$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa File: 138e208c-b64d-35dc-82cf-e05f0cba2043.roa (raw, json) Hash identifier: biaQSm7fWILCjqmtPU9k79I7J3brDFEX/a1J+rbDFnU= Subject key identifier: 5E:CC:51:3A:25:54:6C:BA:83:54:1D:EE:12:0C:5B:AA:D4:9F:A2:4F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BA65287EEF951A4A5F000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.129.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:a6:52:87:ee:f9:51:a4:a5:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d0e2f722-da2f-4961-bc36-22aa52c1ab5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:d9:9c:81:3a:30:c2:53:b3:bb:e1:57:44:19: 73:52:27:c0:82:db:8d:9c:88:94:19:a7:6e:14:2d: d1:39:9d:70:35:c4:5d:43:0f:c2:40:30:91:3f:c8: e7:7f:dd:ef:a6:cb:3d:a3:c6:c1:c6:db:47:ae:21: 23:90:de:a5:fb:9a:34:cd:40:78:d5:9b:48:a8:f5: 9a:20:08:12:6d:7a:6d:47:58:4e:82:28:16:2a:3d: b9:5d:cf:9c:8d:f0:88:a0:62:d2:d4:0d:d6:c0:41: 65:92:b8:f0:b7:84:4e:20:15:36:8a:c9:d9:e8:24: 95:94:0e:12:37:83:d0:6f:38:0d:e1:89:ad:ed:21: 5c:15:d8:38:17:9d:85:f8:e7:c3:c2:07:9b:ab:3b: 3e:e0:74:85:e1:89:0a:32:65:c7:04:59:06:1c:08: 17:43:c7:bc:e3:52:03:6b:9a:ea:77:9d:85:05:3b: d9:0f:25:3c:40:26:86:5a:8d:4d:a9:4e:28:83:50: b0:7d:53:ef:3d:e7:4f:54:77:47:ff:7a:55:c5:9f: 10:f2:15:f3:34:e0:2f:5e:99:32:5e:a1:04:20:55: 99:c4:3a:9a:9b:f4:38:d4:60:4b:7c:a2:a3:52:a4: ee:a3:01:a4:b6:ec:8f:9c:d6:22:3c:71:c6:2b:9d: ea:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CC:51:3A:25:54:6C:BA:83:54:1D:EE:12:0C:5B:AA:D4:9F:A2:4F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/138e208c-b64d-35dc-82cf-e05f0cba2043.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.129.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d6:84:09:2d:a5:69:ea:1c:4a:f8:b0:f3:e0:16:c4:a4:eb:c2: 94:5a:11:03:bb:9d:82:1d:2a:c5:45:d4:3f:3b:79:7d:1f:a2: b3:95:ef:58:95:be:46:82:0d:bf:f0:f0:53:c8:c0:bc:7d:d9: 3c:09:06:98:e4:ee:2c:94:a1:1a:27:10:b5:37:6c:73:c8:ea: 25:36:78:43:84:3a:57:90:f7:f0:df:48:6a:07:74:c0:e5:06: eb:45:5d:a8:b3:e1:a2:f9:27:fb:6e:25:c3:c7:18:92:1e:0c: 83:61:28:c8:b9:f3:fb:98:04:96:d2:06:80:ed:b4:ed:2c:e4: 4c:9e:84:06:d1:30:7b:ed:24:ea:14:c4:4c:93:87:69:f0:18: ce:51:f6:c8:fe:21:02:c7:e0:47:9d:9b:00:7a:0a:5d:3a:95: 43:91:73:f6:78:0d:ee:19:db:a3:d7:7b:4b:a9:ee:52:7f:ee: 4c:14:51:04:97:00:46:19:64:9a:d8:57:00:73:fc:02:5d:31: f2:bb:86:99:70:16:3d:5c:8c:f1:f1:ba:55:de:3e:af:75:75: 6a:6f:0f:33:2c:d0:90:86:72:a3:0a:b7:4b:3e:a4:97:f8:39: 27:56:ee:a1:2c:38:0b:b6:2a:c6:46:bd:7f:7b:78:49:8b:be: 5a:17:b4:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je6ZSh+75UaSl8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDBlMmY3MjItZGEyZi00OTYxLWJjMzYtMjJhYTUyYzFhYjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAktmcgTowwlOzu+FXRBlzUifAgtuNnIiUGadu FC3ROZ1wNcRdQw/CQDCRP8jnf93vpss9o8bBxttHriEjkN6l+5o0zUB41ZtIqPWa IAgSbXptR1hOgigWKj25Xc+cjfCIoGLS1A3WwEFlkrjwt4ROIBU2isnZ6CSVlA4S N4PQbzgN4Ymt7SFcFdg4F52F+OfDwgebqzs+4HSF4YkKMmXHBFkGHAgXQ8e841ID a5rqd52FBTvZDyU8QCaGWo1NqU4og1CwfVPvPedPVHdH/3pVxZ8Q8hXzNOAvXpky XqEEIFWZxDqam/Q41GBLfKKjUqTuowGktuyPnNYiPHHGK53qFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7MUTolVGy6g1Qd7hIMW6rUn6JPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTM4ZTIwOGMtYjY0ZC0z NWRjLTgyY2YtZTA1ZjBjYmEyMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPOBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANaECS2laeocSviw8+AWxKTrwpRaEQO7nYIdKsVF1D87eX0forOV71iV vkaCDb/w8FPIwLx92TwJBpjk7iyUoRonELU3bHPI6iU2eEOEOleQ9/DfSGoHdMDl ButFXaiz4aL5J/tuJcPHGJIeDINhKMi58/uYBJbSBoDttO0s5EyehAbRMHvtJOoU xEyTh2nwGM5R9sj+IQLH4EedmwB6Cl06lUORc/Z4De4Z26PXe0up7lJ/7kwUUQSX AEYZZJrYVwBz/AJdMfK7hplwFj1cjPHxulXePq91dWpvDzMs0JCGcqMKt0s+pJf4 OSdW7qEsOAu2KsZGvX97eEmLvloXtL4= -----END CERTIFICATE-----Generated at Fri Sep 25 17:14:26 2026 by rpki-client