$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa File: 2a909a62-1951-3724-8960-32a5d9f774e0.roa (raw, json) Hash identifier: 3os7UXxNjhKCxG+SAdSlA6/QiGEtndK5SsWFIE2t1M8= Subject key identifier: 99:75:E9:96:B1:E2:CB:78:26:25:BB:F5:68:DA:8A:28:02:68:76:B0 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E1D9805DA8CB00F0CDF00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:1d:98:05:da:8c:b0:0f:0c:df:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=852991e3-e153-431e-82cb-f5deba6e1d76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:83:cd:10:de:1f:a9:c7:40:5b:1e:1b:b9:78: 63:da:ee:b3:b2:c5:65:f0:b2:08:95:7d:81:54:88: 9c:80:96:e8:31:e3:c2:da:e4:ba:9e:0b:c1:89:38: ab:77:69:ee:22:fc:31:dd:6f:c4:f4:bf:3a:cb:d3: ae:3f:9a:60:14:bb:7b:68:f0:18:93:03:5f:78:e6: 59:b9:d7:44:6e:f8:56:47:58:8a:78:27:2e:f0:3f: c2:79:a3:fa:af:00:79:ae:06:e5:24:51:f9:32:ba: 88:71:94:3f:9e:13:67:ef:43:39:f9:9a:53:b1:af: 69:46:0b:f6:d4:be:07:46:97:0f:c1:d9:33:e0:b1: cb:1e:2e:fb:2c:03:1d:da:ef:1d:65:b0:b3:61:67: d1:e0:98:4e:a4:a9:c7:18:8e:4f:26:01:a9:13:ba: 10:aa:48:4a:e0:69:2c:75:6d:f9:43:1f:35:21:a5: c3:c5:7e:4a:81:fc:2d:90:a3:3c:36:a0:d0:d5:22: d6:69:58:44:ab:2c:27:6a:c6:0d:ea:60:92:35:47: 48:0c:d4:13:fb:44:d6:ff:95:92:da:e9:fd:99:4c: 91:c2:98:a8:3b:a4:5e:17:28:b6:24:f2:a4:64:de: 9c:72:1c:56:db:3a:2f:49:19:01:a2:f9:3f:33:fc: bf:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:75:E9:96:B1:E2:CB:78:26:25:BB:F5:68:DA:8A:28:02:68:76:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:6c:78:6f:c3:4c:b7:b7:ae:f7:93:3c:3c:df:2b:ab:37:82: f7:51:c5:f4:c7:90:b6:92:97:29:3b:25:ad:16:c8:3e:a7:d1: 3f:81:38:20:2e:d2:09:1d:e9:f9:29:fe:93:bd:9e:96:19:aa: 59:3b:81:4f:10:2d:fd:e6:29:04:cc:5a:82:4f:1b:c4:53:94: 39:d6:3c:bc:30:95:9a:da:ee:6c:c4:cc:d3:78:f4:b5:d6:3c: 58:f3:04:52:3a:08:42:c2:02:bd:1f:02:3e:fd:62:ac:43:4f: b9:52:99:c7:ef:83:39:10:a0:a4:9c:ae:91:ce:0b:12:b7:6f: 48:51:e0:e9:06:df:9e:2c:fd:c3:a9:ae:ee:6b:3f:f7:e2:a7: 10:33:bc:b7:ed:84:ce:c9:9d:2c:9d:96:d6:39:69:d4:08:c5: 3a:11:c2:66:d7:ed:fb:24:b7:97:8f:2f:44:52:69:4e:75:5d: 14:05:0d:26:0f:fb:1d:f1:ed:8d:a4:aa:6f:1c:a5:bc:0d:c4: c5:f6:ab:f7:41:16:75:9c:32:4a:7b:23:bd:f3:e9:18:58:d7: 7f:99:a4:69:21:37:19:0d:03:66:52:1d:7e:73:e3:8e:8b:c7: 9a:f8:30:d9:08:16:8d:b7:0c:22:bf:5f:fb:c0:69:7a:25:7f: 7e:ea:b6:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nnh2YBdqMsA8M3wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk ODUyOTkxZTMtZTE1My00MzFlLTgyY2ItZjVkZWJhNmUxZDc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn4PNEN4fqcdAWx4buXhj2u6zssVl8LIIlX2B VIicgJboMePC2uS6ngvBiTird2nuIvwx3W/E9L86y9OuP5pgFLt7aPAYkwNfeOZZ uddEbvhWR1iKeCcu8D/CeaP6rwB5rgblJFH5MrqIcZQ/nhNn70M5+ZpTsa9pRgv2 1L4HRpcPwdkz4LHLHi77LAMd2u8dZbCzYWfR4JhOpKnHGI5PJgGpE7oQqkhK4Gks dW35Qx81IaXDxX5KgfwtkKM8NqDQ1SLWaVhEqywnasYN6mCSNUdIDNQT+0TW/5WS 2un9mUyRwpioO6ReFyi2JPKkZN6cchxW2zovSRkBovk/M/y/hwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJl16Zax4st4JiW79WjaiigCaHawMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE5MDlhNjItMTk1MS0z NzI0LTg5NjAtMzJhNWQ5Zjc3NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADBseG/DTLe3rveTPDzfK6s3gvdRxfTHkLaSlyk7Ja0WyD6n0T+BOCAu 0gkd6fkp/pO9npYZqlk7gU8QLf3mKQTMWoJPG8RTlDnWPLwwlZra7mzEzNN49LXW PFjzBFI6CELCAr0fAj79YqxDT7lSmcfvgzkQoKScrpHOCxK3b0hR4OkG354s/cOp ru5rP/fipxAzvLfthM7JnSydltY5adQIxToRwmbX7fskt5ePL0RSaU51XRQFDSYP +x3x7Y2kqm8cpbwNxMX2q/dBFnWcMkp7I73z6RhY13+ZpGkhNxkNA2ZSHX5z446L x5r4MNkIFo23DCK/X/vAaXolf37qtpw= -----END CERTIFICATE-----Generated at Wed Jul 29 05:37:13 2026 by rpki-client