$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa File: 598bf124-57c3-3876-867e-23f6de1c1741.roa (raw, json) Hash identifier: cRFEI3QIGAWOAK4Lq2zLyCc8kqy9H8sCv7w8VoEvbd0= Subject key identifier: C0:85:12:C0:6E:4F:DD:97:DD:39:0F:FF:CD:66:F0:AE:57:23:D6:57 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497AE2508E7C3F70CEFA8568 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 67.54.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7a:e2:50:8e:7c:3f:70:ce:fa:85:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c9f4280a-559e-4fe5-96cc-2bf1dd97efd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f9:d9:0b:32:ef:8a:16:5c:97:cb:37:c7:a0: ef:c5:54:c1:bf:a6:25:c3:4f:56:22:4a:65:a3:f0: bb:9f:19:41:a0:ae:ea:9c:99:da:c4:40:17:c3:ca: 47:ba:12:26:dd:36:a6:95:de:3a:89:80:8c:d1:87: af:9a:c4:d7:da:07:25:52:bd:92:08:75:96:99:e9: 98:01:c9:38:49:58:36:b8:a0:d4:0b:34:8a:e6:2d: bd:5a:e3:5c:cc:4f:b7:34:f8:40:52:d6:71:9b:da: 46:65:34:d5:9b:c4:0f:41:c6:d6:4a:1d:ce:9c:dc: 3b:b2:9c:91:8b:9c:f5:57:92:e2:78:3e:8e:61:c7: 71:20:00:80:f9:4a:23:64:3a:18:23:ca:1f:e8:dd: fd:58:a3:dd:f2:b7:bd:e4:69:ee:ab:44:c0:a4:9b: a8:13:c0:22:03:97:f7:8f:19:67:25:0b:60:3a:05: 51:d4:26:e4:06:ed:0b:29:98:77:26:9b:e1:06:72: 11:d3:53:43:21:9c:14:6f:f2:24:dc:21:59:3b:1c: 7d:44:af:0e:c7:22:0c:67:b0:ef:a7:9f:f2:5a:59: 72:52:07:53:cc:39:79:4a:19:6b:ea:92:2a:3d:c8: 30:52:b2:21:85:d4:c0:aa:ce:a0:c9:65:c0:da:e0: fb:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:85:12:C0:6E:4F:DD:97:DD:39:0F:FF:CD:66:F0:AE:57:23:D6:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/598bf124-57c3-3876-867e-23f6de1c1741.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 67.54.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cd:1d:c3:8e:2f:21:50:a2:29:f9:52:51:f2:8b:4a:ad:74:17: ff:af:3e:00:78:1a:66:a2:a9:c0:2f:53:de:ba:93:8b:0f:6c: 62:b7:9a:47:d6:62:12:14:1e:e6:2e:dd:7b:2e:26:61:26:6b: a1:23:63:c3:e4:a4:fe:12:7f:ca:ad:38:c1:41:2b:70:4f:3c: 7f:06:8e:f7:59:20:91:dc:df:b5:9c:00:bc:fc:98:2e:34:29: 2b:1c:da:c5:85:55:55:5f:71:83:93:66:90:f3:c3:74:4d:6a: 82:48:ff:92:6a:12:e3:d1:96:1a:a3:f7:89:84:87:ed:38:9e: 36:39:46:12:87:48:07:5c:c5:45:3b:9c:6d:2b:e6:f5:f5:d8: 53:98:de:7f:32:84:91:bc:ec:59:a4:7e:fe:a4:42:4e:e5:1a: 5d:2f:dc:47:7d:bd:a0:1b:bd:20:09:b5:07:10:72:b3:d3:a1: 72:b9:1e:33:ef:ad:58:17:fd:45:fe:55:84:e8:75:63:e9:c7: 1c:63:e5:f4:72:3b:6d:84:61:25:0a:e0:d1:5c:bb:d6:2a:46: e0:86:61:58:95:4c:1c:d4:60:b3:58:30:8b:96:20:77:77:b4: a5:3a:60:8b:0b:c2:ab:7a:40:31:e3:5d:33:b9:bb:6f:3c:93: 01:18:49:63 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeuJQjnw/cM76hWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzlmNDI4MGEtNTU5ZS00ZmU1LTk2Y2MtMmJmMWRkOTdlZmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPnZCzLvihZcl8s3x6DvxVTBv6Ylw09WIkpl o/C7nxlBoK7qnJnaxEAXw8pHuhIm3Tamld46iYCM0YevmsTX2gclUr2SCHWWmemY Ack4SVg2uKDUCzSK5i29WuNczE+3NPhAUtZxm9pGZTTVm8QPQcbWSh3OnNw7spyR i5z1V5LieD6OYcdxIACA+UojZDoYI8of6N39WKPd8re95Gnuq0TApJuoE8AiA5f3 jxlnJQtgOgVR1CbkBu0LKZh3JpvhBnIR01NDIZwUb/Ik3CFZOxx9RK8OxyIMZ7Dv p5/yWllyUgdTzDl5Shlr6pIqPcgwUrIhhdTAqs6gyWXA2uD76wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCFEsBuT92X3TkP/81m8K5XI9ZXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTk4YmYxMjQtNTdjMy0z ODc2LTg2N2UtMjNmNmRlMWMxNzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQzaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM0dw44vIVCiKflSUfKLSq10F/+vPgB4GmaiqcAvU966k4sPbGK3mkfW YhIUHuYu3XsuJmEma6EjY8PkpP4Sf8qtOMFBK3BPPH8GjvdZIJHc37WcALz8mC40 KSsc2sWFVVVfcYOTZpDzw3RNaoJI/5JqEuPRlhqj94mEh+04njY5RhKHSAdcxUU7 nG0r5vX12FOY3n8yhJG87Fmkfv6kQk7lGl0v3Ed9vaAbvSAJtQcQcrPToXK5HjPv rVgX/UX+VYTodWPpxxxj5fRyO22EYSUK4NFcu9YqRuCGYViVTBzUYLNYMIuWIHd3 tKU6YIsLwqt6QDHjXTO5u288kwEYSWM= -----END CERTIFICATE-----Generated at Mon Sep 28 22:35:15 2026 by rpki-client