$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f721ba0-f768-3403-b218-d38f9d4979c6.roa File: 3f721ba0-f768-3403-b218-d38f9d4979c6.roa (raw, json) Hash identifier: dTAd5jGxC7LTLuFmK827nmx4kKPihrj524rgxMyGLxg= Subject key identifier: 61:F9:46:F3:96:7C:ED:F6:2D:C8:8A:38:C9:6E:36:FF:17:03:F7:71 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D037A96EDF44B65A6380 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f721ba0-f768-3403-b218-d38f9d4979c6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.30.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d0:37:a9:6e:df:44:b6:5a:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0e02959d-b22c-412b-a2a1-ea0577920a04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3a:6f:c6:06:f2:10:6e:14:54:ed:3e:8d:e5: e4:11:dd:25:1e:0c:28:a6:fd:4d:27:ea:51:d0:96: d1:25:67:0a:9c:88:12:64:fe:20:e7:a2:63:72:84: 1d:f2:79:0a:ba:da:b2:88:1a:03:72:c3:cf:bd:0d: b4:0f:fb:85:d5:7a:cd:cf:90:d1:f3:1b:cc:e4:1a: 6d:5a:30:0d:01:61:81:7a:8e:15:b4:eb:f5:93:9b: ec:74:c3:89:48:6d:7f:ed:02:a4:da:f3:e3:cd:ff: 96:c1:e0:28:ad:6a:47:8f:4e:78:f0:08:41:b7:b4: 7e:48:c3:1c:e2:6f:c2:31:2c:52:a8:ec:1e:03:00: 6e:68:67:05:09:ce:07:0b:39:33:5f:9f:40:2b:f3: bb:bc:77:31:93:97:14:a6:83:a6:79:51:d4:8e:d0: 45:5d:8b:05:49:b6:4b:e3:98:d4:29:cb:10:25:3c: b8:19:d2:5e:b0:e5:d5:a2:88:b9:96:bc:6c:15:b5: 2b:3a:dc:78:c4:85:f9:59:34:9d:30:0c:cb:50:95: 43:b0:26:e6:92:a0:b1:36:65:69:2c:9b:b4:a0:34: 57:e9:eb:a8:00:e1:03:46:d4:2f:7a:35:36:7d:ec: 5c:e1:17:44:a6:d2:86:84:a1:ae:d9:37:92:a8:85: 9c:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:F9:46:F3:96:7C:ED:F6:2D:C8:8A:38:C9:6E:36:FF:17:03:F7:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/3f721ba0-f768-3403-b218-d38f9d4979c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.30.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:c4:74:d2:d7:ae:90:05:7e:60:07:82:05:14:0c:b7:b2:c8: b8:ea:f9:a7:82:7e:13:ce:6b:d0:55:2c:48:eb:e6:75:7d:a1: 33:16:c3:20:03:75:09:4a:a6:6a:6e:70:90:2c:77:a7:1b:02: de:e6:66:70:19:0e:cf:97:a2:a0:89:e2:74:f1:97:01:2b:ff: f7:81:5a:3d:6f:ba:4b:06:7b:ba:ce:04:31:d1:46:96:d8:57: 17:7f:bd:51:4d:b0:e3:07:e4:99:6a:ae:08:88:42:85:4b:9c: b0:3b:55:c0:e4:c5:ec:10:ed:53:4b:fd:61:85:9e:92:5b:26: 45:7e:68:fe:11:a6:23:66:d9:e2:35:1a:75:57:e1:a7:7c:34: cc:7b:b9:68:d8:e8:98:ff:0d:63:0c:08:bb:cb:06:dd:ba:e1: 3d:25:76:c5:07:e0:27:ee:ce:ae:3f:cd:3f:8c:41:02:5e:10: 34:4f:49:4f:bb:ce:5c:9c:2d:56:f5:50:af:d7:91:21:58:da: d3:45:cf:bd:07:ec:86:c5:aa:c5:00:fb:5c:37:d9:0c:12:04: c0:a0:a9:7d:bd:20:d3:bb:6e:c5:24:32:73:cd:ef:3f:79:92: d3:49:45:34:7a:c3:62:da:85:78:2b:08:bb:72:2c:56:e0:a9: 6b:29:91:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9A3qW7fRLZaY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGUwMjk1OWQtYjIyYy00MTJiLWEyYTEtZWEwNTc3OTIwYTA0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujpvxgbyEG4UVO0+jeXkEd0lHgwopv1NJ+pR 0JbRJWcKnIgSZP4g56JjcoQd8nkKutqyiBoDcsPPvQ20D/uF1XrNz5DR8xvM5Bpt WjANAWGBeo4VtOv1k5vsdMOJSG1/7QKk2vPjzf+WweAorWpHj0548AhBt7R+SMMc 4m/CMSxSqOweAwBuaGcFCc4HCzkzX59AK/O7vHcxk5cUpoOmeVHUjtBFXYsFSbZL 45jUKcsQJTy4GdJesOXVooi5lrxsFbUrOtx4xIX5WTSdMAzLUJVDsCbmkqCxNmVp LJu0oDRX6euoAOEDRtQvejU2fexc4RdEptKGhKGu2TeSqIWc7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGH5RvOWfO32LciKOMluNv8XA/dxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvM2Y3MjFiYTAtZjc2OC0z NDAzLWIyMTgtZDM4ZjlkNDk3OWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAjEdNLXrpAFfmAHggUUDLeyyLjq+aeCfhPOa9BVLEjr5nV9oTMWwyAD dQlKpmpucJAsd6cbAt7mZnAZDs+XoqCJ4nTxlwEr//eBWj1vuksGe7rOBDHRRpbY Vxd/vVFNsOMH5JlqrgiIQoVLnLA7VcDkxewQ7VNL/WGFnpJbJkV+aP4RpiNm2eI1 GnVX4ad8NMx7uWjY6Jj/DWMMCLvLBt264T0ldsUH4Cfuzq4/zT+MQQJeEDRPSU+7 zlycLVb1UK/XkSFY2tNFz70H7IbFqsUA+1w32QwSBMCgqX29INO7bsUkMnPN7z95 ktNJRTR6w2LahXgrCLtyLFbgqWspkY4= -----END CERTIFICATE-----Generated at Sat Oct 10 14:39:16 2026 by rpki-client