$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0a3009d-510e-318f-8ebf-ed59a8e93865.roa File: a0a3009d-510e-318f-8ebf-ed59a8e93865.roa (raw, json) Hash identifier: pq8ZfzglOn6Fwtq8dR++DlbO+86c621C0LMohWCo+t4= Subject key identifier: B5:95:BC:03:AE:5B:EF:FE:A4:CC:3B:B7:8E:DE:2B:7C:B5:B8:B6:9A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983EAFE0200357402D02900 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0a3009d-510e-318f-8ebf-ed59a8e93865.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:ea:fe:02:00:35:74:02:d0:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f1425490-4020-4c9d-97a7-f8c7ba528573 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:c5:44:57:76:91:e8:ef:4a:46:62:78:91:05: 55:b8:f9:cf:82:8b:ad:81:3d:57:c9:a2:c9:45:6f: b7:f9:b6:da:98:73:1d:ae:28:f8:56:f1:14:c5:b1: 64:7e:fa:00:80:8b:f3:6d:de:2e:8f:5d:2a:a8:a0: 91:36:cd:64:af:6c:58:fc:cf:1a:d8:bc:f8:11:67: 80:63:19:18:5e:fa:0f:45:e6:e2:2d:33:be:16:76: 3b:fe:f7:ee:15:60:96:c3:ca:68:2d:37:5c:a9:a4: e7:bb:da:3f:97:8d:16:d7:26:1d:e1:ad:2e:99:d1: 13:32:08:5d:ba:3d:53:43:ab:19:5f:1d:ba:15:66: 10:bf:c1:d7:a5:c6:23:ce:c8:54:1c:8f:1f:04:84: c0:33:b1:a7:c1:4d:1c:d8:80:a3:f4:67:ba:07:12: 6e:21:51:22:21:b1:0e:df:4a:a1:08:1a:e1:08:5e: f4:ed:dd:0f:13:03:be:ff:38:57:6c:99:6f:34:f4: 45:4b:26:50:1e:c1:7e:70:05:14:1e:3f:64:b9:03: 71:bf:1b:86:06:04:c1:83:6a:71:8b:53:28:7b:4e: 4b:8f:4c:1b:fa:a7:1c:64:97:33:0e:3e:aa:39:1a: 6d:66:dc:78:be:ac:60:61:f6:3e:a9:7c:9d:bf:79: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:95:BC:03:AE:5B:EF:FE:A4:CC:3B:B7:8E:DE:2B:7C:B5:B8:B6:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a0a3009d-510e-318f-8ebf-ed59a8e93865.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.198.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:a1:d4:3a:34:72:3a:87:27:18:10:92:b3:79:88:1f:0f:d7: 13:42:61:48:96:8a:5b:46:97:b1:af:13:98:8a:d0:57:ff:c2: f8:e7:b6:ab:b0:61:f6:b6:0b:66:ce:1d:19:8c:ea:08:af:c2: 76:97:9f:55:be:b7:bc:93:1e:8d:94:e5:ca:aa:66:82:a8:5b: b1:9e:45:1b:5d:6b:3c:d6:e3:64:e8:0b:ba:93:fb:2a:f6:29: d2:32:4c:e7:8d:1f:cb:51:af:30:cf:af:38:b5:9c:14:7b:ba: 53:2f:af:df:43:54:ca:d4:28:ad:68:f4:9f:53:cf:43:c2:aa: 4e:29:bd:0a:0a:96:8a:20:35:65:98:1f:e1:84:c7:0c:5a:f7: e4:f6:b5:58:54:09:a4:bc:53:c6:f9:39:99:b8:a0:8d:2a:31: 76:42:a0:18:c7:5f:f1:5f:a1:4e:1f:fd:9e:af:b5:4a:7a:66: 78:88:25:04:d3:66:6d:84:0e:1c:5b:ea:13:66:b8:2a:e6:e7: 04:f6:9a:5e:01:13:2c:b1:64:0c:c0:c8:3a:53:60:d4:bc:ec: ae:a6:d3:41:45:c5:91:23:17:3f:a0:2d:03:e4:24:7d:23:cb: e1:29:16:70:b6:6e:75:f5:99:00:db:37:f6:6d:14:a0:8d:9f: b4:76:7e:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+r+AgA1dALQKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjE0MjU0OTAtNDAyMC00YzlkLTk3YTctZjhjN2JhNTI4NTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0MVEV3aR6O9KRmJ4kQVVuPnPgoutgT1XyaLJ RW+3+bbamHMdrij4VvEUxbFkfvoAgIvzbd4uj10qqKCRNs1kr2xY/M8a2Lz4EWeA YxkYXvoPRebiLTO+FnY7/vfuFWCWw8poLTdcqaTnu9o/l40W1yYd4a0umdETMghd uj1TQ6sZXx26FWYQv8HXpcYjzshUHI8fBITAM7GnwU0c2ICj9Ge6BxJuIVEiIbEO 30qhCBrhCF707d0PEwO+/zhXbJlvNPRFSyZQHsF+cAUUHj9kuQNxvxuGBgTBg2px i1Moe05Lj0wb+qccZJczDj6qORptZtx4vqxgYfY+qXydv3mQPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLWVvAOuW+/+pMw7t47eK3y1uLaaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTBhMzAwOWQtNTEwZS0z MThmLThlYmYtZWQ1OWE4ZTkzODY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSh1Do0cjqHJxgQkrN5iB8P1xNCYUiWiltGl7GvE5iK0Ff/wvjntquw Yfa2C2bOHRmM6givwnaXn1W+t7yTHo2U5cqqZoKoW7GeRRtdazzW42ToC7qT+yr2 KdIyTOeNH8tRrzDPrzi1nBR7ulMvr99DVMrUKK1o9J9Tz0PCqk4pvQoKloogNWWY H+GExwxa9+T2tVhUCaS8U8b5OZm4oI0qMXZCoBjHX/FfoU4f/Z6vtUp6ZniIJQTT Zm2EDhxb6hNmuCrm5wT2ml4BEyyxZAzAyDpTYNS87K6m00FFxZEjFz+gLQPkJH0j y+EpFnC2bnX1mQDbN/ZtFKCNn7R2fqc= -----END CERTIFICATE-----Generated at Tue Sep 29 02:19:20 2026 by rpki-client