$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b59b75a3-ff65-36ff-9068-52862b2493d7.roa File: b59b75a3-ff65-36ff-9068-52862b2493d7.roa (raw, json) Hash identifier: LRF7+5TymbLoc2LVMHTU47no5AJEk664rsleryAaCf0= Subject key identifier: AA:F1:FC:57:4D:FD:EF:BD:5B:93:2C:DE:2B:11:3A:6D:A9:0B:ED:64 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D3B961BBEF7679140580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b59b75a3-ff65-36ff-9068-52862b2493d7.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.98.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d3:b9:61:bb:ef:76:79:14:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b14c6d4d-7eee-46b4-847d-89771d5301a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:49:e6:22:5e:6e:c1:e0:1b:c6:49:c1:e4:2e: 15:d2:7c:48:22:a6:a2:df:0e:e0:1b:ed:da:a0:91: 8b:1b:a4:e6:c4:83:dc:86:b3:75:0f:3c:d2:07:48: cc:57:e3:bd:b8:a1:58:7c:05:97:54:82:df:5a:d8: 19:76:bb:82:bd:a5:48:d2:d3:6a:80:ea:2f:d0:41: 2b:5b:dc:0c:ac:bd:60:db:e6:a2:2c:65:f5:36:c8: 2f:ec:e5:0c:4e:4e:da:c7:8f:0c:49:e6:30:0c:54: 4d:55:d5:52:1b:58:df:87:d0:8d:e4:45:fd:20:0e: 53:5e:1b:ae:78:d2:30:33:83:1d:69:6e:c7:16:c3: a8:5a:e1:ff:5f:02:a9:e2:fa:b1:e6:b0:18:28:4c: b0:d2:8c:46:0a:d5:10:3a:86:86:8f:e9:5e:a4:4f: 8b:16:6b:80:46:fc:12:56:44:0f:3b:80:e7:01:46: b1:45:fc:70:79:07:9d:f8:c4:9a:80:00:24:d7:d5: a4:1f:b2:f9:51:c7:36:55:60:d5:3c:b9:62:6a:f1: cb:e5:fe:20:ac:c1:12:5c:02:76:08:44:03:be:98: 7f:66:c1:c2:ae:ff:41:5f:25:95:fb:0d:bb:96:5d: b3:1d:17:b7:93:0e:24:c7:58:cc:97:f7:ed:dc:71: 66:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:F1:FC:57:4D:FD:EF:BD:5B:93:2C:DE:2B:11:3A:6D:A9:0B:ED:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b59b75a3-ff65-36ff-9068-52862b2493d7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.98.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption af:84:a7:e3:48:56:1d:cd:fc:56:f6:b9:45:5e:a2:eb:3a:e4: 85:c7:77:ec:1c:28:f4:17:6c:53:6c:b5:bd:1c:ba:a0:42:86: f0:7d:59:10:a6:09:f3:2d:4c:5a:d8:4e:20:81:2d:92:1c:ce: 8c:cf:49:fd:3a:55:52:03:65:58:e7:1c:c2:26:0a:26:1b:be: 2a:44:7d:32:ef:f0:63:fa:bd:83:05:8b:e9:7c:0c:ae:19:c7: 41:95:8f:88:ff:15:7d:64:21:d3:fc:df:82:ce:97:53:9a:97: e8:3e:70:6b:63:d1:19:c5:59:7a:40:1f:87:f9:f9:76:51:23: d6:b6:6c:2c:e4:1a:bf:e8:32:9e:6d:80:0a:98:58:17:34:a1: 3b:8d:df:e0:d6:79:2d:3f:f2:e5:c5:95:cf:11:13:ef:9b:97: e5:ac:3a:de:a1:6b:3d:ae:c4:75:84:75:52:88:64:4d:6e:45: 48:8c:ed:20:a8:01:b9:94:19:9a:2d:3a:b3:e4:04:28:b0:e9: a9:78:7c:e6:ff:59:e0:32:eb:29:11:b3:35:e7:33:37:2b:27: 43:7f:46:f2:5b:b1:21:bf:48:f8:a1:88:33:74:dc:e4:2c:46: ee:68:fd:6e:2b:34:bd:98:74:13:1d:6b:a6:8b:d1:7d:59:89: 24:3a:3d:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9O5YbvvdnkUBYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjE0YzZkNGQtN2VlZS00NmI0LTg0N2QtODk3NzFkNTMwMWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUnmIl5uweAbxknB5C4V0nxIIqai3w7gG+3a oJGLG6TmxIPchrN1DzzSB0jMV+O9uKFYfAWXVILfWtgZdruCvaVI0tNqgOov0EEr W9wMrL1g2+aiLGX1Nsgv7OUMTk7ax48MSeYwDFRNVdVSG1jfh9CN5EX9IA5TXhuu eNIwM4MdaW7HFsOoWuH/XwKp4vqx5rAYKEyw0oxGCtUQOoaGj+lepE+LFmuARvwS VkQPO4DnAUaxRfxweQed+MSagAAk19WkH7L5Ucc2VWDVPLliavHL5f4grMESXAJ2 CEQDvph/ZsHCrv9BXyWV+w27ll2zHRe3kw4kx1jMl/ft3HFmzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKrx/FdN/e+9W5Ms3isROm2pC+1kMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjU5Yjc1YTMtZmY2NS0z NmZmLTkwNjgtNTI4NjJiMjQ5M2Q3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJiMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAK+Ep+NIVh3N/Fb2uUVeous65IXHd+wcKPQXbFNstb0cuqBChvB9WRCm CfMtTFrYTiCBLZIczozPSf06VVIDZVjnHMImCiYbvipEfTLv8GP6vYMFi+l8DK4Z x0GVj4j/FX1kIdP834LOl1Oal+g+cGtj0RnFWXpAH4f5+XZRI9a2bCzkGr/oMp5t gAqYWBc0oTuN3+DWeS0/8uXFlc8RE++bl+WsOt6haz2uxHWEdVKIZE1uRUiM7SCo AbmUGZotOrPkBCiw6al4fOb/WeAy6ykRszXnMzcrJ0N/RvJbsSG/SPihiDN03OQs Ru5o/W4rNL2YdBMda6aL0X1ZiSQ6Pf0= -----END CERTIFICATE-----Generated at Mon Sep 28 04:58:32 2026 by rpki-client