$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/331987d3-3ee4-3757-a6d1-bce91fbc5dcc.roa File: 331987d3-3ee4-3757-a6d1-bce91fbc5dcc.roa (raw, json) Hash identifier: B+GeK1zXZ/nkDPyMQlQV9SXWKVgnoEfRmFZSi0aYxIY= Subject key identifier: 02:8A:9A:24:2E:47:54:3E:40:EA:BA:40:94:C5:B2:F1:B6:06:3A:19 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B53AF8FBBC472F8C612AD Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/331987d3-3ee4-3757-a6d1-bce91fbc5dcc.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 75.107.114.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:53:af:8f:bb:c4:72:f8:c6:12:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=74e98e44-35d9-4993-968a-9fa8394ed051 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:d5:d6:78:d7:ea:93:0f:bc:ab:05:ec:e5:f0: 48:40:7f:5c:8a:6b:5e:c0:6b:df:1e:68:a1:3b:2b: 10:6e:10:bc:39:b9:7a:21:d0:86:2e:f2:4b:ba:a9: 74:53:f2:70:1b:b5:c9:e9:1c:a3:ff:aa:09:2a:8b: 23:70:f5:39:5e:a3:6a:d1:d7:b7:cc:2f:51:c5:8c: f4:49:11:3c:86:47:ea:71:3d:dd:4d:4b:8d:10:9d: 34:97:eb:54:02:52:58:d6:27:12:f1:64:b2:65:e5: e2:42:f0:58:1c:17:f0:45:99:a2:55:1a:bd:2f:b2: c7:02:eb:d9:5c:de:5a:0d:85:20:eb:16:9e:ed:f2: f7:c2:d9:b0:d5:46:fc:85:59:54:73:1d:be:ad:6f: ee:73:01:7c:ec:5b:bf:fe:51:bb:a0:a8:4c:3d:a1: b3:65:07:9c:af:01:c0:b6:66:0e:d7:3d:4a:2c:11: 2e:56:f8:3f:bb:57:4b:8f:68:0b:ec:8d:73:41:ef: 0c:fd:0c:90:c7:8e:0a:0e:c8:ee:f7:c7:e9:dd:58: 3e:8d:55:f8:2a:27:2e:98:2d:4a:ef:1e:1b:7f:fe: 87:a0:cb:d8:12:56:04:1a:e8:55:e8:bb:a7:fa:12: b4:8b:cf:e1:21:88:bd:2a:a6:1d:a8:02:38:76:43: 40:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:8A:9A:24:2E:47:54:3E:40:EA:BA:40:94:C5:B2:F1:B6:06:3A:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/331987d3-3ee4-3757-a6d1-bce91fbc5dcc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.107.114.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:c9:d5:da:89:17:cc:f9:03:b2:68:f9:d4:1d:37:2c:d8:ab: 1f:56:3b:52:52:c6:c8:6f:0f:45:a1:84:13:79:fe:85:89:e4: db:d9:c7:f3:4a:6b:5a:7a:49:19:a4:c5:6b:93:d5:93:28:7c: 6f:69:d1:65:32:9d:0c:58:18:a2:4c:fe:64:54:b8:ee:dc:85: 08:0b:33:56:86:80:4d:8b:5b:04:67:c2:5a:c7:2a:f3:fa:41: 6e:c8:0a:d2:6d:59:64:6a:dd:9f:29:19:fc:a6:ca:ae:5c:42: ce:f6:ba:27:49:17:9f:3f:9e:5a:a2:75:c4:47:9b:13:d4:9f: 1c:65:ca:c2:39:73:ca:6e:a4:c8:53:76:4a:33:ae:14:17:c4: 05:12:9b:f4:ca:27:cc:c7:11:fe:20:8b:de:10:c3:a0:1c:2b: 6b:13:87:b9:d8:02:5d:cd:e6:54:1d:4b:b7:f5:47:38:9d:a0: 06:65:8c:1f:76:e5:28:1f:98:60:7c:85:84:98:09:d3:3f:eb: 5a:1c:e6:a2:39:1a:48:8e:20:ac:1f:bb:89:7c:83:be:04:43: 18:93:91:d0:45:43:06:6f:1d:14:37:b7:93:82:83:86:6f:2e: 62:c5:9f:cc:04:99:21:15:d8:eb:2b:70:56:57:12:0f:be:70: 95:f0:77:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je1Ovj7vEcvjGEq0wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzRlOThlNDQtMzVkOS00OTkzLTk2OGEtOWZhODM5NGVkMDUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstXWeNfqkw+8qwXs5fBIQH9cimtewGvfHmih OysQbhC8Obl6IdCGLvJLuql0U/JwG7XJ6Ryj/6oJKosjcPU5XqNq0de3zC9RxYz0 SRE8hkfqcT3dTUuNEJ00l+tUAlJY1icS8WSyZeXiQvBYHBfwRZmiVRq9L7LHAuvZ XN5aDYUg6xae7fL3wtmw1Ub8hVlUcx2+rW/ucwF87Fu//lG7oKhMPaGzZQecrwHA tmYO1z1KLBEuVvg/u1dLj2gL7I1zQe8M/QyQx44KDsju98fp3Vg+jVX4KicumC1K 7x4bf/6HoMvYElYEGuhV6Lun+hK0i8/hIYi9KqYdqAI4dkNAoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAKKmiQuR1Q+QOq6QJTFsvG2BjoZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzMxOTg3ZDMtM2VlNC0z NzU3LWE2ZDEtYmNlOTFmYmM1ZGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2tyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI/J1dqJF8z5A7Jo+dQdNyzYqx9WO1JSxshvD0WhhBN5/oWJ5NvZx/NK a1p6SRmkxWuT1ZMofG9p0WUynQxYGKJM/mRUuO7chQgLM1aGgE2LWwRnwlrHKvP6 QW7ICtJtWWRq3Z8pGfymyq5cQs72uidJF58/nlqidcRHmxPUnxxlysI5c8pupMhT dkozrhQXxAUSm/TKJ8zHEf4gi94Qw6AcK2sTh7nYAl3N5lQdS7f1RzidoAZljB92 5SgfmGB8hYSYCdM/61oc5qI5GkiOIKwfu4l8g74EQxiTkdBFQwZvHRQ3t5OCg4Zv LmLFn8wEmSEV2OsrcFZXEg++cJXwd+I= -----END CERTIFICATE-----Generated at Sat Sep 26 11:06:03 2026 by rpki-client