$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa File: b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa (raw, json) Hash identifier: Us0gvkL1XO7asEZ1ySu7m3IEgUyK1CQihW20sZyvIHA= Subject key identifier: 26:63:9B:42:D2:3A:BD:07:FE:C4:EC:7D:E2:DB:3F:58:30:26:66:B5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B90181BF15FBF409C7F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.116.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:90:18:1b:f1:5f:bf:40:9c:7f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=60475fe4-c7a3-4a6d-90bb-61185341c9e1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:2b:c6:67:cf:e3:b9:ff:55:7c:13:9b:4f:67: e9:67:29:0b:f1:8f:76:b1:67:e6:95:b6:48:4d:5a: 29:17:5c:9d:20:8b:b5:00:01:5f:1c:e2:b9:b3:9e: 02:05:1f:24:03:0d:c7:b9:bc:42:a1:b3:9b:4a:87: e9:a4:2a:27:c6:cd:5d:98:cc:bd:20:bb:1d:0b:75: ee:ae:eb:e5:88:a0:05:09:d4:9c:88:fb:15:34:bb: 8b:0e:27:95:eb:4e:f3:31:52:ae:9d:fe:5a:97:dd: 2e:a7:64:cb:de:de:ad:00:89:2b:a9:88:94:05:d9: e8:4e:6b:46:46:31:5f:e3:39:31:c4:d8:3d:01:f6: 27:59:45:4e:cc:77:ae:62:97:00:ab:de:49:81:75: 02:ab:bc:4f:9d:14:46:aa:85:a2:57:9a:88:8f:67: 37:fa:1b:a4:94:d4:fc:01:a6:0f:e3:62:e2:6d:53: b2:96:68:d9:09:8c:54:d7:1b:c3:23:1e:9a:a4:bf: 25:be:0a:99:ca:80:4d:d9:e2:87:61:ee:c6:e1:b0: 04:a6:66:1c:cd:c6:c8:9f:64:a5:ac:49:cf:69:aa: 26:56:e7:82:94:bf:f7:43:80:ed:9f:d1:07:86:88: 0c:0a:6e:a9:06:47:8a:a1:18:8f:4c:a6:74:ea:96: c2:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:63:9B:42:D2:3A:BD:07:FE:C4:EC:7D:E2:DB:3F:58:30:26:66:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/b8bfdded-6d14-366e-9a12-bf5d306a3d5a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.116.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:ee:c2:58:b5:3a:a9:51:0a:31:ab:d3:c1:75:bc:61:a3:f1: a0:eb:0d:08:27:af:52:b3:b3:8c:2e:20:a5:6f:3c:e0:63:b1: 02:00:02:76:9f:09:2a:83:e1:08:3f:9b:1b:b7:ba:c7:2c:3c: c4:67:89:51:c3:d8:80:ae:4e:5c:17:76:e6:00:96:d8:6e:dc: 33:5d:10:bb:cd:f3:17:c8:18:a3:71:f1:fb:26:c9:d1:97:3b: 4f:2d:ea:cb:b0:49:4e:5c:2c:dc:5a:e8:6d:d4:e9:4d:73:f7: 0d:68:4f:f1:3c:d2:c6:f3:51:9d:24:aa:3f:47:a0:f7:38:b5: b7:cc:fa:c2:48:5e:91:3b:ea:b1:a0:7a:2e:d8:6f:08:9d:2c: 72:1a:23:ca:24:08:23:f4:99:4a:4f:e5:b7:7f:40:b2:24:18: 69:69:eb:df:50:91:42:1f:ad:d7:74:0c:52:7d:f4:16:fb:20: e6:d5:f3:aa:9a:67:5f:4e:ae:1c:0f:d3:19:1f:eb:cd:ea:f5: 53:82:ef:89:d2:09:28:f7:a3:61:bf:2c:12:08:d9:53:b2:f4: 3d:ac:f1:93:2a:52:43:3c:6f:37:37:fb:66:fe:b5:a3:bb:71: fe:8e:a7:8f:13:f2:f4:ff:e5:79:9d:5b:f8:0c:8a:c9:30:fc: 2f:6c:d2:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5AYG/Ffv0Ccf4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjA0NzVmZTQtYzdhMy00YTZkLTkwYmItNjExODUzNDFjOWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CvGZ8/juf9VfBObT2fpZykL8Y92sWfmlbZI TVopF1ydIIu1AAFfHOK5s54CBR8kAw3HubxCobObSofppConxs1dmMy9ILsdC3Xu ruvliKAFCdSciPsVNLuLDieV607zMVKunf5al90up2TL3t6tAIkrqYiUBdnoTmtG RjFf4zkxxNg9AfYnWUVOzHeuYpcAq95JgXUCq7xPnRRGqoWiV5qIj2c3+huklNT8 AaYP42LibVOylmjZCYxU1xvDIx6apL8lvgqZyoBN2eKHYe7G4bAEpmYczcbIn2Sl rEnPaaomVueClL/3Q4Dtn9EHhogMCm6pBkeKoRiPTKZ06pbCJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCZjm0LSOr0H/sTsfeLbP1gwJma1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvYjhiZmRkZWQtNmQxNC0z NjZlLTlhMTItYmY1ZDMwNmEzZDVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHXuwli1OqlRCjGr08F1vGGj8aDrDQgnr1Kzs4wuIKVvPOBjsQIAAnaf CSqD4Qg/mxu3uscsPMRniVHD2ICuTlwXduYAlthu3DNdELvN8xfIGKNx8fsmydGX O08t6suwSU5cLNxa6G3U6U1z9w1oT/E80sbzUZ0kqj9HoPc4tbfM+sJIXpE76rGg ei7YbwidLHIaI8okCCP0mUpP5bd/QLIkGGlp699QkUIfrdd0DFJ99Bb7IObV86qa Z19OrhwP0xkf683q9VOC74nSCSj3o2G/LBII2VOy9D2s8ZMqUkM8bzc3+2b+taO7 cf6Op48T8vT/5XmdW/gMiskw/C9s0gE= -----END CERTIFICATE-----Generated at Fri Sep 25 18:22:04 2026 by rpki-client