$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa File: d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa (raw, json) Hash identifier: JB8wP8eeZSCYa3p58Y+dpjUUjfC6eBvQfSfwndT84L0= Subject key identifier: F4:DF:B3:80:66:2D:04:C2:EC:3E:55:60:15:4A:5B:C2:8E:96:AA:01 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B8B0F8B47939EE2BC9980 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.50.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:8b:0f:8b:47:93:9e:e2:bc:99:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c39816f-d966-45f4-9703-2353c3ac5486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:77:7f:d5:a8:6f:d9:c5:d6:5e:80:17:21:3a: 00:40:43:ee:67:ba:f7:e9:64:02:2f:c5:9d:86:98: c8:6b:b2:ad:f6:93:e6:06:1e:74:44:c7:34:0a:70: 6a:76:a1:8c:6d:7f:9d:c2:1b:60:b5:ec:be:45:9f: 63:41:37:0e:e6:5c:90:cd:fb:00:32:11:30:b0:8d: 51:24:73:8a:fb:98:ee:1d:97:ba:9a:a1:00:ef:ac: dc:b3:f1:71:66:5d:2a:4c:8f:8e:79:f1:41:2e:c4: 49:c6:90:16:05:4b:4c:e5:b9:41:58:08:e6:ae:f4: 07:cc:c0:d7:27:3f:e7:9e:53:37:f8:5b:54:5a:8e: 9a:27:90:04:34:95:23:fa:8a:f5:e2:88:86:da:e7: 06:2a:22:01:38:9b:a5:ed:32:aa:57:bc:ff:e6:ba: 9f:ea:7d:e1:7a:55:ab:cc:3e:b9:04:95:c0:8f:b1: 6f:c3:d8:74:31:e3:9f:ee:4d:e6:b9:20:c4:24:28: fa:43:aa:73:0a:f8:f9:ee:67:58:44:dc:9f:27:16: a9:04:11:0d:1e:ae:0e:82:3d:af:3e:da:18:8a:f9: d5:29:5b:53:fd:0e:5a:7e:48:9e:4c:36:7e:a3:25: a6:8a:8e:64:41:29:ae:33:d1:63:32:14:a6:13:45: 2d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:DF:B3:80:66:2D:04:C2:EC:3E:55:60:15:4A:5B:C2:8E:96:AA:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/d1be1823-f4df-3a7a-8f2e-b655d92361fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.50.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:1f:45:be:0a:d1:48:ee:f9:a8:ac:28:cf:e6:d7:1d:b7:a2: a6:ed:b9:f3:10:86:66:e2:79:5f:8c:a1:46:5b:e8:b9:ac:ee: 52:80:10:0a:16:87:8c:11:45:8c:ee:e0:93:bc:24:27:bc:96: 33:a8:67:a1:7d:5f:ce:cd:91:7b:04:d0:63:e2:48:ce:88:36: 9e:b5:72:69:ec:86:3f:a9:c8:57:b6:72:36:1d:e2:5a:ab:bd: 7d:34:8b:b8:7b:57:e0:72:43:28:5b:be:c5:61:60:31:b1:2f: 3a:f1:14:20:dd:2e:ed:e8:75:4f:35:a7:d6:f4:e5:2d:b6:78: d0:1e:46:53:4e:63:b9:ac:75:4d:35:ab:a0:14:5c:b3:9e:14: 48:29:67:17:bc:b8:85:1a:84:de:47:c3:34:7c:77:fa:7b:07: d4:4e:6c:fd:d2:37:03:54:4c:05:39:eb:a1:d3:76:77:d6:50: f1:89:e3:1a:e9:bd:4d:97:f5:b8:4e:0d:3c:ff:ae:26:bc:32: 6a:e0:2d:44:e8:1b:92:00:cb:ba:62:c4:3a:e9:4a:7d:57:ed: 14:64:dd:bb:22:01:c4:77:fe:af:aa:93:02:ff:28:a0:e9:d5: 7b:09:e3:3d:fc:f2:79:c0:b7:39:12:42:60:ec:b8:1c:8e:94: ba:7f:43:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je4sPi0eTnuK8mYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmMzOTgxNmYtZDk2Ni00NWY0LTk3MDMtMjM1M2MzYWM1NDg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHd/1ahv2cXWXoAXIToAQEPuZ7r36WQCL8Wd hpjIa7Kt9pPmBh50RMc0CnBqdqGMbX+dwhtgtey+RZ9jQTcO5lyQzfsAMhEwsI1R JHOK+5juHZe6mqEA76zcs/FxZl0qTI+OefFBLsRJxpAWBUtM5blBWAjmrvQHzMDX Jz/nnlM3+FtUWo6aJ5AENJUj+or14oiG2ucGKiIBOJul7TKqV7z/5rqf6n3helWr zD65BJXAj7Fvw9h0MeOf7k3muSDEJCj6Q6pzCvj57mdYRNyfJxapBBENHq4Ogj2v PtoYivnVKVtT/Q5afkieTDZ+oyWmio5kQSmuM9FjMhSmE0UtKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPTfs4BmLQTC7D5VYBVKW8KOlqoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZDFiZTE4MjMtZjRkZi0z YTdhLThmMmUtYjY1NWQ5MjM2MWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABUfRb4K0Uju+aisKM/m1x23oqbtufMQhmbieV+MoUZb6Lms7lKAEAoW h4wRRYzu4JO8JCe8ljOoZ6F9X87NkXsE0GPiSM6INp61cmnshj+pyFe2cjYd4lqr vX00i7h7V+ByQyhbvsVhYDGxLzrxFCDdLu3odU81p9b05S22eNAeRlNOY7msdU01 q6AUXLOeFEgpZxe8uIUahN5HwzR8d/p7B9RObP3SNwNUTAU566HTdnfWUPGJ4xrp vU2X9bhODTz/ria8MmrgLUToG5IAy7pixDrpSn1X7RRk3bsiAcR3/q+qkwL/KKDp 1XsJ4z388nnAtzkSQmDsuByOlLp/QyY= -----END CERTIFICATE-----Generated at Sun Sep 27 01:25:49 2026 by rpki-client