 06:8e:7f:61:d1:e9:40:11:8e:64:d7:34:0a:43:6f:19:db:49: 89:79:3e:4a:d2:7d:aa:be:cd:10:63:4c:e9:4f:1f:45:80:b4: 5c:71:23:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JgyzISynOCPj9L0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmIxNTY4NmItNDA3Mi00YTY3LTk2NGEtMzQ0MzdmOTZmYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0yVRB7y7TxBGVnFUTzRQpq3x62V78V2zC4F4 ie7R8EB9bFqXPdJ7Ll0KaGjV2pFo41d020Swaoj9DQjHfnit8h2PSfQYRk3oxlbu 2hmXWL6PQdpTn2iPrmYqxd/HX2QcpbRicCRQIKT0nTr22rdlN+MMNxA86HynTn+P pJp9iD2kjDW9nLtRWZuvbpwX9ZGHMV1WqeEv0kC5+Ba7B3uGdb4QP0sYz0ONirYW pDjPeFCxRHaefeiaYCn3UTMQMhfmXqkxu0md39arl0X/45fde3oIupI+TMg19sAk nm60pej6THdGZ2Pyt6wBsSmJokFSNfLt6s5K2LBr6lsQeOS3bwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8ZPUif1H/7z7B/oq3pbuAmEycHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZmEzZmVjNGEtM2I1Yi0z YzQ2LWEzMTYtYjJlNGQwNjAwNmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASK2gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuNsaTYIn30DIpofRm2CX0eF59Sz9+www+hC7l0iCo91jGNoHcLOdCt i2ATzOyegca0gjkN3k2CjtBhl/ZFNniy+izrWmEt44VurUnqQLAOI6u1PkFTkgJv FaoeOgo35pRHfQCtqknbtNDhQvuhuI3udLbn9ZFygtwVnjTHciMflXG8T6ohHuAX 6eDUJltCKkrVx84wIMbE1BTcBLIotnz+2TgwMQflH01bEtJqezSTy+40rwRhKVbh MXihrJfVQFmJEDwO1tgiuJxC26bX08AFRfUdcu+1EwaOf2HR6UARjmTXNApDbxnb SYl5PkrSfaq+zRBjTOlPH0WAtFxxI+I= -----END CERTIFICATE-----Generated at Tue Oct 27 22:44:06 2026 by rpki-client