$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa File: 01207d9e-3598-33a2-9041-7a4fafffdb25.roa (raw, json) Hash identifier: gYzeZrZ0FfIwA5IsvPGAYd5OdkE2ZGGHabBxW5jL/0Q= Subject key identifier: 11:DF:6A:7B:74:EE:4D:2F:66:25:23:E6:D3:3E:D5:69:A1:65:A2:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E4D73125F487269ACB00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.96.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e4:d7:31:25:f4:87:26:9a:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=e3081fe5-c907-41b7-a001-81d05ca95192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:cf:c2:b3:af:4c:f1:dd:58:f6:59:26:70:32: c8:d2:dc:a4:cd:5e:ba:a9:95:65:f8:8f:19:55:cf: 04:11:a5:13:8c:a9:ed:d6:04:fb:4b:e6:6a:63:1a: a7:86:dd:5a:f3:29:ce:ab:e8:cc:10:60:52:0e:28: 0e:d0:ae:55:ac:53:c4:d7:d4:1e:b9:4d:8a:8b:d9: 8d:58:27:77:7d:2d:04:b0:5d:8e:b5:97:78:f0:37: af:74:bf:e6:76:0a:8d:c0:39:08:17:3d:f9:b2:01: 62:78:ff:8b:f9:ae:00:4c:99:1e:f5:3b:85:6d:6f: ae:48:ef:4f:a7:a0:64:a3:1f:4d:9d:37:95:a2:68: d7:4c:a0:84:72:2f:a5:18:2e:b4:5c:d5:62:0b:33: 20:a3:fb:92:2e:c5:9b:08:14:49:35:b7:d3:30:fd: 94:22:5e:12:fc:b6:18:bb:45:d0:8d:91:09:c6:e9: 4d:b5:f3:65:2d:6f:34:af:04:63:06:91:46:c1:eb: 7d:74:30:b4:cd:2e:ce:2e:ee:78:9b:f2:48:d7:a4: 6f:7c:0e:45:c5:13:28:d9:5c:e5:1c:e9:c7:25:e1: 5c:ad:ce:49:29:0b:3e:18:c2:a8:9f:d4:2a:f9:6e: e1:11:4e:6a:6d:5b:33:f5:73:de:b3:70:a9:7d:fd: 1e:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:DF:6A:7B:74:EE:4D:2F:66:25:23:E6:D3:3E:D5:69:A1:65:A2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/01207d9e-3598-33a2-9041-7a4fafffdb25.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.96.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:e6:75:9c:a0:78:dc:00:7b:c5:a6:23:0c:22:46:8a:16:8b: a8:52:41:b7:53:e2:ad:62:09:60:f1:d6:e1:7f:cb:e6:cb:43: 1f:54:79:03:f7:a3:99:0e:f3:f8:bb:73:c5:27:ed:2a:3b:05: 96:1c:72:57:a9:b3:a9:6c:6a:77:07:7b:52:22:c9:e6:0f:7a: 94:7c:a4:46:7b:1d:5b:c1:0d:bb:ef:86:93:1f:f1:a9:21:4e: 93:b0:5d:0b:44:ba:2a:e7:95:93:ed:68:21:57:fc:aa:cc:f4: f9:4d:ec:c6:60:68:ac:ff:0d:33:ac:7f:19:2c:81:14:04:08: 2b:e8:92:39:65:89:9c:c0:18:87:ed:87:4a:8f:85:61:ce:e8: 8a:22:c3:c0:98:63:19:a5:a7:dd:96:3f:ea:81:2c:d8:5c:0e: 8a:fb:b4:68:eb:6f:f7:85:a1:60:c2:92:71:b3:44:03:d0:c1: 1c:83:29:4e:6e:dd:ea:26:cc:0e:82:bf:fe:08:25:77:91:0d: 6b:c4:80:b4:57:7f:7f:8f:13:5f:9e:8d:d4:3d:59:14:91:84: 75:53:e7:9b:2d:65:60:f6:ec:bf:7b:65:c2:a5:46:bd:81:e6: f8:d4:e8:d5:61:2f:03:91:ca:cd:b8:2f:12:18:6a:0b:85:96: df:87:f1:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+TXMSX0hyaaywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZTMwODFmZTUtYzkwNy00MWI3LWEwMDEtODFkMDVjYTk1MTkyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyM/Cs69M8d1Y9lkmcDLI0tykzV66qZVl+I8Z Vc8EEaUTjKnt1gT7S+ZqYxqnht1a8ynOq+jMEGBSDigO0K5VrFPE19QeuU2Ki9mN WCd3fS0EsF2OtZd48DevdL/mdgqNwDkIFz35sgFieP+L+a4ATJke9TuFbW+uSO9P p6Bkox9NnTeVomjXTKCEci+lGC60XNViCzMgo/uSLsWbCBRJNbfTMP2UIl4S/LYY u0XQjZEJxulNtfNlLW80rwRjBpFGwet9dDC0zS7OLu54m/JI16RvfA5FxRMo2Vzl HOnHJeFcrc5JKQs+GMKon9Qq+W7hEU5qbVsz9XPes3Cpff0epQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHfant07k0vZiUj5tM+1WmhZaI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDEyMDdkOWUtMzU5OC0z M2EyLTkwNDEtN2E0ZmFmZmZkYjI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPmdZygeNwAe8WmIwwiRooWi6hSQbdT4q1iCWDx1uF/y+bLQx9UeQP3 o5kO8/i7c8Un7So7BZYccleps6lsancHe1IiyeYPepR8pEZ7HVvBDbvvhpMf8akh TpOwXQtEuirnlZPtaCFX/KrM9PlN7MZgaKz/DTOsfxksgRQECCvokjlliZzAGIft h0qPhWHO6Ioiw8CYYxmlp92WP+qBLNhcDor7tGjrb/eFoWDCknGzRAPQwRyDKU5u 3eomzA6Cv/4IJXeRDWvEgLRXf3+PE1+ejdQ9WRSRhHVT55stZWD27L97ZcKlRr2B 5vjU6NVhLwORys24LxIYaguFlt+H8aI= -----END CERTIFICATE-----Generated at Sun Sep 27 01:25:12 2026 by rpki-client