$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa File: 2a909a62-1951-3724-8960-32a5d9f774e0.roa (raw, json) Hash identifier: po6enusKh4rfVQDPMJSG23xiVYJyBTDersNC+S16OCs= Subject key identifier: 91:0F:AE:AA:98:6A:5E:6B:35:8E:84:DB:5B:90:B9:1C:3F:C5:E2:B6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9A375EB0E484F83CE200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.14.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9a:37:5e:b0:e4:84:f8:3c:e2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=cee7000a-cfdc-4e90-9c60-4798ec92fae3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:6b:98:10:e2:5b:06:30:c5:b4:db:d8:6a:07: b8:7c:da:bc:60:e0:cd:3f:2b:6c:df:db:d2:c4:37: 73:34:55:2e:b3:b2:6f:8e:d6:80:a8:70:8d:d9:34: ad:d3:c3:99:7b:bb:f2:d7:cc:03:1b:6d:d3:0f:f5: 97:9e:75:99:c4:04:da:3e:de:73:3c:f5:c9:89:51: 36:4d:6f:18:7f:aa:1d:dc:a2:5d:64:96:38:26:b0: 48:5e:d7:fc:5e:b8:b7:95:7a:b5:db:60:ba:6c:62: 4f:c4:77:64:26:98:28:ff:02:03:05:81:75:35:e6: ae:1d:19:15:04:44:dc:86:45:37:dd:c6:f0:54:8e: e1:ec:a5:5a:46:a9:d4:30:e5:f3:f5:4a:82:a0:a9: 96:c7:68:5a:a2:a9:3c:61:5e:6c:21:56:cb:53:c2: 61:1f:6e:45:b9:a7:7a:e2:0d:06:2a:35:67:21:45: c5:d8:26:a6:2c:73:00:3e:e4:af:d0:d3:69:f2:ff: 69:7a:45:27:90:45:62:37:48:91:74:78:5a:60:f1: 0f:e6:54:24:90:21:c9:54:20:ff:d5:04:3c:32:7e: 8d:9b:c9:29:93:7c:4f:e6:63:16:32:84:50:9a:f4: 08:30:44:33:77:ea:38:3b:fe:09:98:d1:09:ee:4d: 14:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:0F:AE:AA:98:6A:5E:6B:35:8E:84:DB:5B:90:B9:1C:3F:C5:E2:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a909a62-1951-3724-8960-32a5d9f774e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.14.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:ae:a5:2b:94:ca:8c:4a:fb:23:3a:37:65:08:61:08:96:be: 27:c2:06:3e:d2:ae:7e:ce:6f:90:81:7e:99:e9:43:b0:56:a1: d4:bc:7e:1b:f6:48:a0:56:bf:48:2a:f3:cb:ad:9d:a2:7a:0b: 2d:69:f1:2a:2f:70:3c:c5:8c:6b:e3:08:de:05:f7:fc:52:e3: fa:20:2b:29:69:52:e5:e9:2d:d9:b3:70:43:c9:7a:aa:df:5c: 4f:46:44:b6:e8:4a:d6:18:df:c1:8a:4e:fa:44:55:66:65:e6: 75:36:88:3c:6f:71:4c:f9:3c:ff:96:67:e3:e6:a7:d3:5e:21: e5:94:ec:dc:e7:bc:fe:46:99:0a:af:da:69:c2:24:22:48:58: 6e:b7:02:d5:01:31:4b:66:cc:f9:e9:32:4a:8b:c5:c6:53:b3: 4d:9d:5b:1a:30:f4:85:1b:03:31:9b:f1:6a:7f:7f:dc:ab:0d: e2:87:cd:11:fe:a4:57:11:bf:04:91:dd:3f:7d:58:e6:a2:15: f2:11:1a:53:6a:ff:5a:27:02:2c:46:3f:43:5f:7a:ef:b8:12: fe:bd:6b:64:0d:43:49:14:60:53:88:c5:28:8a:63:8b:55:cb: 36:6c:16:94:a4:59:be:ff:7a:75:05:0e:08:a6:ff:2c:7c:4d: 93:9c:af:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5o3XrDkhPg84gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2VlNzAwMGEtY2ZkYy00ZTkwLTljNjAtNDc5OGVjOTJmYWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiWuYEOJbBjDFtNvYage4fNq8YODNPyts39vS xDdzNFUus7JvjtaAqHCN2TSt08OZe7vy18wDG23TD/WXnnWZxATaPt5zPPXJiVE2 TW8Yf6od3KJdZJY4JrBIXtf8Xri3lXq122C6bGJPxHdkJpgo/wIDBYF1NeauHRkV BETchkU33cbwVI7h7KVaRqnUMOXz9UqCoKmWx2haoqk8YV5sIVbLU8JhH25Fuad6 4g0GKjVnIUXF2CamLHMAPuSv0NNp8v9pekUnkEViN0iRdHhaYPEP5lQkkCHJVCD/ 1QQ8Mn6Nm8kpk3xP5mMWMoRQmvQIMEQzd+o4O/4JmNEJ7k0U1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJEPrqqYal5rNY6E21uQuRw/xeK2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE5MDlhNjItMTk1MS0z NzI0LTg5NjAtMzJhNWQ5Zjc3NGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKKupSuUyoxK+yM6N2UIYQiWvifCBj7Srn7Ob5CBfpnpQ7BWodS8fhv2 SKBWv0gq88utnaJ6Cy1p8SovcDzFjGvjCN4F9/xS4/ogKylpUuXpLdmzcEPJeqrf XE9GRLboStYY38GKTvpEVWZl5nU2iDxvcUz5PP+WZ+Pmp9NeIeWU7NznvP5GmQqv 2mnCJCJIWG63AtUBMUtmzPnpMkqLxcZTs02dWxow9IUbAzGb8Wp/f9yrDeKHzRH+ pFcRvwSR3T99WOaiFfIRGlNq/1onAixGP0Nfeu+4Ev69a2QNQ0kUYFOIxSiKY4tV yzZsFpSkWb7/enUFDgim/yx8TZOcr70= -----END CERTIFICATE-----Generated at Sat Oct 10 18:00:51 2026 by rpki-client