$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42c0cc66-096b-3470-8b86-cc52aaf59706.roa File: 42c0cc66-096b-3470-8b86-cc52aaf59706.roa (raw, json) Hash identifier: SUKOqiV9km+shJGSdoP/RZUkulQBczXVHnnr/blU0bA= Subject key identifier: 1F:7F:E1:FB:C2:B2:85:F0:A6:82:C6:DC:89:8D:5C:5A:7D:01:14:38 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AEB7C72418FD7A9C8DF80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42c0cc66-096b-3470-8b86-cc52aaf59706.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 67.54.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:eb:7c:72:41:8f:d7:a9:c8:df:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=87f6a2bc-94f0-4d8b-b6c5-0ce53624f2ca Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7e:c4:a9:ee:d7:53:60:c1:78:8e:00:97:84: d6:3e:3e:85:51:ab:80:f1:e5:9b:51:e1:c1:61:d1: 8e:69:76:44:cc:d2:fa:48:85:05:0b:65:6b:9c:47: b0:c2:43:30:99:27:8e:cd:20:43:54:66:ea:14:43: 5c:24:e7:76:7d:a4:86:ec:de:e4:4f:1b:33:0f:23: 7f:70:96:e8:98:8a:b2:ce:7e:d7:42:b3:a4:a4:3e: 75:b1:60:56:1a:fe:fa:f4:c7:c5:aa:09:64:35:c2: 86:8a:cf:95:63:af:ae:c4:10:9f:55:c8:f8:11:4f: 08:74:6e:8b:a0:12:2f:b8:64:40:57:a9:71:34:d6: 37:a6:b6:33:a0:35:2b:44:2c:3b:75:14:b5:3c:cc: cb:7e:be:e2:12:71:5d:f9:82:c4:41:81:dd:b7:7d: 83:17:de:71:0b:dd:5e:85:89:02:99:b1:cb:4a:c4: 8e:c2:5e:3d:fe:61:04:c7:cb:c6:9f:08:6b:bb:cd: bd:a4:4f:16:a7:4a:44:a9:0a:58:18:4a:5c:f2:70: a7:d4:de:d9:9c:65:ca:dc:54:e5:1b:c9:2d:35:8e: 7f:52:a2:34:22:f3:9b:58:b5:fc:ad:b4:dd:60:44: d8:4c:6c:24:5a:73:91:f1:3f:d0:35:18:78:61:48: 17:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:7F:E1:FB:C2:B2:85:F0:A6:82:C6:DC:89:8D:5C:5A:7D:01:14:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/42c0cc66-096b-3470-8b86-cc52aaf59706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:82:16:aa:c1:fa:0c:fc:fa:95:09:e3:17:5a:28:9b:29:59: b1:fc:a1:5c:6f:3a:9c:13:35:a6:2f:26:ac:7d:bb:e8:35:a0: 16:45:74:f5:ea:fa:b7:5c:92:3d:6c:c8:1d:52:15:17:97:02: 31:14:37:df:d0:a6:65:39:bb:df:0a:9d:68:ed:dc:c5:52:2c: 40:6d:d0:7b:05:81:70:f1:85:ea:fc:91:3b:ec:ae:f8:39:9d: a7:a9:85:09:d5:bf:e6:7a:59:a2:fe:a3:6d:f7:d8:ba:78:f8: 2a:56:a5:0b:d5:e9:75:16:9a:84:10:80:15:6d:89:59:ee:28: 83:b7:fd:e1:bf:42:2e:ee:f3:0d:85:a3:7e:eb:b8:75:5d:92: fc:cb:d4:2a:94:3d:45:01:4d:28:7b:ac:8f:27:c9:d0:7a:b5: 60:cf:d7:dd:ff:71:79:7e:af:06:6b:22:71:69:23:f3:9d:93: a5:75:d5:b7:b4:17:ed:ac:f8:30:bb:9c:c2:f9:dd:b6:f0:63: 93:24:a0:6b:ef:0f:76:c5:b1:52:6d:78:01:9a:d5:54:a3:55: 88:34:b8:73:87:ab:a2:8b:28:d3:da:37:89:57:0e:4f:02:2d: 12:83:39:52:b5:4f:64:60:3b:4b:60:9f:e4:7f:6b:cf:bb:a0: 12:17:26:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jeut8ckGP16nI34AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODdmNmEyYmMtOTRmMC00ZDhiLWI2YzUtMGNlNTM2MjRmMmNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH7Eqe7XU2DBeI4Al4TWPj6FUauA8eWbUeHB YdGOaXZEzNL6SIUFC2VrnEewwkMwmSeOzSBDVGbqFENcJOd2faSG7N7kTxszDyN/ cJbomIqyzn7XQrOkpD51sWBWGv769MfFqglkNcKGis+VY6+uxBCfVcj4EU8IdG6L oBIvuGRAV6lxNNY3prYzoDUrRCw7dRS1PMzLfr7iEnFd+YLEQYHdt32DF95xC91e hYkCmbHLSsSOwl49/mEEx8vGnwhru829pE8Wp0pEqQpYGEpc8nCn1N7ZnGXK3FTl G8ktNY5/UqI0IvObWLX8rbTdYETYTGwkWnOR8T/QNRh4YUgXAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB9/4fvCsoXwpoLG3ImNXFp9ARQ4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDJjMGNjNjYtMDk2Yi0z NDcwLThiODYtY2M1MmFhZjU5NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzb3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaCFqrB+gz8+pUJ4xdaKJspWbH8oVxvOpwTNaYvJqx9u+g1oBZFdPXq +rdckj1syB1SFReXAjEUN9/QpmU5u98KnWjt3MVSLEBt0HsFgXDxher8kTvsrvg5 naephQnVv+Z6WaL+o2332Lp4+CpWpQvV6XUWmoQQgBVtiVnuKIO3/eG/Qi7u8w2F o37ruHVdkvzL1CqUPUUBTSh7rI8nydB6tWDP193/cXl+rwZrInFpI/Odk6V11be0 F+2s+DC7nML53bbwY5MkoGvvD3bFsVJteAGa1VSjVYg0uHOHq6KLKNPaN4lXDk8C LRKDOVK1T2RgO0tgn+R/a8+7oBIXJgU= -----END CERTIFICATE-----Generated at Sun Oct 11 23:53:35 2026 by rpki-client