$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa File: dffb8d64-fd82-302e-ada2-5e3a69317b50.roa (raw, json) Hash identifier: NgN0gK1xjKoJP32a53J8N52dQloOQ1Zol7ImUEKSt88= Subject key identifier: 64:C8:F7:67:25:8C:4D:A8:2D:94:27:10:BF:B2:2E:8D:5F:7E:4F:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BFD9D927E9EF2FB395F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.208.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:fd:9d:92:7e:9e:f2:fb:39:5f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a4e33b99-c535-4f2e-b9ab-12db7230b54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4b:78:4d:d2:c1:da:f1:e9:4e:38:93:76:ea: 0a:ae:c3:14:e8:d8:49:4b:82:ee:d2:cf:00:68:5a: c9:cf:4d:c4:83:26:1b:c4:35:a8:1f:f7:75:95:50: 33:f2:56:38:95:5e:5f:69:00:4a:ce:b7:2c:2a:2f: 2f:30:8c:8c:b5:e2:a5:a4:f9:2a:29:12:a1:f5:a4: 09:29:c8:95:5f:e3:45:1d:e7:5f:a8:87:75:9a:8a: 17:cc:2a:6e:ee:ac:d3:19:5f:3e:ae:e2:2f:ca:48: d4:e9:00:40:73:d2:98:3e:46:91:8c:b8:62:e5:86: c1:34:4d:9c:44:25:1d:fd:b5:d3:77:a1:3d:cc:45: 95:19:50:b9:bc:47:a3:12:b0:e0:c9:ed:39:42:36: 72:7c:17:5d:25:cf:b5:69:68:8d:f2:ee:3d:73:15: 37:28:a4:51:17:f8:61:3c:f3:04:fb:c8:4a:86:a1: 6a:67:a2:07:2d:eb:37:69:e3:49:20:0e:07:36:85: da:09:f1:ed:2f:e9:9f:fb:bb:95:2d:07:1b:d1:ec: 2d:04:06:a9:81:7d:19:0f:c6:50:34:29:0a:2b:29: 1c:2d:a7:14:d2:f1:bb:f5:ea:c7:a2:86:77:c3:93: ef:ed:0b:23:b4:16:55:de:06:1c:20:fc:f8:37:f4: b0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:C8:F7:67:25:8C:4D:A8:2D:94:27:10:BF:B2:2E:8D:5F:7E:4F:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/dffb8d64-fd82-302e-ada2-5e3a69317b50.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.208.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:97:a2:aa:12:29:f7:d5:96:b3:4d:7b:f5:77:13:57:2f:8c: e5:54:4c:a4:ef:a3:76:21:e8:3d:f8:d3:07:a2:cc:19:b8:ee: eb:fd:56:9c:9e:cd:b9:e7:ac:21:ed:10:73:3e:b2:b8:a0:2c: 58:66:c3:b3:6d:f6:cf:90:27:90:99:31:cc:b5:72:de:a5:15: 0c:59:a4:bf:39:8e:3d:fb:2c:32:53:86:f9:3d:8e:49:0d:8d: fc:f7:24:41:f7:a6:0e:ae:a4:4d:06:8b:b1:79:e4:75:bc:e0: e7:31:de:fb:f5:19:4a:55:14:94:1f:33:24:9e:22:6e:e5:26: 60:d0:4a:07:ff:59:09:f8:df:a0:3f:85:18:b4:92:07:e5:bf: a6:b5:20:00:6a:69:6f:32:cb:e5:db:e0:08:dc:97:52:3b:d4: fd:54:6e:05:17:d6:67:52:c9:3e:76:58:cf:4f:58:c0:e5:d4: 07:eb:48:d4:21:9d:cf:bf:87:30:8b:1c:0a:67:4e:e0:f6:42: ed:b6:47:a4:c0:62:21:b2:90:28:ee:2f:10:75:cf:92:c8:e0: 7a:8c:7f:84:65:6a:f3:59:f6:48:aa:89:96:52:93:99:78:d9: 70:45:1a:77:32:63:32:9f:9c:7e:fd:e0:38:e1:e7:f0:f5:92: 14:50:73:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je/2dkn6e8vs5X4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTRlMzNiOTktYzUzNS00ZjJlLWI5YWItMTJkYjcyMzBiNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0t4TdLB2vHpTjiTduoKrsMU6NhJS4Lu0s8A aFrJz03EgyYbxDWoH/d1lVAz8lY4lV5faQBKzrcsKi8vMIyMteKlpPkqKRKh9aQJ KciVX+NFHedfqId1mooXzCpu7qzTGV8+ruIvykjU6QBAc9KYPkaRjLhi5YbBNE2c RCUd/bXTd6E9zEWVGVC5vEejErDgye05QjZyfBddJc+1aWiN8u49cxU3KKRRF/hh PPME+8hKhqFqZ6IHLes3aeNJIA4HNoXaCfHtL+mf+7uVLQcb0ewtBAapgX0ZD8ZQ NCkKKykcLacU0vG79erHooZ3w5Pv7QsjtBZV3gYcIPz4N/SwVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTI92cljE2oLZQnEL+yLo1ffk+FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZGZmYjhkNjQtZmQ4Mi0z MDJlLWFkYTItNWUzYTY5MzE3YjUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOXoqoSKffVlrNNe/V3E1cvjOVUTKTvo3Yh6D340weizBm47uv9Vpye zbnnrCHtEHM+srigLFhmw7Nt9s+QJ5CZMcy1ct6lFQxZpL85jj37LDJThvk9jkkN jfz3JEH3pg6upE0Gi7F55HW84Ocx3vv1GUpVFJQfMySeIm7lJmDQSgf/WQn436A/ hRi0kgflv6a1IABqaW8yy+Xb4Ajcl1I71P1UbgUX1mdSyT52WM9PWMDl1AfrSNQh nc+/hzCLHApnTuD2Qu22R6TAYiGykCjuLxB1z5LI4HqMf4RlavNZ9kiqiZZSk5l4 2XBFGncyYzKfnH794Djh5/D1khRQc/M= -----END CERTIFICATE-----Generated at Fri Sep 25 18:25:39 2026 by rpki-client