$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa File: 5b40db24-8ec4-3c0c-8532-bd6a84169001.roa (raw, json) Hash identifier: ih7PSB+IN+WILTXc9KqEyzKj5Weuez8DB6P2tMCVu+8= Subject key identifier: 0F:ED:F8:AE:D9:DA:10:81:19:53:71:6E:97:36:6F:DA:03:4D:76:87 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D7082053EA8B23F5EDC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d7:08:20:53:ea:8b:23:f5:ed:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5b40e99f-ed3e-4439-b167-54a1b94c5857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:9e:1c:af:ff:d7:39:75:a8:24:42:e7:48:4d: 3f:eb:ef:23:f1:46:6c:41:c1:d9:4a:3e:08:84:86: cc:75:b9:ba:37:e4:be:1a:65:9f:c2:52:43:da:f5: 43:76:f6:a5:3c:a6:54:b7:16:59:5a:b1:ac:e6:67: c6:ff:cb:95:81:48:9e:8e:cd:07:5e:2f:15:c9:95: 47:2a:33:81:c1:0c:14:c9:04:bc:42:28:b2:24:26: 6c:39:02:cc:b6:7e:d9:08:70:90:66:22:a5:69:5c: 5d:a1:4d:6d:44:f1:a3:43:52:bb:12:6c:a5:34:89: 90:13:5c:26:20:e5:4e:4d:ee:ca:94:b7:d0:0a:03: 45:20:3b:5b:b1:34:8d:3e:44:1b:2a:1d:d0:1f:fa: 82:fe:11:ab:15:db:55:82:ac:c9:ba:44:7d:2a:b3: 56:cf:85:29:36:5e:66:85:f8:2b:f5:e2:b6:03:0f: b1:c1:e9:d9:71:f5:32:33:2f:95:6e:9c:d6:6c:4c: 83:f7:52:bb:51:1b:e6:5f:41:c5:5c:8c:69:b5:12: 00:35:c9:2b:51:7b:1e:b4:54:b0:74:90:fa:f1:fc: cb:e0:22:d4:42:54:e3:15:db:d0:7f:78:7e:fd:f9: 1d:67:1c:13:c5:af:6e:2e:1f:1e:c9:0b:f0:82:4a: 4b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:ED:F8:AE:D9:DA:10:81:19:53:71:6E:97:36:6F:DA:03:4D:76:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b40db24-8ec4-3c0c-8532-bd6a84169001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:59:c1:18:f4:09:ab:15:85:d0:36:52:17:e1:4b:7d:2d:73: af:93:56:7c:21:a5:ce:5d:b8:03:ee:68:d1:8d:f8:b5:37:a6: 35:32:37:78:b4:fc:c6:7e:0a:48:41:86:c7:10:7e:d8:d1:e5: f5:13:e4:d6:ba:ee:d0:ee:de:dc:06:e3:26:eb:ea:6f:73:34: c0:11:e2:34:94:df:8c:d9:92:1e:c6:74:1d:58:fb:ad:bd:0d: 3e:5c:ef:7e:39:5f:fc:6f:82:27:63:fa:de:9d:28:c0:a2:cc: 1b:be:cc:e9:bc:f2:02:23:63:0b:21:ce:d8:ab:ee:ec:1c:91: 87:95:eb:63:10:a5:75:ca:c2:79:ee:69:04:6e:39:5b:70:9c: 1e:61:0d:f3:03:a5:7d:88:a9:2f:4c:17:e7:fd:dd:c8:e0:c7: 07:ce:dc:86:4c:86:05:ed:30:e4:1f:92:e5:11:10:bc:0d:ba: d1:52:2b:51:10:74:d8:7d:c2:34:9d:94:c9:8c:68:3a:0b:95: 10:13:41:55:36:cf:40:74:c7:1d:0a:c8:dc:c7:ec:21:e4:7f: 25:16:35:32:4a:b1:bd:95:14:02:f1:de:9a:09:cc:f0:b7:6e: fd:bc:9b:1d:ae:d3:ff:cb:c3:37:26:86:ec:e1:97:38:25:40: 5e:b4:65:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9cIIFPqiyP17cAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NWI0MGU5OWYtZWQzZS00NDM5LWIxNjctNTRhMWI5NGM1ODU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhp4cr//XOXWoJELnSE0/6+8j8UZsQcHZSj4I hIbMdbm6N+S+GmWfwlJD2vVDdvalPKZUtxZZWrGs5mfG/8uVgUiejs0HXi8VyZVH KjOBwQwUyQS8QiiyJCZsOQLMtn7ZCHCQZiKlaVxdoU1tRPGjQ1K7EmylNImQE1wm IOVOTe7KlLfQCgNFIDtbsTSNPkQbKh3QH/qC/hGrFdtVgqzJukR9KrNWz4UpNl5m hfgr9eK2Aw+xwenZcfUyMy+VbpzWbEyD91K7URvmX0HFXIxptRIANckrUXsetFSw dJD68fzL4CLUQlTjFdvQf3h+/fkdZxwTxa9uLh8eyQvwgkpL+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA/t+K7Z2hCBGVNxbpc2b9oDTXaHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWI0MGRiMjQtOGVjNC0z YzBjLTg1MzItYmQ2YTg0MTY5MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZZwRj0CasVhdA2UhfhS30tc6+TVnwhpc5duAPuaNGN+LU3pjUyN3i0 /MZ+CkhBhscQftjR5fUT5Na67tDu3twG4ybr6m9zNMAR4jSU34zZkh7GdB1Y+629 DT5c7345X/xvgidj+t6dKMCizBu+zOm88gIjYwshztir7uwckYeV62MQpXXKwnnu aQRuOVtwnB5hDfMDpX2IqS9MF+f93cjgxwfO3IZMhgXtMOQfkuURELwNutFSK1EQ dNh9wjSdlMmMaDoLlRATQVU2z0B0xx0KyNzH7CHkfyUWNTJKsb2VFALx3poJzPC3 bv28mx2u0//LwzcmhuzhlzglQF60ZZE= -----END CERTIFICATE-----Generated at Tue Oct 6 21:43:30 2026 by rpki-client