$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa File: 04d19465-8716-36e7-9064-d31117e6b001.roa (raw, json) Hash identifier: MkDz3AsbapB73PSxw58pFta2krzB9Zl+EgDc5XURBFk= Subject key identifier: 86:6D:F0:FD:98:D4:0D:F5:86:25:E2:1E:CF:09:99:DD:09:A5:DB:0D Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B8F1840E4B1CBB3241F00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 13 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:8f:18:40:e4:b1:cb:b3:24:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4b1304c8-1305-4c76-9f14-dbbd947c290f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:a9:5e:c8:3c:c6:dd:80:da:8e:0e:a6:51: 1a:ca:c8:f5:e3:79:4a:25:2e:db:d1:c7:93:ff:75: ad:a2:dd:df:8b:c1:16:29:2b:e9:88:b5:cb:a1:67: e3:d8:00:f8:18:e7:65:15:0c:d9:77:e6:65:75:3c: 1c:74:65:ed:cb:d8:52:eb:e0:19:d5:33:e6:ff:e6: fd:57:80:27:1a:f7:eb:23:02:7f:a5:9e:68:10:a0: d5:62:c6:5a:cf:0f:3b:96:a9:28:b9:12:f3:7c:d4: 45:d1:08:a4:93:9c:d8:f8:33:f8:c9:7c:10:cf:70: fa:41:30:c5:24:f6:7d:0d:f6:3f:02:7c:5a:72:8e: fc:66:a2:04:31:33:b7:64:72:f1:98:04:d5:5c:f5: 35:94:58:05:3a:d3:57:18:04:b3:39:fc:41:3f:64: 48:81:41:e1:87:80:b7:86:98:63:38:e0:78:30:3b: 69:de:36:86:5b:3a:a3:b4:0d:ff:07:76:5e:82:6f: 39:82:82:50:35:47:02:39:09:aa:fe:02:ed:0f:a7: 06:87:17:ee:fc:8b:dd:56:97:84:71:ca:a9:01:60: 68:6e:f6:8e:e7:05:41:d7:f0:de:f0:e5:86:b0:84: c9:5a:c4:0b:1e:8d:dc:ae:fc:9c:9e:44:cf:76:cc: 5f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:6D:F0:FD:98:D4:0D:F5:86:25:E2:1E:CF:09:99:DD:09:A5:DB:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04d19465-8716-36e7-9064-d31117e6b001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d3:19:d7:6d:03:60:33:f8:04:a2:71:22:c0:c7:f9:95:29: 0b:d0:84:91:9f:23:53:62:b1:c6:e4:fc:31:3b:1a:48:64:d3: a5:75:fc:ae:f0:7c:0b:53:7d:86:6a:3e:a7:92:3b:2f:39:0b: 4e:4f:f5:49:b5:c9:09:91:58:81:49:dd:4d:26:51:ce:07:3d: 72:aa:fe:7b:71:77:3a:4b:a1:bc:00:81:ac:42:86:0f:7b:a8: d7:9d:21:2e:45:e6:d2:46:06:d4:2d:41:09:9d:cb:ac:f0:e0: ca:5d:d1:87:9a:a6:d7:df:f0:57:51:50:0d:d7:2d:ff:bd:7b: 9a:b8:24:f2:51:cc:98:c1:74:bf:02:d9:fe:b4:11:5a:a9:84: 06:6f:61:3c:dd:b4:7e:36:5b:a5:be:2d:6d:17:d4:0e:0f:a1: 14:09:ec:16:83:04:ee:84:13:27:a4:71:0b:c2:b0:e8:96:89: 16:b3:26:5c:b3:34:bc:e3:db:f1:6d:df:17:c0:0c:46:ff:8c: d4:54:dc:aa:e4:e5:0a:21:32:b3:35:6e:23:52:b2:9a:7a:46: 3f:68:15:60:c6:53:47:40:2c:54:7e:a7:d4:31:2f:a2:ff:b5: ed:d5:6e:2b:af:81:57:f2:27:d5:17:aa:2b:87:ed:ad:f6:ea: f2:13:48:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je48YQOSxy7MkHwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGIxMzA0YzgtMTMwNS00Yzc2LTlmMTQtZGJiZDk0N2MyOTBmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeKpXsg8xt2A2o4OplEaysj143lKJS7b0ceT /3Wtot3fi8EWKSvpiLXLoWfj2AD4GOdlFQzZd+ZldTwcdGXty9hS6+AZ1TPm/+b9 V4AnGvfrIwJ/pZ5oEKDVYsZazw87lqkouRLzfNRF0Qikk5zY+DP4yXwQz3D6QTDF JPZ9DfY/Anxaco78ZqIEMTO3ZHLxmATVXPU1lFgFOtNXGASzOfxBP2RIgUHhh4C3 hphjOOB4MDtp3jaGWzqjtA3/B3Zegm85goJQNUcCOQmq/gLtD6cGhxfu/IvdVpeE ccqpAWBobvaO5wVB1/De8OWGsITJWsQLHo3crvycnkTPdsxfYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIZt8P2Y1A31hiXiHs8Jmd0JpdsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRkMTk0NjUtODcxNi0z NmU3LTkwNjQtZDMxMTE3ZTZiMDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDTGddtA2Az+ASicSLAx/mVKQvQhJGfI1Niscbk/DE7Gkhk06V1/K7w fAtTfYZqPqeSOy85C05P9Um1yQmRWIFJ3U0mUc4HPXKq/ntxdzpLobwAgaxChg97 qNedIS5F5tJGBtQtQQmdy6zw4Mpd0Yeaptff8FdRUA3XLf+9e5q4JPJRzJjBdL8C 2f60EVqphAZvYTzdtH42W6W+LW0X1A4PoRQJ7BaDBO6EEyekcQvCsOiWiRazJlyz NLzj2/Ft3xfADEb/jNRU3Krk5QohMrM1biNSspp6Rj9oFWDGU0dALFR+p9QxL6L/ te3VbiuvgVfyJ9UXqiuH7a326vITSFE= -----END CERTIFICATE-----Generated at Sun Oct 11 22:40:49 2026 by rpki-client