$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa File: 17e38567-d7a8-3785-88e8-65dc6ba74930.roa (raw, json) Hash identifier: KjGHUsQrLIQYZdsPYHA5Zfn6GvSCebkhwqBeZMw3Fu0= Subject key identifier: C4:95:95:F8:28:D1:98:E0:5E:D7:AB:4C:A4:64:BE:DF:B3:93:C7:07 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E6381937B3E3CBC43780 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e6:38:19:37:b3:e3:cb:c4:37:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3978dc84-ec30-4c55-925c-db1746196bad Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:43:38:21:62:e0:ce:da:05:a8:c4:fc:17:49: e8:a4:bf:29:2c:a0:4f:d3:bb:2d:1e:19:b4:e6:ca: 44:f8:9f:13:1e:66:4e:1c:f8:3d:06:51:70:0a:5d: 4c:13:20:78:39:73:5e:37:f6:06:0c:d2:46:c1:e8: 31:36:87:26:98:78:38:3a:e8:b6:13:81:44:c9:f2: a7:12:9b:e4:84:4f:8b:90:f1:e7:a4:d4:32:8c:b6: 09:d0:e7:4a:db:4d:a0:76:44:e0:47:a7:35:7b:88: 78:10:be:cd:4d:b1:e5:a5:e3:43:1c:34:8f:2f:49: 9f:19:d3:ca:a1:99:69:10:33:5d:68:22:96:f0:40: 6f:fa:d1:bf:66:97:74:78:dc:2e:70:22:dd:50:ad: 40:98:7b:41:c3:5f:dc:b3:a6:2b:66:71:fd:f2:fd: 21:48:7f:08:09:94:ce:88:d1:72:34:32:6a:74:c7: a1:bd:88:79:54:25:5c:bd:a0:80:2d:a4:3b:49:cc: f2:75:47:6c:fb:55:55:3f:c0:7a:6a:e7:ef:cb:b1: 15:b9:2f:be:d2:00:b2:86:3b:bb:73:e6:71:30:cc: 58:65:8a:36:82:a7:30:31:f3:fe:58:f2:f6:f6:ec: 1d:f2:25:a8:8d:6e:0c:1d:38:a8:ca:56:35:fa:c5: c0:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:95:95:F8:28:D1:98:E0:5E:D7:AB:4C:A4:64:BE:DF:B3:93:C7:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/17e38567-d7a8-3785-88e8-65dc6ba74930.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:f3:87:f7:be:79:5d:d0:f7:d0:1d:8e:c9:3d:44:47:bd:6d: 3b:72:0c:77:af:a6:97:ef:a3:d9:aa:05:79:51:92:fb:88:99: a9:ad:9e:f8:90:19:ab:61:2c:56:f8:63:1b:e7:80:34:f4:80: fa:76:11:dc:07:e1:8e:3d:e6:ec:cb:2f:30:6f:94:5e:0d:bf: cf:4f:ad:41:8e:17:c1:57:aa:b7:8d:8c:97:b3:c6:5f:c4:80: a8:75:87:64:8a:5b:b8:2b:20:46:72:d3:b6:e7:da:2e:59:2f: 40:95:ea:77:cd:15:aa:7e:d9:e7:f6:ed:ce:9f:82:16:5a:f8: b0:96:ee:60:d5:cf:2b:a0:d7:0e:c8:68:a4:e7:b9:d1:57:f3: 80:b5:3a:f5:33:b5:14:37:8f:69:c5:05:1c:b6:60:1c:5c:ec: a2:31:dd:1a:a1:21:ae:7e:dc:a3:97:72:9f:86:10:e3:54:85: 72:fd:19:66:5b:8e:4a:c3:3c:49:02:3d:52:0e:73:7f:e8:2d: bf:e9:59:bf:e4:cd:b1:34:3c:01:16:61:dd:a6:af:4d:1c:11: 6f:76:96:e9:8e:80:3a:67:dc:6f:e1:b2:27:2c:5c:27:85:76: b4:f7:95:ff:9f:3d:27:c7:0b:28:59:30:1e:9a:ae:18:89:aa: 91:29:3c:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+Y4GTez48vEN4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Mzk3OGRjODQtZWMzMC00YzU1LTkyNWMtZGIxNzQ2MTk2YmFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUM4IWLgztoFqMT8F0nopL8pLKBP07stHhm0 5spE+J8THmZOHPg9BlFwCl1MEyB4OXNeN/YGDNJGwegxNocmmHg4Oui2E4FEyfKn EpvkhE+LkPHnpNQyjLYJ0OdK202gdkTgR6c1e4h4EL7NTbHlpeNDHDSPL0mfGdPK oZlpEDNdaCKW8EBv+tG/Zpd0eNwucCLdUK1AmHtBw1/cs6YrZnH98v0hSH8ICZTO iNFyNDJqdMehvYh5VCVcvaCALaQ7SczydUds+1VVP8B6aufvy7EVuS++0gCyhju7 c+ZxMMxYZYo2gqcwMfP+WPL29uwd8iWojW4MHTioylY1+sXAtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMSVlfgo0ZjgXterTKRkvt+zk8cHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTdlMzg1NjctZDdhOC0z Nzg1LTg4ZTgtNjVkYzZiYTc0OTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADbzh/e+eV3Q99Adjsk9REe9bTtyDHevppfvo9mqBXlRkvuImamtnviQ GathLFb4YxvngDT0gPp2EdwH4Y495uzLLzBvlF4Nv89PrUGOF8FXqreNjJezxl/E gKh1h2SKW7grIEZy07bn2i5ZL0CV6nfNFap+2ef27c6fghZa+LCW7mDVzyug1w7I aKTnudFX84C1OvUztRQ3j2nFBRy2YBxc7KIx3RqhIa5+3KOXcp+GEONUhXL9GWZb jkrDPEkCPVIOc3/oLb/pWb/kzbE0PAEWYd2mr00cEW92lumOgDpn3G/hsicsXCeF drT3lf+fPSfHCyhZMB6arhiJqpEpPBU= -----END CERTIFICATE-----Generated at Sun Oct 11 20:17:27 2026 by rpki-client