$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa File: 05b48221-53bb-3652-a3a5-bd42c683e784.roa (raw, json) Hash identifier: Iyfii7rBpW8k9SANhTuP6D53C0hHahbgpU3INFG/reM= Subject key identifier: 96:7D:16:34:74:0F:0D:14:10:EF:0B:5D:79:64:49:09:78:CC:92:A6 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B88FBBA461E3F2471CAC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.27.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:88:fb:ba:46:1e:3f:24:71:ca:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=89f4393f-b2da-4940-9ae5-6574c88edea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:29:6c:f7:92:9b:42:2d:eb:15:db:e0:72: 58:eb:62:fc:b1:91:a8:2e:c5:ef:e8:de:17:d0:b5: 33:95:f1:ee:e7:64:03:b9:c9:1c:aa:4f:59:4b:7e: de:d6:ae:b8:0e:f2:5f:83:02:8f:50:26:6d:e8:aa: bf:86:a9:d2:fa:2f:d6:8a:f6:1b:19:83:fb:7c:fe: da:85:1f:3f:5a:c7:3c:6f:4e:22:9b:b2:70:91:5e: bf:cc:a4:34:7d:9b:54:ec:ed:3f:16:10:88:68:cf: 52:76:6b:e2:27:f0:59:4f:a1:65:d2:39:45:0d:7f: 7b:87:e6:22:d5:d7:75:32:38:a1:49:61:c1:59:c1: b3:b3:b3:c2:3f:ef:9e:fb:8f:fe:40:3a:ef:f9:1e: bd:f5:cb:2c:e1:31:7d:21:6b:65:24:c8:a7:29:2f: 70:54:d8:c9:90:65:73:c1:c8:02:ab:46:40:bf:0d: 0c:b5:2f:d4:8d:4f:b3:c7:d9:dc:8d:44:9a:c8:b7: 8f:37:17:86:a1:22:b4:4f:85:3a:33:4a:dd:cf:fe: cc:49:8b:7a:51:09:5e:7a:18:68:8a:65:6e:bd:c0: 46:e9:cc:49:7c:b9:c9:82:2a:73:16:b9:09:bc:c6: fa:ee:3b:36:ba:24:19:32:7d:fa:36:2f:e3:69:e6: 80:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:7D:16:34:74:0F:0D:14:10:EF:0B:5D:79:64:49:09:78:CC:92:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/05b48221-53bb-3652-a3a5-bd42c683e784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.27.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:16:cc:89:03:c9:eb:8a:09:99:99:ea:5a:1e:8d:fa:b1:74: 70:8b:64:fa:f4:71:08:a4:c8:fe:6e:60:61:fd:b0:a5:c7:44: 82:60:bb:71:d3:76:1d:29:29:b1:9c:83:62:32:23:c7:79:ef: e7:2d:25:97:5b:e6:e3:42:56:9d:2d:02:29:73:36:69:5f:0d: 28:dc:7b:df:87:8e:92:fd:aa:0d:bb:07:29:0f:c3:69:fd:92: e3:6c:d3:2e:37:6c:c8:f8:7e:41:70:90:e2:e8:10:34:2c:4c: 30:18:60:c5:5c:f8:ad:ce:14:12:d5:bc:ee:e6:d4:0c:41:51: be:5a:1e:3e:29:0c:31:26:17:c5:87:de:37:4e:af:9b:4c:d1: 0c:60:ce:e1:0d:72:85:42:1a:06:af:01:6a:f5:62:c4:ea:cd: 5a:a4:bd:f9:41:d9:ba:71:9b:02:0b:91:29:00:53:8e:91:71: 3c:e9:c4:a0:68:89:a2:c1:3c:e6:27:5c:25:79:e4:e2:21:34: fd:cf:5e:a6:e6:a0:3a:24:3c:cc:0f:90:0c:7d:69:6e:97:8e: 8f:98:d3:77:6d:9b:75:2b:a8:ad:0a:02:62:e4:58:64:73:bf: f6:aa:79:18:d0:b3:0a:79:da:e6:15:96:72:26:35:9f:17:4e: 62:2e:74:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je4j7ukYePyRxysAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ODlmNDM5M2YtYjJkYS00OTQwLTlhZTUtNjU3NGM4OGVkZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDMpbPeSm0It6xXb4HJY62L8sZGoLsXv6N4X 0LUzlfHu52QDuckcqk9ZS37e1q64DvJfgwKPUCZt6Kq/hqnS+i/WivYbGYP7fP7a hR8/Wsc8b04im7JwkV6/zKQ0fZtU7O0/FhCIaM9SdmviJ/BZT6Fl0jlFDX97h+Yi 1dd1MjihSWHBWcGzs7PCP++e+4/+QDrv+R699css4TF9IWtlJMinKS9wVNjJkGVz wcgCq0ZAvw0MtS/UjU+zx9ncjUSayLePNxeGoSK0T4U6M0rdz/7MSYt6UQleehho imVuvcBG6cxJfLnJgipzFrkJvMb67js2uiQZMn36Ni/jaeaAPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ9FjR0Dw0UEO8LXXlkSQl4zJKmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMDViNDgyMjEtNTNiYi0z NjUyLWEzYTUtYmQ0MmM2ODNlNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADwWzIkDyeuKCZmZ6loejfqxdHCLZPr0cQikyP5uYGH9sKXHRIJgu3HT dh0pKbGcg2IyI8d57+ctJZdb5uNCVp0tAilzNmlfDSjce9+HjpL9qg27BykPw2n9 kuNs0y43bMj4fkFwkOLoEDQsTDAYYMVc+K3OFBLVvO7m1AxBUb5aHj4pDDEmF8WH 3jdOr5tM0QxgzuENcoVCGgavAWr1YsTqzVqkvflB2bpxmwILkSkAU46RcTzpxKBo iaLBPOYnXCV55OIhNP3PXqbmoDokPMwPkAx9aW6Xjo+Y03dtm3UrqK0KAmLkWGRz v/aqeRjQswp52uYVlnImNZ8XTmIudEI= -----END CERTIFICATE-----Generated at Mon Sep 28 11:28:19 2026 by rpki-client