$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa File: 04e49c50-9249-3f9c-afea-d6ba87234992.roa (raw, json) Hash identifier: 5crCluqmW6fPd4RKxAICfDiEooh4naFgEt89K8gJX3M= Subject key identifier: 71:CD:58:EA:AB:46:25:6E:31:6C:2B:FB:25:50:99:4C:8C:97:41:83 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D31C2926FB5384FB6A00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d3:1c:29:26:fb:53:84:fb:6a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=0a66fce7-911c-4954-a1f3-628056c10d0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:9a:9d:c8:6f:b3:20:c9:e9:ac:46:83:dc:9b: 4b:da:13:67:ab:f0:a4:2b:8b:bc:c6:2f:9a:77:88: 69:84:ea:03:fb:87:62:5b:cd:32:53:34:46:84:77: 57:2e:4d:fd:b8:e2:d8:2e:30:2d:3e:93:90:7b:ab: c9:bc:72:97:c4:70:ea:9a:f4:6a:92:13:96:26:3c: aa:0e:26:d0:20:2e:b6:cb:00:ef:7c:12:42:32:63: dd:f6:24:ee:de:d7:5d:f9:d1:c2:9e:40:48:5e:f8: 0e:e2:c1:01:dd:4b:1b:34:96:c5:4e:51:b5:a7:76: 18:84:61:2a:c4:70:a7:ae:33:b3:52:8b:9d:a2:20: e9:c5:9f:46:14:f0:97:4b:43:7b:b4:b2:c9:b8:40: 4e:0d:07:8f:c3:4e:0a:dc:1a:82:1e:d0:7a:27:98: 84:bc:9c:9c:bb:38:f5:68:48:c4:65:24:0c:dc:31: 0e:83:d2:dc:31:27:50:6a:cf:1f:38:36:78:cb:fa: 61:42:3b:4f:ae:fb:11:fc:64:bd:57:8c:d1:ef:ee: 21:ea:04:62:67:0c:cf:eb:7f:d8:b5:76:8d:04:ab: cc:94:ea:92:62:7c:9d:4b:8c:8d:e0:d1:46:05:2d: b7:aa:2e:08:ef:8e:58:94:ec:a8:8d:d4:5f:eb:af: 7e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:CD:58:EA:AB:46:25:6E:31:6C:2B:FB:25:50:99:4C:8C:97:41:83 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/04e49c50-9249-3f9c-afea-d6ba87234992.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f5:cd:da:5c:5f:30:66:c6:3d:f8:db:52:a2:60:86:c2:8a: fd:b5:41:cd:da:c2:d6:9e:45:42:50:8c:f1:f8:57:45:75:d7: 74:79:bf:48:a8:88:77:fa:2d:fe:fe:66:41:fa:54:16:5a:f1: d2:5a:ba:30:12:d5:52:b2:49:c4:2d:8f:63:52:c2:36:38:83: 23:a8:25:4f:56:cd:c8:b7:bd:2e:c5:01:02:f3:98:ea:ca:97: 6a:3d:54:ac:89:32:26:71:d4:40:86:37:44:9f:72:2d:0e:d2: e0:7b:69:de:2e:66:55:22:cb:1b:df:18:1f:fc:ff:9a:0f:62: f1:cf:58:9a:53:e1:b1:bf:04:42:65:51:7f:c5:e0:a1:3f:6a: 89:5e:e2:d1:14:e7:c3:f0:50:58:34:52:a3:60:93:66:6c:67: 2e:04:84:76:22:b1:02:f0:cc:13:f6:1b:19:47:9f:b7:7f:3f: 49:64:f7:84:f0:1e:eb:c6:98:b8:c8:02:8f:f5:2f:4e:a6:e2: 12:4b:7f:05:0d:8e:c4:4b:94:fc:d3:a6:c8:94:3e:6b:3c:e5: ee:d2:35:3a:3d:cd:8d:e1:8a:da:99:cd:a4:ad:ad:00:ef:0d: a0:b9:b7:54:21:66:d8:a3:04:e6:2b:7f:81:a4:5b:95:80:55: ca:65:07:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9McKSb7U4T7agAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MGE2NmZjZTctOTExYy00OTU0LWExZjMtNjI4MDU2YzEwZDBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5qdyG+zIMnprEaD3JtL2hNnq/CkK4u8xi+a d4hphOoD+4diW80yUzRGhHdXLk39uOLYLjAtPpOQe6vJvHKXxHDqmvRqkhOWJjyq DibQIC62ywDvfBJCMmPd9iTu3tdd+dHCnkBIXvgO4sEB3UsbNJbFTlG1p3YYhGEq xHCnrjOzUoudoiDpxZ9GFPCXS0N7tLLJuEBODQePw04K3BqCHtB6J5iEvJycuzj1 aEjEZSQM3DEOg9LcMSdQas8fODZ4y/phQjtPrvsR/GS9V4zR7+4h6gRiZwzP63/Y tXaNBKvMlOqSYnydS4yN4NFGBS23qi4I745YlOyojdRf669+BQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHNWOqrRiVuMWwr+yVQmUyMl0GDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDRlNDljNTAtOTI0OS0z ZjljLWFmZWEtZDZiYTg3MjM0OTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEv1zdpcXzBmxj3421KiYIbCiv21Qc3awtaeRUJQjPH4V0V113R5v0io iHf6Lf7+ZkH6VBZa8dJaujAS1VKyScQtj2NSwjY4gyOoJU9Wzci3vS7FAQLzmOrK l2o9VKyJMiZx1ECGN0Sfci0O0uB7ad4uZlUiyxvfGB/8/5oPYvHPWJpT4bG/BEJl UX/F4KE/aole4tEU58PwUFg0UqNgk2ZsZy4EhHYisQLwzBP2GxlHn7d/P0lk94Tw HuvGmLjIAo/1L06m4hJLfwUNjsRLlPzTpsiUPms85e7SNTo9zY3hitqZzaStrQDv DaC5t1QhZtijBOYrf4GkW5WAVcplB3c= -----END CERTIFICATE-----Generated at Tue Sep 29 05:05:22 2026 by rpki-client