$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa File: 5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa (raw, json) Hash identifier: z2aZxQq+WQjfnUZDu1WOUGMvMH/q2EwvRIhYvBh5STg= Subject key identifier: 64:19:77:D1:45:05:D7:21:41:94:26:9B:72:2F:B5:A6:2B:E7:D3:30 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F3A17D177435C7D1F094B5E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa Signing time: Sat 19 Sep 2026 13:00:12 +0000 ROA not before: Sat 19 Sep 2026 13:00:12 +0000 ROA not after: Fri 18 Dec 2026 14:00:12 +0000 asID: 7155 IP address blocks: 172.242.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3a:17:d1:77:43:5c:7d:1f:09:4b:5e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 19 13:00:12 2026 GMT Not After : Dec 18 14:00:12 2026 GMT Subject: CN=0fda01fb-dbe5-4889-950d-91d9404eb717 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d1:f0:09:6a:fb:cf:a6:db:b0:41:a9:1a:96: dc:c7:11:38:66:64:b7:47:b7:38:b6:eb:0d:d4:44: 0f:83:18:f7:21:da:da:3c:6d:62:4f:79:dd:9a:1a: db:36:b0:fe:75:9f:02:f2:72:62:11:ce:85:0c:54: 2e:21:25:6f:1f:2e:82:91:d1:fb:b8:7a:3f:bf:8b: 15:66:2c:31:15:6a:f2:cf:7d:f9:25:fa:ee:8d:5a: 18:6b:da:31:35:56:34:75:45:49:03:f0:c7:1c:3a: a8:93:fb:1f:64:4f:90:48:97:2b:d6:24:c0:a1:eb: cf:92:a7:cb:90:3f:f0:87:4c:8b:bd:e2:ec:ac:a7: 93:f7:34:c2:49:7b:00:60:d3:56:9e:25:36:e9:06: 34:cb:f0:fb:54:1e:f0:70:72:79:d4:9f:e4:db:76: 7d:df:f5:1a:fe:58:6e:fc:02:1d:0b:cd:36:78:40: 23:64:04:73:d0:48:ea:fd:81:f0:6a:8b:30:34:7f: 01:11:55:16:8f:96:6d:c7:29:4c:6a:79:37:38:eb: 0c:e0:64:bc:4e:55:7c:4a:68:4f:53:ac:5f:1f:97: d8:8a:d5:a9:3c:86:66:6e:24:9b:0b:e2:ed:1c:b4: 29:98:91:be:d3:a2:5f:2a:3a:c4:08:04:1c:1d:9a: 1c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:19:77:D1:45:05:D7:21:41:94:26:9B:72:2F:B5:A6:2B:E7:D3:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5e66d3b6-c0fa-33cd-9f4e-395557d203ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:07:ef:1d:72:69:7b:78:e0:8e:ed:f1:67:d1:29:cf:56:50: 85:53:27:17:d7:78:26:e4:4f:c4:a7:30:51:34:e7:38:72:46: bd:fd:71:bd:32:d3:af:72:d1:3f:f1:9c:2a:85:01:cd:c4:75: 22:ff:1b:47:b4:a9:6e:eb:d5:f1:36:46:1e:2d:86:02:ec:69: 9f:3b:32:4c:35:16:61:89:5d:b5:ed:43:1b:ab:4f:fd:18:a8: 88:f8:30:14:5c:00:b9:03:90:80:99:58:2e:89:ad:fb:b8:9f: 5e:49:ab:3f:79:03:72:e6:6a:20:c5:a9:ea:18:e8:9c:3a:a6: c0:5a:42:10:c7:3c:37:aa:27:7b:62:a6:04:7c:c1:30:1f:7d: 6a:de:81:00:0b:89:a7:df:33:59:64:66:65:03:a5:07:af:df: 88:e4:bb:de:92:d3:c0:dc:71:e9:88:00:09:f3:80:ba:8e:55: dd:4f:7c:c1:76:2d:2f:d0:f1:30:f7:9a:3c:4e:03:c7:b2:a0: b7:f3:09:c6:a4:4e:08:0f:fa:99:90:89:74:24:f1:a0:9e:47: ba:8e:b8:c1:55:b0:0f:8f:33:d1:5f:6e:7a:8d:fe:95:b2:2e: 74:41:61:f9:01:62:8f:83:73:c5:af:2d:09:97:bf:4c:64:35: 53:bd:df:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE86F9F3Q1x9HwlLXkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkxOTEzMDAxMloXDTI2MTIxODE0MDAxMlowLzEtMCsGA1UEAxMk MGZkYTAxZmItZGJlNS00ODg5LTk1MGQtOTFkOTQwNGViNzE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqNHwCWr7z6bbsEGpGpbcxxE4ZmS3R7c4tusN 1EQPgxj3IdraPG1iT3ndmhrbNrD+dZ8C8nJiEc6FDFQuISVvHy6CkdH7uHo/v4sV ZiwxFWryz335JfrujVoYa9oxNVY0dUVJA/DHHDqok/sfZE+QSJcr1iTAoevPkqfL kD/wh0yLveLsrKeT9zTCSXsAYNNWniU26QY0y/D7VB7wcHJ51J/k23Z93/Ua/lhu /AIdC802eEAjZARz0Ejq/YHwaoswNH8BEVUWj5ZtxylMank3OOsM4GS8TlV8SmhP U6xfH5fYitWpPIZmbiSbC+LtHLQpmJG+06JfKjrECAQcHZoctwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGQZd9FFBdchQZQmm3IvtaYr59MwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWU2NmQzYjYtYzBmYS0z M2NkLTlmNGUtMzk1NTU3ZDIwM2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQErPIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJcH7x1yaXt44I7t8WfRKc9WUIVTJxfXeCbkT8SnMFE05zhyRr39cb0y 069y0T/xnCqFAc3EdSL/G0e0qW7r1fE2Rh4thgLsaZ87Mkw1FmGJXbXtQxurT/0Y qIj4MBRcALkDkICZWC6Jrfu4n15Jqz95A3LmaiDFqeoY6Jw6psBaQhDHPDeqJ3ti pgR8wTAffWregQALiaffM1lkZmUDpQev34jku96S08DccemIAAnzgLqOVd1PfMF2 LS/Q8TD3mjxOA8eyoLfzCcakTggP+pmQiXQk8aCeR7qOuMFVsA+PM9FfbnqN/pWy LnRBYfkBYo+Dc8WvLQmXv0xkNVO9300= -----END CERTIFICATE-----Generated at Tue Sep 22 03:44:56 2026 by rpki-client