$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9011fa32-7cb7-3981-bdf9-daec62a63d25.roa File: 9011fa32-7cb7-3981-bdf9-daec62a63d25.roa (raw, json) Hash identifier: 2R3GCrDj2BF9nt/PTLMrUDf1+TFCVunz8PmyoOBL5Fg= Subject key identifier: 87:DF:4A:2E:B2:B5:1B:BE:EC:48:92:C3:1F:13:66:30:C7:14:09:4B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B290A3B780B7677818B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9011fa32-7cb7-3981-bdf9-daec62a63d25.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 75.105.119.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:29:0a:3b:78:0b:76:77:81:8b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ca347de3-90b4-4058-9da3-135fe4f930bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:23:43:92:71:37:34:47:46:29:0e:bd:cf:f9: 67:9d:c2:6d:d2:71:2f:38:00:b7:b8:f0:68:5b:0f: 30:3d:23:c2:70:9e:5f:ed:ac:81:21:5a:8b:38:33: 4b:29:49:c5:6a:4c:be:5e:40:88:5f:27:7d:1c:d3: e2:9e:12:47:0f:81:0c:3f:f9:ea:bb:d7:ef:6e:7d: f1:a0:47:7e:d2:3d:68:54:f6:51:eb:52:96:29:e3: 2c:c4:77:4d:d0:67:cb:95:72:c9:df:cc:3f:4d:07: f8:74:ad:cc:f2:17:d5:e5:a0:d8:b5:e2:cc:3f:a6: 4d:f4:4f:52:9c:14:39:7a:7c:e4:2c:69:0e:51:e8: 39:31:1f:77:85:03:ab:6a:6e:00:15:7c:18:ad:15: 09:5c:74:18:7f:27:2d:f1:03:dc:23:7d:ca:f7:d1: ce:16:60:b9:46:cf:90:ef:d5:ec:bd:3e:85:08:e0: 7a:99:39:9d:85:09:88:1b:a3:f8:80:0f:8d:21:f9: 46:e0:dd:b9:ee:a0:fb:98:be:c8:a1:3d:59:4f:c6: 26:46:89:b5:81:9b:58:11:20:e7:0a:61:84:59:7c: c1:aa:23:75:6f:9e:82:62:36:d4:26:32:08:48:60: 5c:9c:b2:4d:c5:31:e9:b1:48:73:02:6e:ad:8f:e8: b7:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:DF:4A:2E:B2:B5:1B:BE:EC:48:92:C3:1F:13:66:30:C7:14:09:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/9011fa32-7cb7-3981-bdf9-daec62a63d25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.105.119.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:f2:6f:7c:42:82:31:71:dc:04:31:e9:1b:b7:d7:c7:49:1c: 9b:34:9c:53:22:1f:90:df:20:37:b7:ff:7f:37:26:a8:ab:80: 03:b8:4a:9c:10:0c:dd:47:32:6c:c1:64:ef:be:01:eb:52:b6: 5e:ea:6b:5f:05:f0:4b:e7:aa:f6:db:97:3b:6d:4f:11:ee:41: 5c:50:6f:c5:fa:5c:e0:ea:4a:a8:ca:2a:3b:9f:50:05:5a:f0: 98:5c:bc:58:94:cc:ee:7a:38:6c:21:51:60:43:35:05:97:81: d8:c3:6d:76:05:69:17:34:5b:5b:73:7a:5b:54:ef:bb:48:04: 3d:0e:da:21:62:c0:55:ea:e1:5d:69:ca:cd:c9:7e:85:8b:a0: e3:2e:de:ae:e1:2c:3f:5a:0b:d4:2d:a1:d4:5d:f4:2a:84:0c: 38:07:8b:e4:e2:7a:3a:02:81:65:a4:d9:05:3f:e7:3f:0f:9a: 23:1d:8d:fe:9d:9f:19:27:ee:bd:4c:dd:74:1f:40:df:57:cb: bf:ad:2c:2f:bd:d0:bd:a8:49:c5:3e:41:db:11:6a:dc:71:1f: 7c:a8:6e:6c:78:43:05:47:82:bb:7f:bd:f4:d6:07:d5:cc:34: f4:ee:5f:9f:05:2d:c3:4b:20:44:6f:eb:49:ab:59:ee:74:17: 94:60:54:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JeykKO3gLdneBiwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Y2EzNDdkZTMtOTBiNC00MDU4LTlkYTMtMTM1ZmU0ZjkzMGJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyNDknE3NEdGKQ69z/lnncJt0nEvOAC3uPBo Ww8wPSPCcJ5f7ayBIVqLODNLKUnFaky+XkCIXyd9HNPinhJHD4EMP/nqu9fvbn3x oEd+0j1oVPZR61KWKeMsxHdN0GfLlXLJ38w/TQf4dK3M8hfV5aDYteLMP6ZN9E9S nBQ5enzkLGkOUeg5MR93hQOram4AFXwYrRUJXHQYfyct8QPcI33K99HOFmC5Rs+Q 79XsvT6FCOB6mTmdhQmIG6P4gA+NIflG4N257qD7mL7IoT1ZT8YmRom1gZtYESDn CmGEWXzBqiN1b56CYjbUJjIISGBcnLJNxTHpsUhzAm6tj+i3GQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIffSi6ytRu+7EiSwx8TZjDHFAlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvOTAxMWZhMzItN2NiNy0z OTgxLWJkZjktZGFlYzYyYTYzZDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2l3MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjyb3xCgjFx3AQx6Ru318dJHJs0nFMiH5DfIDe3/383JqirgAO4SpwQ DN1HMmzBZO++AetStl7qa18F8EvnqvbblzttTxHuQVxQb8X6XODqSqjKKjufUAVa 8JhcvFiUzO56OGwhUWBDNQWXgdjDbXYFaRc0W1tzeltU77tIBD0O2iFiwFXq4V1p ys3JfoWLoOMu3q7hLD9aC9QtodRd9CqEDDgHi+TiejoCgWWk2QU/5z8PmiMdjf6d nxkn7r1M3XQfQN9Xy7+tLC+90L2oScU+QdsRatxxH3yobmx4QwVHgrt/vfTWB9XM NPTuX58FLcNLIERv60mrWe50F5RgVK8= -----END CERTIFICATE-----Generated at Mon Sep 28 21:25:33 2026 by rpki-client