$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/115741c0-b51b-339f-a64d-8e305c378f29.roa File: 115741c0-b51b-339f-a64d-8e305c378f29.roa (raw, json) Hash identifier: FTqBooUoBNefTKqrGBcfv7UU0vVEiDi33Ui+yXyvq3s= Subject key identifier: F2:40:B6:52:1A:AB:1C:F2:DE:92:CA:66:EA:34:95:C4:FB:8E:11:43 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BFF3DE932D960A120EFC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/115741c0-b51b-339f-a64d-8e305c378f29.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:ff:3d:e9:32:d9:60:a1:20:ef:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4ae55dff-00f1-433a-81f3-6b7d02575ee9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:89:a2:fd:87:59:2c:28:2e:50:d9:79:5b:5b: ff:c4:ec:4f:e8:ec:31:00:b6:5f:55:bc:c8:a5:cf: 97:1d:13:c3:de:33:11:61:10:c9:f5:97:fa:7a:69: f0:ba:2c:a8:11:24:d9:34:bd:3c:cc:b9:e4:9b:33: 8c:0a:ee:c3:c4:bb:64:0e:94:df:92:c9:78:a6:c8: 32:33:92:9a:a7:03:3b:f8:b9:24:2e:bd:29:89:fc: 24:5f:f0:21:1c:bc:7c:0a:2c:41:d7:33:ee:a2:1a: be:53:c4:be:de:6a:d4:a4:d1:f4:2e:35:d6:58:11: e0:fe:15:fa:21:73:63:23:ab:d5:db:ae:da:92:14: fd:96:70:a4:da:d0:d1:b7:2f:31:c5:c1:4b:19:12: 05:68:6b:6f:61:81:19:cd:45:e9:d4:a7:13:17:15: 8a:60:a8:45:dc:97:68:6e:c9:89:7b:ef:a5:f9:54: c4:76:eb:62:d3:20:96:9f:41:df:55:59:21:f8:c2: bd:a3:65:dd:85:59:91:46:68:d6:74:f7:2f:d2:08: fc:40:02:f8:5b:94:69:b7:1b:45:c1:a3:41:46:31: d2:7b:ec:89:a1:1a:ba:78:57:f1:e8:50:9e:c8:a9: db:c4:60:b9:99:56:c9:86:0e:5c:34:ba:03:8e:d3: d6:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:40:B6:52:1A:AB:1C:F2:DE:92:CA:66:EA:34:95:C4:FB:8E:11:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/115741c0-b51b-339f-a64d-8e305c378f29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:eb:15:0e:bb:70:88:4a:c2:d9:7d:2f:ed:c9:fe:08:14:f5: bb:2e:f0:3e:3d:5e:68:a8:c6:e8:8a:2f:6f:c0:90:82:dd:48: fb:19:50:db:62:5a:4d:90:09:1c:02:fe:8d:7f:be:0f:a4:ba: 71:3c:d1:15:ce:2f:39:50:23:71:67:30:f2:a7:e7:95:b2:5a: e9:66:86:0f:3e:38:9c:f9:7e:00:b4:42:6b:08:9e:b4:a8:95: c6:0e:e2:09:96:8a:29:46:0b:d1:81:6b:78:b1:3a:bd:7c:f5: c6:d8:73:ae:b8:30:bb:c6:a6:c2:12:47:e3:54:9b:b5:7e:c0: 65:42:d7:3f:c5:f8:72:ac:ee:a6:cd:de:40:31:8e:71:5c:06: 52:8d:b8:bd:a7:39:91:09:1b:94:3c:c7:cb:99:de:51:84:b5: 29:88:8a:4d:07:0e:8a:3e:6b:25:17:e0:7b:66:15:31:40:e0: 38:63:cd:e2:28:69:b1:41:23:3c:1b:38:b0:c1:13:e8:cc:41: 79:68:ee:3b:05:40:c2:a6:fe:52:a0:e2:a2:42:11:36:62:2b: bc:89:71:d9:b6:8c:87:6f:de:de:67:56:6f:31:5e:43:d8:8a: 6e:59:de:f5:90:7a:02:d4:c6:31:3b:7e:7c:86:36:76:28:ae: 96:2b:b1:e2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je/896TLZYKEg78AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGFlNTVkZmYtMDBmMS00MzNhLTgxZjMtNmI3ZDAyNTc1ZWU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkomi/YdZLCguUNl5W1v/xOxP6OwxALZfVbzI pc+XHRPD3jMRYRDJ9Zf6emnwuiyoESTZNL08zLnkmzOMCu7DxLtkDpTfksl4psgy M5KapwM7+LkkLr0pifwkX/AhHLx8CixB1zPuohq+U8S+3mrUpNH0LjXWWBHg/hX6 IXNjI6vV267akhT9lnCk2tDRty8xxcFLGRIFaGtvYYEZzUXp1KcTFxWKYKhF3Jdo bsmJe++l+VTEduti0yCWn0HfVVkh+MK9o2XdhVmRRmjWdPcv0gj8QAL4W5RptxtF waNBRjHSe+yJoRq6eFfx6FCeyKnbxGC5mVbJhg5cNLoDjtPW9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJAtlIaqxzy3pLKZuo0lcT7jhFDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTE1NzQxYzAtYjUxYi0z MzlmLWE2NGQtOGUzMDVjMzc4ZjI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3dMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANbrFQ67cIhKwtl9L+3J/ggU9bsu8D49XmioxuiKL2/AkILdSPsZUNti Wk2QCRwC/o1/vg+kunE80RXOLzlQI3FnMPKn55WyWulmhg8+OJz5fgC0QmsInrSo lcYO4gmWiilGC9GBa3ixOr189cbYc664MLvGpsISR+NUm7V+wGVC1z/F+HKs7qbN 3kAxjnFcBlKNuL2nOZEJG5Q8x8uZ3lGEtSmIik0HDoo+ayUX4HtmFTFA4DhjzeIo abFBIzwbOLDBE+jMQXlo7jsFQMKm/lKg4qJCETZiK7yJcdm2jIdv3t5nVm8xXkPY im5Z3vWQegLUxjE7fnyGNnYorpYrseI= -----END CERTIFICATE-----Generated at Sat Oct 3 11:15:08 2026 by rpki-client