$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa File: a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa (raw, json) Hash identifier: dsoMun4avnnjJNpLLQnQEdFr/D5rOkMg6azfyt0xy0o= Subject key identifier: 57:AC:6A:4B:52:1B:F0:6F:97:D8:15:1B:7A:9F:2B:5E:1E:32:F3:44 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D091AB3CFAACE4D45580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d0:91:ab:3c:fa:ac:e4:d4:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=85082af7-9907-468b-9df8-2ed7d7f6ac25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:3c:dd:0e:2e:fe:67:73:65:ab:76:e0:f1:1a: 2f:22:0c:41:ad:94:3a:5f:9c:94:7c:ff:ac:83:39: c8:97:f6:c3:5b:3d:00:e6:c5:be:6a:05:b9:1c:d8: a2:42:e9:dc:aa:a5:99:3a:2b:c4:67:0f:2a:6c:f1: e8:37:99:56:60:49:39:a6:80:77:20:c4:e4:e7:e5: 4c:5d:17:bd:05:a9:84:69:01:91:21:b9:5b:6d:1f: 3d:46:1c:57:89:2a:67:a8:82:7b:40:6f:d1:8d:e0: ca:8d:c1:d7:3b:f4:45:c3:02:42:81:2d:24:87:e6: 31:48:b4:f6:0c:8a:d2:84:da:07:69:ba:5b:04:db: 7c:30:ba:93:de:51:9b:71:9c:14:af:97:cd:06:20: 7f:a5:8e:50:aa:e2:78:2c:1e:9d:c7:da:3d:8a:bd: b7:06:69:fe:27:5e:03:6c:8f:9a:70:63:d4:63:c7: 8e:73:23:76:2e:05:64:b6:e5:19:11:64:b8:f1:6f: 77:71:ec:ed:b7:94:ac:8b:4f:32:cb:80:90:df:ef: 0d:6a:15:0d:1a:a7:1e:0e:81:3a:7b:23:5e:0f:f3: e4:0d:99:10:93:1d:ee:11:1b:8f:7c:f5:6d:0d:eb: 7e:68:c1:ac:49:13:c7:42:ee:e0:bb:8e:5a:6d:cf: 78:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:AC:6A:4B:52:1B:F0:6F:97:D8:15:1B:7A:9F:2B:5E:1E:32:F3:44 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/a28e1c97-05a9-36e2-abbf-009cd4d809ad.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:32:03:e1:f0:8d:1d:13:09:21:e8:b9:d5:8d:ee:1b:84:2a: 1b:52:28:61:d7:30:2d:17:48:45:6b:19:db:67:80:06:16:96: d7:8d:19:00:05:ad:50:f1:df:6b:79:81:5b:f3:f9:8a:36:24: 17:89:7f:18:02:b7:ac:ae:04:f8:0e:f3:93:9d:ec:d4:07:8d: 36:27:ec:f1:00:0e:25:b3:31:5f:c8:0b:7a:d3:53:ab:eb:4c: 94:7b:63:16:ca:ad:33:11:cf:c4:72:62:98:27:a7:24:02:0b: 09:48:84:ee:5b:fb:aa:8a:77:2c:cf:c6:34:f5:ef:0b:e1:9d: eb:5b:e0:66:84:a0:a9:22:9a:8e:bc:0d:71:d5:a8:04:07:57: 4c:7f:d7:ea:05:e8:b4:15:5e:83:a8:07:25:d3:ae:a2:41:06: d5:a8:b9:97:72:04:e5:82:5e:c9:a8:9f:09:fc:20:7a:94:c8: dc:bc:41:89:a5:61:3e:d7:9b:10:01:ba:b7:8b:76:dd:de:89: 12:27:9d:65:92:9c:96:6f:ae:42:14:f5:5f:28:db:68:96:0f: f9:3b:73:8b:63:69:6c:b2:47:ff:1f:7e:22:6c:58:9d:a5:9a: 1f:9b:84:bb:b1:f7:b8:d4:f8:c0:32:36:01:43:09:f8:74:f8: 6d:67:7a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9CRqzz6rOTUVYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODUwODJhZjctOTkwNy00NjhiLTlkZjgtMmVkN2Q3ZjZhYzI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjzdDi7+Z3Nlq3bg8RovIgxBrZQ6X5yUfP+s gznIl/bDWz0A5sW+agW5HNiiQuncqqWZOivEZw8qbPHoN5lWYEk5poB3IMTk5+VM XRe9BamEaQGRIblbbR89RhxXiSpnqIJ7QG/RjeDKjcHXO/RFwwJCgS0kh+YxSLT2 DIrShNoHabpbBNt8MLqT3lGbcZwUr5fNBiB/pY5QquJ4LB6dx9o9ir23Bmn+J14D bI+acGPUY8eOcyN2LgVktuUZEWS48W93ceztt5Ssi08yy4CQ3+8NahUNGqceDoE6 eyNeD/PkDZkQkx3uERuPfPVtDet+aMGsSRPHQu7gu45abc946QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFesaktSG/Bvl9gVG3qfK14eMvNEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYTI4ZTFjOTctMDVhOS0z NmUyLWFiYmYtMDA5Y2Q0ZDgwOWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKYyA+HwjR0TCSHoudWN7huEKhtSKGHXMC0XSEVrGdtngAYWlteNGQAF rVDx32t5gVvz+Yo2JBeJfxgCt6yuBPgO85Od7NQHjTYn7PEADiWzMV/IC3rTU6vr TJR7YxbKrTMRz8RyYpgnpyQCCwlIhO5b+6qKdyzPxjT17wvhnetb4GaEoKkimo68 DXHVqAQHV0x/1+oF6LQVXoOoByXTrqJBBtWouZdyBOWCXsmonwn8IHqUyNy8QYml YT7XmxABureLdt3eiRInnWWSnJZvrkIU9V8o22iWD/k7c4tjaWyyR/8ffiJsWJ2l mh+bhLux97jU+MAyNgFDCfh0+G1nem8= -----END CERTIFICATE-----Generated at Sat Sep 26 06:57:36 2026 by rpki-client