$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa File: f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa (raw, json) Hash identifier: owaTXRekyrtVzYE1ICIlYaWbCfxNTs7uHqjA+ixSfV8= Subject key identifier: B4:87:D1:1C:FB:9B:E6:5E:E5:65:A5:74:A9:64:25:D7:0E:39:5A:78 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983DB37E09DBF2A55DF7680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:db:37:e0:9d:bf:2a:55:df:76:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a36dff76-3fee-4d3a-bd0c-3c3d89fc983e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:73:94:84:cf:7a:5f:82:37:04:c0:a8:70:58: f2:c5:b0:43:30:e4:c2:3c:39:c0:34:35:eb:11:a9: 84:37:5e:23:fd:11:c9:7a:79:9a:b5:d7:67:f9:e6: ed:c1:f6:79:bb:9b:26:b4:8a:37:1d:10:15:b5:d1: d7:56:27:0b:7e:c0:31:fe:99:08:6a:7e:e6:39:57: e0:f5:68:83:67:c4:a5:01:0b:9f:8c:cb:29:05:ec: c5:66:b7:91:a7:6f:b5:60:f9:9c:66:bf:87:87:0e: d3:20:ec:ef:74:00:47:18:39:6f:3b:74:e4:7e:7a: f9:eb:b0:a8:a0:9f:2f:1d:14:da:5c:38:85:26:9d: d8:0b:8f:5c:d9:76:4e:fa:d5:e4:9c:ba:27:8c:52: 11:59:b9:9f:d8:e1:17:36:9c:2f:1e:79:2a:b4:9d: d5:bb:f2:34:df:b8:36:c8:bd:b4:61:7e:ee:ef:dc: 2d:59:cd:cf:7c:87:cd:f4:f8:41:94:02:0b:bc:19: 0d:e0:f2:63:0a:b9:ea:be:35:b0:f0:3d:cd:35:9a: f2:68:00:b5:cf:de:1b:78:98:3c:98:8f:b0:36:b3: 6c:7a:61:20:8c:c4:b1:45:fb:d4:b4:01:54:ac:9f: be:69:d4:8d:a0:65:3e:1a:4a:04:85:73:98:04:39: b8:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:87:D1:1C:FB:9B:E6:5E:E5:65:A5:74:A9:64:25:D7:0E:39:5A:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/f77bd9bb-ae6f-37a9-b114-3de73ae55e09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:b4:58:83:05:2b:9c:86:7d:f7:f2:f5:7a:b2:46:45:a3:1f: 75:23:2f:c1:86:0a:a9:4e:47:51:33:e7:4a:76:62:d4:ea:3f: 90:de:f8:93:0d:3a:9f:10:90:11:98:f5:c0:42:31:7c:47:ff: e1:20:48:19:14:45:ac:e3:c9:11:e7:84:d7:b3:41:a7:ac:ef: 2e:97:cf:a2:a6:4d:33:fe:ca:6e:2a:f5:af:9d:ed:76:bd:97: 7c:ab:53:1f:53:81:70:a2:87:ec:a5:8d:7b:fd:bd:df:6d:9e: db:a8:9c:bd:d6:12:b1:6f:ee:ad:55:28:81:45:ff:0b:7b:91: 10:46:98:2d:c8:16:de:34:ff:64:e7:98:75:7f:9d:c0:56:56: 11:60:2c:0d:63:e1:3e:66:29:31:94:41:83:92:48:90:1e:bf: a7:98:82:49:82:6b:19:e2:11:87:4a:f7:21:65:c2:54:c0:2d: 3b:84:94:bd:af:a8:8a:0a:45:a5:06:fd:e1:62:7b:98:cf:dd: e5:1c:ee:bf:6d:0d:60:71:53:8f:5d:f9:e6:b9:71:8a:0a:8a: d6:dc:a1:4d:44:67:a3:cf:97:44:04:93:e0:95:50:ba:65:c3: a8:ac:17:84:ef:98:04:2a:f3:e7:5f:b1:4c:f5:ff:a2:9a:06: 10:97:21:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9s34J2/KlXfdoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTM2ZGZmNzYtM2ZlZS00ZDNhLWJkMGMtM2MzZDg5ZmM5ODNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXOUhM96X4I3BMCocFjyxbBDMOTCPDnANDXr EamEN14j/RHJenmatddn+ebtwfZ5u5smtIo3HRAVtdHXVicLfsAx/pkIan7mOVfg 9WiDZ8SlAQufjMspBezFZreRp2+1YPmcZr+Hhw7TIOzvdABHGDlvO3Tkfnr567Co oJ8vHRTaXDiFJp3YC49c2XZO+tXknLonjFIRWbmf2OEXNpwvHnkqtJ3Vu/I037g2 yL20YX7u79wtWc3PfIfN9PhBlAILvBkN4PJjCrnqvjWw8D3NNZryaAC1z94beJg8 mI+wNrNsemEgjMSxRfvUtAFUrJ++adSNoGU+GkoEhXOYBDm4hQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLSH0Rz7m+Ze5WWldKlkJdcOOVp4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvZjc3YmQ5YmItYWU2Zi0z N2E5LWIxMTQtM2RlNzNhZTU1ZTA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFK0WIMFK5yGfffy9XqyRkWjH3UjL8GGCqlOR1Ez50p2YtTqP5De+JMN Op8QkBGY9cBCMXxH/+EgSBkURazjyRHnhNezQaes7y6Xz6KmTTP+ym4q9a+d7Xa9 l3yrUx9TgXCih+yljXv9vd9tntuonL3WErFv7q1VKIFF/wt7kRBGmC3IFt40/2Tn mHV/ncBWVhFgLA1j4T5mKTGUQYOSSJAev6eYgkmCaxniEYdK9yFlwlTALTuElL2v qIoKRaUG/eFie5jP3eUc7r9tDWBxU49d+ea5cYoKitbcoU1EZ6PPl0QEk+CVULpl w6isF4TvmAQq8+dfsUz1/6KaBhCXIQk= -----END CERTIFICATE-----Generated at Mon Sep 28 21:47:23 2026 by rpki-client