$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1329dc6-332f-35b5-ba11-802855cb8116.roa File: d1329dc6-332f-35b5-ba11-802855cb8116.roa (raw, json) Hash identifier: v1DLG34LzYy5yWvzEXH1B72QrCnyzt474mGDfABiBPc= Subject key identifier: 1B:87:80:63:1B:3E:87:53:48:47:9B:46:FB:E8:5C:98:4A:59:4C:13 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983DE58891938BEF03EE520 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1329dc6-332f-35b5-ba11-802855cb8116.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.4.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:de:58:89:19:38:be:f0:3e:e5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8f6bb631-bb99-4b4f-a7cc-88d7d2875830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:13:a9:65:1d:0d:be:cb:d2:c3:14:d9:eb:88: 23:12:db:3a:4d:03:89:6c:39:78:6a:5a:10:fc:34: aa:3c:3d:67:ef:66:95:88:fb:e9:86:f4:d7:63:c6: 15:13:b3:c1:35:7a:51:23:12:07:d8:01:fa:64:a4: 87:63:4b:f0:67:45:10:58:1b:d3:51:51:0f:60:27: 33:d0:2b:27:40:7c:bb:1d:6e:39:ab:2a:40:73:e2: fb:8a:aa:2b:da:5e:98:d9:28:8d:11:04:4e:c1:38: 78:15:9b:ce:ba:1a:d9:e5:c3:e6:0a:79:7c:7e:cd: 83:ca:10:b6:39:9b:64:06:15:38:fb:c7:7d:c1:1f: 89:ee:84:65:a4:ab:11:95:dd:70:1a:37:cd:0a:76: db:93:bf:cd:c7:7d:1e:20:11:62:87:03:32:1a:0a: 43:db:3f:d1:72:02:ae:cf:f5:4e:cc:92:0c:81:a1: 0b:16:58:d8:6e:ad:8b:4e:52:b0:d2:ed:73:f8:2b: cd:da:71:ee:ef:b3:49:8b:03:e4:55:ba:97:07:e0: ec:31:f4:a3:c8:02:37:52:d4:21:26:99:cb:12:a7: 6c:0d:ba:ee:1a:d2:2d:93:b8:01:6c:24:e7:6b:26: 9c:32:93:d7:17:d0:38:b3:d2:bf:02:a7:0b:8f:a3: 8a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:87:80:63:1B:3E:87:53:48:47:9B:46:FB:E8:5C:98:4A:59:4C:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1329dc6-332f-35b5-ba11-802855cb8116.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.4.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:62:7d:50:4d:ce:c9:b2:d6:41:b2:a7:ba:f1:dc:4f:9b:27: 83:8a:6f:b5:d7:e1:20:9f:b2:63:29:a9:c9:16:31:c0:a3:ab: c2:39:00:12:61:77:c9:48:38:d6:ea:71:eb:c7:7e:9b:9c:3f: 7d:df:6a:b5:a9:2c:93:74:84:a7:65:19:d5:a0:6b:79:25:57: fe:66:f1:96:b7:3f:ff:59:9e:fe:94:b2:5d:ee:28:34:46:41: a2:78:ed:e0:27:9b:49:bb:00:76:3e:02:00:1b:50:df:b8:d6: ad:49:a7:b1:e8:5c:52:ff:cf:6d:cd:05:5b:14:f9:13:b7:1c: 14:cf:73:48:47:94:12:6c:82:a1:3b:25:a5:3b:60:16:92:4a: d6:c8:e2:d4:82:54:2f:89:6a:d3:cf:d1:19:1a:63:53:80:9e: de:ab:69:67:35:09:3d:54:70:4e:1d:44:48:18:04:7a:e6:8e: 4f:9f:07:14:4c:ff:df:1c:7f:8a:7e:7a:c5:11:82:93:16:1f: e1:da:d3:5c:77:1b:cd:06:c5:9f:09:08:48:6b:2b:88:d9:7f: 0e:83:b8:f3:10:74:0c:57:f4:06:a5:cb:f6:29:e2:d3:df:80: a7:33:c0:3c:d7:49:27:ce:85:7f:0a:a6:2e:07:41:1a:c7:46: c3:01:ff:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg95YiRk4vvA+5SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGY2YmI2MzEtYmI5OS00YjRmLWE3Y2MtODhkN2QyODc1ODMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBOpZR0NvsvSwxTZ64gjEts6TQOJbDl4aloQ /DSqPD1n72aViPvphvTXY8YVE7PBNXpRIxIH2AH6ZKSHY0vwZ0UQWBvTUVEPYCcz 0CsnQHy7HW45qypAc+L7iqor2l6Y2SiNEQROwTh4FZvOuhrZ5cPmCnl8fs2DyhC2 OZtkBhU4+8d9wR+J7oRlpKsRld1wGjfNCnbbk7/Nx30eIBFihwMyGgpD2z/RcgKu z/VOzJIMgaELFljYbq2LTlKw0u1z+CvN2nHu77NJiwPkVbqXB+DsMfSjyAI3UtQh JpnLEqdsDbruGtItk7gBbCTnayacMpPXF9A4s9K/AqcLj6OKDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBuHgGMbPodTSEebRvvoXJhKWUwTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDEzMjlkYzYtMzMyZi0z NWI1LWJhMTEtODAyODU1Y2I4MTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtifVBNzsmy1kGyp7rx3E+bJ4OKb7XX4SCfsmMpqckWMcCjq8I5ABJh d8lIONbqcevHfpucP33farWpLJN0hKdlGdWga3klV/5m8Za3P/9Znv6Usl3uKDRG QaJ47eAnm0m7AHY+AgAbUN+41q1Jp7HoXFL/z23NBVsU+RO3HBTPc0hHlBJsgqE7 JaU7YBaSStbI4tSCVC+JatPP0RkaY1OAnt6raWc1CT1UcE4dREgYBHrmjk+fBxRM /98cf4p+esURgpMWH+Ha01x3G80GxZ8JCEhrK4jZfw6DuPMQdAxX9Aaly/Yp4tPf gKczwDzXSSfOhX8Kpi4HQRrHRsMB/6o= -----END CERTIFICATE-----Generated at Sun Oct 11 19:37:50 2026 by rpki-client