$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa File: 2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa (raw, json) Hash identifier: Fuh03gj2zbubXfSu0aallRuyN65h5HK8XL2sCe3gCXc= Subject key identifier: CF:6B:C1:91:C4:EA:D6:09:13:17:7A:9B:AC:C7:BB:9A:86:02:EA:B9 Certificate issuer: /CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Certificate serial: 010D0C9F4328584EA7881C7D75F8BFF9790548A0 Authority key identifier: 46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 27455 IP address blocks: 72.21.174.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:88:1c:7d:75:f8:bf:f9:79:05:48:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ad5bd25-8afa-4e50-bb02-f6317eac7e05 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=c13b3440-be77-4754-8edc-1c2ff7bf7305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:77:a3:13:13:a3:09:de:ed:2e:9a:7a:e6: 4a:e4:d0:a5:89:78:e5:34:76:d7:03:e8:88:fe:60: 0b:12:ac:ba:2e:27:21:44:b8:9b:6c:94:40:fc:6a: 51:7e:52:72:96:89:b5:e7:ca:70:59:6f:bb:29:19: 9b:45:95:60:b1:2d:a5:85:0a:be:fa:7c:a4:a8:1c: d1:b8:17:cf:e2:ba:1b:2e:20:8d:ae:8a:97:13:c1: 95:53:8b:cb:5e:b7:35:a4:bc:f1:f3:cd:32:2e:26: 60:ca:b3:14:c3:ba:52:12:9c:1b:fa:17:9d:e1:63: 93:e6:83:98:33:53:d4:90:99:b7:48:a9:fe:b1:2c: f5:57:1a:90:f2:0c:62:dc:b0:52:d6:01:13:03:44: 44:e0:54:c6:17:0b:c6:89:f1:96:a3:1e:29:6e:d4: ac:62:16:c5:fc:6c:9c:29:83:6b:e2:04:23:e8:65: 01:df:0b:94:30:68:fd:91:58:b6:a8:34:b3:62:fd: bf:ed:f8:a0:b0:aa:91:b2:18:00:d5:0c:cf:e8:b8: ec:d6:16:9f:7e:d8:52:9d:66:f9:86:aa:0a:28:6a: 41:65:bf:40:c7:75:00:0c:f5:31:8d:9c:3a:d8:4a: 12:2b:78:fc:02:ac:86:43:b2:c5:2a:06:be:f4:f2: 0e:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:6B:C1:91:C4:EA:D6:09:13:17:7A:9B:AC:C7:BB:9A:86:02:EA:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/2fc77bf6-af57-3456-a0a3-021ff15b5fb6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.crl X509v3 Authority Key Identifier: keyid:46:BB:87:7A:ED:B3:EA:9B:8F:09:96:21:80:08:E9:2C:ED:4D:C2:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/4ad5bd25-8afa-4e50-bb02-f6317eac7e05.cer sbgp-ipAddrBlock: critical IPv4: 72.21.174.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:0a:37:79:80:ab:5c:93:31:d1:31:99:2b:c0:61:f5:99:5b: b1:76:42:34:01:dd:9b:54:9c:37:0e:8f:a0:0d:c7:93:fd:29: d3:05:d6:6b:17:45:66:c6:a5:c5:2d:f4:2b:77:b8:dd:1c:01: bb:73:43:03:56:eb:5b:63:9f:67:3d:8e:12:3d:79:72:c6:bd: 77:94:e5:b9:7c:37:12:20:e9:9e:86:b4:9b:e4:f7:66:b9:c2: 2a:e3:7b:b3:a5:38:ae:98:7f:fc:fa:11:5d:b5:57:9e:75:d0: 99:5f:53:ec:01:f2:74:00:5e:c3:5a:a2:8c:eb:3e:a7:90:46: 3a:ec:ff:6f:a0:f5:29:8c:10:b0:db:a0:2e:c1:57:b4:4f:df: 71:13:0e:24:ed:17:de:bf:3f:21:98:b9:8f:56:b2:9c:15:69: ca:ce:4a:77:fc:91:4c:f3:b7:72:bf:15:34:d3:d6:47:e1:8e: ed:cd:2f:55:f7:e9:0c:af:01:e4:d9:07:2d:62:5f:33:2c:95: 9e:d2:49:80:58:66:93:64:a3:bb:cf:3b:b3:e3:cd:ed:58:f7: b1:4c:22:1b:70:c0:01:da:34:dd:4a:b4:f6:56:7b:31:fd:38: 06:ad:e8:5d:f8:88:d8:47:5c:56:13:f1:e4:2c:24:60:af:f3: 94:6b:b7:b8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6niBx9dfi/+XkFSKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFkNWJkMjUtOGFmYS00ZTUwLWJiMDItZjYzMTdlYWM3 ZTA1MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YzEzYjM0NDAtYmU3Ny00NzU0LThlZGMtMWMyZmY3YmY3MzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+h3oxMTowne7S6aeuZK5NCliXjlNHbXA+iI /mALEqy6LichRLibbJRA/GpRflJylom158pwWW+7KRmbRZVgsS2lhQq++nykqBzR uBfP4robLiCNroqXE8GVU4vLXrc1pLzx880yLiZgyrMUw7pSEpwb+hed4WOT5oOY M1PUkJm3SKn+sSz1VxqQ8gxi3LBS1gETA0RE4FTGFwvGifGWox4pbtSsYhbF/Gyc KYNr4gQj6GUB3wuUMGj9kVi2qDSzYv2/7figsKqRshgA1QzP6Ljs1haffthSnWb5 hqoKKGpBZb9Ax3UADPUxjZw62EoSK3j8AqyGQ7LFKga+9PIOfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9rwZHE6tYJExd6m6zHu5qGAuq5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1 YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMxN2VhYzdlMDUvMmZjNzdiZjYtYWY1Ny0z NDU2LWEwYTMtMDIxZmYxNWI1ZmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNGFkNWJkMjUtOGFmYS00ZTUwLWJi MDItZjYzMTdlYWM3ZTA1LzRhZDViZDI1LThhZmEtNGU1MC1iYjAyLWY2MzE3ZWFj N2UwNS5jcmwwHwYDVR0jBBgwFoAURruHeu2z6puPCZYhgAjpLO1NwtAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS80YWQ1YmQyNS04YWZhLTRlNTAtYmIwMi1mNjMx N2VhYzdlMDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASBWuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAcKN3mAq1yTMdExmSvAYfWZW7F2QjQB3ZtUnDcOj6ANx5P9KdMF1msX RWbGpcUt9Ct3uN0cAbtzQwNW61tjn2c9jhI9eXLGvXeU5bl8NxIg6Z6GtJvk92a5 wirje7OlOK6Yf/z6EV21V5510JlfU+wB8nQAXsNaoozrPqeQRjrs/2+g9SmMELDb oC7BV7RP33ETDiTtF96/PyGYuY9WspwVacrOSnf8kUzzt3K/FTTT1kfhju3NL1X3 6QyvAeTZBy1iXzMslZ7SSYBYZpNko7vPO7Pjze1Y97FMIhtwwAHaNN1KtPZWezH9 OAat6F34iNhHXFYT8eQsJGCv85Rrt7g= -----END CERTIFICATE-----Generated at Mon Sep 21 09:24:02 2026 by rpki-client