$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa File: 5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa (raw, json) Hash identifier: BR816AAcKvgZCOdqJZ7fKpW32gLLiFpg2lApbtSsYXo= Subject key identifier: 14:77:76:CF:06:91:F9:21:2C:64:9D:7A:A6:68:69:04:12:C3:E8:11 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B97B7AE1C87A749A63400 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.247.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:97:b7:ae:1c:87:a7:49:a6:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d01d28c4-0fec-4563-bfac-7dec342d5313 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:43:12:d7:4e:42:fa:5b:4e:89:33:9f:a5:0b: 38:09:ef:fe:be:be:3f:9a:d7:ad:c8:09:3a:f4:28: 3e:a0:14:18:41:45:fe:30:54:f2:fc:d8:50:7a:82: 10:c5:f9:1f:a9:fd:af:9a:58:b3:10:c0:a2:5a:84: f6:e7:2e:bd:58:37:af:ae:5c:7e:00:da:1e:8e:45: 56:29:36:5e:5f:02:f9:b4:76:5c:3f:53:8a:24:af: ec:a6:98:7d:7c:c6:a3:b7:92:81:9e:70:39:db:bc: 2a:2a:f4:9d:65:8d:ac:42:b2:3b:73:e4:4d:b9:91: 46:86:5d:28:0c:5e:01:50:23:42:4c:18:81:31:bd: db:81:9e:2b:67:3d:e8:2d:4d:6e:ff:31:4d:58:13: 83:4e:39:ff:15:1f:c5:a1:16:f2:8e:51:9e:33:a0: 85:42:b7:8d:d6:02:95:da:1d:6b:5d:57:99:09:77: c3:57:b8:26:41:4e:60:78:e9:8a:bd:d1:8c:eb:9f: e4:8e:52:93:7a:05:7c:13:10:25:5e:68:87:20:c7: 25:27:d6:ca:cd:22:1f:63:11:04:f6:7a:16:03:c0: 89:81:0f:ea:09:3e:2a:e1:fb:4b:88:3a:3a:83:a7: 8e:8a:aa:50:e7:79:01:e3:91:b2:dc:3b:83:99:40: 37:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:77:76:CF:06:91:F9:21:2C:64:9D:7A:A6:68:69:04:12:C3:E8:11 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5b4ed2c4-114c-3cf0-9bfc-0d0cece80346.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.247.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:10:09:2b:d8:37:13:8a:59:92:9b:08:f5:6d:67:0c:c9:81: d9:e2:81:c8:38:cc:0b:3a:84:93:c0:3b:62:a8:7a:e4:af:2c: b5:55:80:29:c0:cb:2d:ae:1d:f5:d9:b3:9c:65:bc:83:be:93: bb:ec:f7:98:ed:00:2a:d1:f5:47:38:92:20:b1:7b:f6:25:e4: 82:71:57:00:c7:41:73:35:99:08:eb:15:3d:5c:14:b8:47:81: 76:fe:60:78:20:33:e4:08:bd:88:32:09:fb:74:1f:9a:0a:58: 3d:6c:db:f4:80:c4:a7:50:1c:72:c7:47:89:9a:0a:04:cb:0d: 49:6c:95:6b:a8:2f:d5:81:e6:20:67:88:bd:cb:16:9d:7f:53: e9:bf:a5:85:06:c5:64:83:92:de:fe:bf:10:29:98:ec:dd:4f: c4:56:88:23:66:52:cc:d4:71:d9:1c:50:0a:ac:38:e5:33:b5: 0f:0a:14:8d:ca:bd:d9:95:f9:05:00:c3:c5:63:7d:de:89:be: 13:ad:79:02:0f:1d:4d:b6:7b:b0:5c:fe:e9:c9:f4:f3:3a:9f: 6c:8b:d7:b5:e5:50:d0:2d:40:8a:88:7a:31:3c:f6:9d:dc:86: 20:6d:8b:89:39:e8:98:a5:16:6f:a2:99:8d:b6:be:0f:be:4b: 90:28:f1:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5e3rhyHp0mmNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDAxZDI4YzQtMGZlYy00NTYzLWJmYWMtN2RlYzM0MmQ1MzEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUMS105C+ltOiTOfpQs4Ce/+vr4/mtetyAk6 9Cg+oBQYQUX+MFTy/NhQeoIQxfkfqf2vmlizEMCiWoT25y69WDevrlx+ANoejkVW KTZeXwL5tHZcP1OKJK/spph9fMajt5KBnnA527wqKvSdZY2sQrI7c+RNuZFGhl0o DF4BUCNCTBiBMb3bgZ4rZz3oLU1u/zFNWBODTjn/FR/FoRbyjlGeM6CFQreN1gKV 2h1rXVeZCXfDV7gmQU5geOmKvdGM65/kjlKTegV8ExAlXmiHIMclJ9bKzSIfYxEE 9noWA8CJgQ/qCT4q4ftLiDo6g6eOiqpQ53kB45Gy3DuDmUA3jQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBR3ds8GkfkhLGSdeqZoaQQSw+gRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWI0ZWQyYzQtMTE0Yy0z Y2YwLTliZmMtMGQwY2VjZTgwMzQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPL3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM8QCSvYNxOKWZKbCPVtZwzJgdnigcg4zAs6hJPAO2KoeuSvLLVVgCnA yy2uHfXZs5xlvIO+k7vs95jtACrR9Uc4kiCxe/Yl5IJxVwDHQXM1mQjrFT1cFLhH gXb+YHggM+QIvYgyCft0H5oKWD1s2/SAxKdQHHLHR4maCgTLDUlslWuoL9WB5iBn iL3LFp1/U+m/pYUGxWSDkt7+vxApmOzdT8RWiCNmUszUcdkcUAqsOOUztQ8KFI3K vdmV+QUAw8Vjfd6JvhOteQIPHU22e7Bc/unJ9PM6n2yL17XlUNAtQIqIejE89p3c hiBti4k56JilFm+imY22vg++S5Ao8SE= -----END CERTIFICATE-----Generated at Mon Sep 28 00:28:25 2026 by rpki-client