$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa File: ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa (raw, json) Hash identifier: SsZciYezEtzv5C0lsngOEnXT94cf3gZJVE0xI4o1tKY= Subject key identifier: C2:97:8E:F3:60:D3:45:5C:F5:A0:4A:0B:C4:09:BD:9E:A6:66:01:8D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4984406D97BEC60920FC2E40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:40:6d:97:be:c6:09:20:fc:2e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=c5e16bdd-68cf-4e59-af07-a01940b9d40b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:05:0a:c1:ce:fa:ba:da:28:af:d3:10:d8:cc: d0:41:64:5d:b8:cb:f0:ed:f3:35:dc:9a:3f:2e:ea: d7:9e:08:0b:31:f4:3c:ab:98:dc:67:e7:75:b0:91: 77:e9:1a:de:aa:71:0d:15:71:34:03:ad:ce:3d:95: b3:62:eb:4e:af:6c:74:e8:e4:a2:bb:ba:cd:ab:40: c3:26:1a:00:4e:f0:ae:44:6e:39:87:a3:24:28:27: 55:12:e5:3c:19:92:23:53:70:ad:d9:7b:dd:04:8b: 59:da:60:6b:b7:9c:44:ee:40:66:4c:ba:d4:5f:0d: 06:6e:aa:91:92:3c:bf:ef:e5:16:f1:d5:91:a4:66: 11:29:4a:0f:cc:86:eb:54:29:4d:05:b5:ea:12:43: 04:27:51:2f:ea:db:f0:13:c2:34:e3:51:26:62:2b: cd:2a:e1:cd:a5:bf:34:93:25:b4:57:7f:f5:05:5e: 2b:d2:cf:2e:90:5b:eb:72:5b:cf:d9:7e:bd:0d:e6: 28:8d:c6:f0:39:6f:90:cb:5d:24:c4:fa:c9:d9:a3: cc:2a:6e:9f:cf:3a:a6:f8:f4:2b:e5:83:11:5e:a4: 18:6f:5e:fd:f4:4b:bc:3e:43:28:9c:5d:fa:23:25: b4:38:ed:cf:78:42:48:b2:65:98:57:e1:45:83:21: 7d:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:97:8E:F3:60:D3:45:5C:F5:A0:4A:0B:C4:09:BD:9E:A6:66:01:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ac5d7ebb-512e-33e5-8b56-e9c7c3437357.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:78:34:80:a1:8b:7b:c5:8a:79:d7:74:d3:46:23:20:c5:c9: c7:64:d1:c4:77:a8:9b:86:da:a0:1f:8a:e1:e9:82:75:36:1d: ec:86:17:ee:e5:e7:46:96:71:66:4d:68:78:e4:06:fb:b6:ad: fc:ec:cb:3d:b6:d0:7f:24:a5:76:5c:c0:d0:19:94:7f:88:79: dd:53:d6:2f:9c:8e:0a:b1:3f:8e:4a:96:4e:54:76:f1:1a:cc: 70:91:76:87:3f:fa:1d:15:f0:34:2f:c5:08:4a:0b:e5:21:70: be:ff:53:58:83:f0:de:ec:62:15:b9:8d:b2:0a:c9:aa:a9:5b: e1:dd:5c:e9:9f:76:ed:f0:08:c0:d4:39:77:50:a4:f8:ac:9a: a7:11:6c:9f:68:8d:b1:09:49:56:8b:92:d2:8b:11:bc:d1:2c: fe:b4:ad:27:8d:fb:c6:4e:c1:71:1a:67:e3:9f:36:51:c3:16: 36:68:70:80:20:d2:c3:94:44:9a:49:fe:18:e3:42:f2:ae:1d: 5a:81:db:0c:01:3a:b2:28:bf:d8:6b:05:b3:35:d6:dd:87:95: 9a:2d:d3:16:ba:73:d7:05:bf:c4:fb:00:dc:aa:eb:80:05:2a: 1f:6a:b2:ad:c9:cd:48:2d:71:b5:2e:52:b4:fd:f6:8d:69:81: 3e:57:a4:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhEBtl77GCSD8LkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YzVlMTZiZGQtNjhjZi00ZTU5LWFmMDctYTAxOTQwYjlkNDBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygUKwc76utoor9MQ2MzQQWRduMvw7fM13Jo/ LurXnggLMfQ8q5jcZ+d1sJF36RreqnENFXE0A63OPZWzYutOr2x06OSiu7rNq0DD JhoATvCuRG45h6MkKCdVEuU8GZIjU3Ct2XvdBItZ2mBrt5xE7kBmTLrUXw0GbqqR kjy/7+UW8dWRpGYRKUoPzIbrVClNBbXqEkMEJ1Ev6tvwE8I041EmYivNKuHNpb80 kyW0V3/1BV4r0s8ukFvrclvP2X69DeYojcbwOW+Qy10kxPrJ2aPMKm6fzzqm+PQr 5YMRXqQYb1799Eu8PkMonF36IyW0OO3PeEJIsmWYV+FFgyF9YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMKXjvNg00Vc9aBKC8QJvZ6mZgGNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWM1ZDdlYmItNTEyZS0z M2U1LThiNTYtZTljN2MzNDM3MzU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3RMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJh4NIChi3vFinnXdNNGIyDFycdk0cR3qJuG2qAfiuHpgnU2HeyGF+7l 50aWcWZNaHjkBvu2rfzsyz220H8kpXZcwNAZlH+Ied1T1i+cjgqxP45Klk5UdvEa zHCRdoc/+h0V8DQvxQhKC+UhcL7/U1iD8N7sYhW5jbIKyaqpW+HdXOmfdu3wCMDU OXdQpPismqcRbJ9ojbEJSVaLktKLEbzRLP60rSeN+8ZOwXEaZ+OfNlHDFjZocIAg 0sOURJpJ/hjjQvKuHVqB2wwBOrIov9hrBbM11t2HlZot0xa6c9cFv8T7ANyq64AF Kh9qsq3JzUgtcbUuUrT99o1pgT5XpII= -----END CERTIFICATE-----Generated at Tue Sep 29 04:20:31 2026 by rpki-client