$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa File: ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa (raw, json) Hash identifier: CohhbkXIoPmcPBDUmD2hOoNN3jIpkZTtZk0W8crG8ac= Subject key identifier: 3A:FB:18:DD:54:FA:66:15:AE:B7:B0:66:CD:CD:7B:6B:A3:86:39:1F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584EA79E236B4F3F2EEE4BE50F4E Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa Signing time: Wed 29 Jul 2026 01:00:12 +0000 ROA not before: Wed 29 Jul 2026 01:00:12 +0000 ROA not after: Tue 27 Oct 2026 01:00:12 +0000 asID: 7155 IP address blocks: 172.243.91.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 30 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:a7:9e:23:6b:4f:3f:2e:ee:4b:e5:0f:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Jul 29 01:00:12 2026 GMT Not After : Oct 27 01:00:12 2026 GMT Subject: CN=a502161d-6be1-46f6-b239-7fbf4adfe531 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:f6:e6:53:cf:fd:19:1b:e0:7b:ce:69:4f: 30:db:b3:c8:f8:fe:33:e8:5f:9e:78:dd:a9:b7:2e: 28:32:d6:18:0e:12:cd:8e:9a:b4:12:2c:12:39:14: 9f:80:8c:ef:64:f4:9c:fd:bd:6a:84:45:df:14:2f: 77:f0:18:48:55:eb:d2:8f:ae:c8:2e:f7:76:a9:ce: 0e:f0:5b:2d:f8:4d:3f:ab:59:4d:3f:cc:48:cc:24: be:ab:13:a6:c2:96:5d:b7:d7:25:93:6b:60:88:f0: a9:e9:87:cd:a6:d2:0d:b2:da:4a:bd:cc:9b:9c:83: dd:36:40:1d:74:f8:4c:6c:94:42:4b:d1:55:e6:ef: 7d:57:4a:f6:4d:8b:96:d7:fc:60:f4:dc:b6:a9:6c: 17:8d:f5:c0:71:e4:a5:a7:7e:00:3f:eb:9f:aa:9a: e1:e3:9c:3e:19:d5:8d:fd:76:22:c8:9d:92:5a:60: 2a:04:56:96:02:d0:27:63:63:eb:d1:c6:4f:40:e4: 3d:1d:81:e5:25:08:86:5c:d0:b3:89:ce:1c:61:88: e0:6d:77:49:77:ad:7d:f4:02:cb:1d:6e:48:14:72: bc:b7:9b:a6:36:d3:18:73:b9:35:99:40:18:39:c6: e8:05:23:19:4c:ed:18:83:45:f1:5c:bb:ac:69:41: 10:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FB:18:DD:54:FA:66:15:AE:B7:B0:66:CD:CD:7B:6B:A3:86:39:1F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/ad57ab2b-0c0f-3449-9ff5-5e96282dda08.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.91.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:e9:d8:04:91:8a:0d:51:5a:cd:8c:7a:64:45:a5:60:02:a0: aa:4a:65:0c:73:5e:b6:17:41:5a:52:08:31:aa:e2:d0:37:b2: e5:51:f1:27:65:ef:36:9b:07:01:d2:f7:fd:cc:e1:28:3a:b0: 3d:3a:c3:50:7a:4d:93:a2:42:e8:ea:a5:e3:cc:3b:a0:2c:6b: 19:07:5a:38:e0:8e:4b:5d:03:d9:fa:e9:b0:20:eb:b4:5c:1f: eb:6c:3e:0b:1d:ab:8e:e2:ed:a4:e9:72:29:34:1b:e7:6a:c0: 86:9e:04:d3:4f:05:ad:84:98:a7:72:12:a8:6f:40:02:ad:5d: a1:2e:98:32:35:dc:5d:ab:d1:0b:37:5a:da:48:43:90:67:93: 4d:c9:c4:48:7f:8b:fe:7d:04:a1:9e:6f:c2:b6:f0:aa:50:1d: 29:6b:e2:cc:fb:2e:c5:fd:87:a8:e3:3b:04:3b:e6:4a:47:3f: ce:96:2a:b5:53:16:d8:1f:7f:d3:93:30:8b:27:86:ed:6d:08: 60:de:9a:44:47:bd:96:db:3d:98:00:b2:07:1e:02:2c:0f:63: a9:1b:ac:e7:74:fd:a4:7c:93:3c:ec:ff:9d:fb:2f:e6:96:c7: 3e:2a:2d:12:81:fd:2f:b9:70:54:69:03:1d:c6:e9:6f:f4:65: 36:79:14:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6nniNrTz8u7kvlD04wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk YTUwMjE2MWQtNmJlMS00NmY2LWIyMzktN2ZiZjRhZGZlNTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujz25lPP/Rkb4HvOaU8w27PI+P4z6F+eeN2p ty4oMtYYDhLNjpq0EiwSORSfgIzvZPSc/b1qhEXfFC938BhIVevSj67ILvd2qc4O 8Fst+E0/q1lNP8xIzCS+qxOmwpZdt9clk2tgiPCp6YfNptINstpKvcybnIPdNkAd dPhMbJRCS9FV5u99V0r2TYuW1/xg9Ny2qWwXjfXAceSlp34AP+ufqprh45w+GdWN /XYiyJ2SWmAqBFaWAtAnY2Pr0cZPQOQ9HYHlJQiGXNCzic4cYYjgbXdJd6199ALL HW5IFHK8t5umNtMYc7k1mUAYOcboBSMZTO0Yg0XxXLusaUEQ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDr7GN1U+mYVrrewZs3Ne2ujhjkfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYWQ1N2FiMmItMGMwZi0z NDQ5LTlmZjUtNWU5NjI4MmRkYTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI3p2ASRig1RWs2MemRFpWACoKpKZQxzXrYXQVpSCDGq4tA3suVR8Sdl 7zabBwHS9/3M4Sg6sD06w1B6TZOiQujqpePMO6AsaxkHWjjgjktdA9n66bAg67Rc H+tsPgsdq47i7aTpcik0G+dqwIaeBNNPBa2EmKdyEqhvQAKtXaEumDI13F2r0Qs3 WtpIQ5Bnk03JxEh/i/59BKGeb8K28KpQHSlr4sz7LsX9h6jjOwQ75kpHP86WKrVT Ftgff9OTMIsnhu1tCGDemkRHvZbbPZgAsgceAiwPY6kbrOd0/aR8kzzs/537L+aW xz4qLRKB/S+5cFRpAx3G6W/0ZTZ5FEc= -----END CERTIFICATE-----Generated at Wed Jul 29 09:09:49 2026 by rpki-client