$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15b7a51a-8b39-326a-bb1d-946487ca5e9e.roa File: 15b7a51a-8b39-326a-bb1d-946487ca5e9e.roa (raw, json) Hash identifier: Ydk3Lm9TtD7L0sY1zj5CtiDebFS4Pp+QUh5lclbkcb8= Subject key identifier: 71:65:1F:02:10:8B:4A:24:EB:56:C3:C6:9B:26:26:8C:1A:90:C2:0A Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983EB13B147B2CEF486AA00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15b7a51a-8b39-326a-bb1d-946487ca5e9e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:eb:13:b1:47:b2:ce:f4:86:aa:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=b6f5d706-6cc1-4bdd-b25d-12bd319f8012 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:ac:de:b0:a2:50:3c:31:40:b7:f5:14:c1:14: e1:b4:94:e2:78:0b:ff:a9:e3:32:4a:dc:52:36:b0: a0:3b:17:76:5d:f0:c2:d3:7c:69:e8:80:b7:7b:87: b3:be:15:28:16:7d:a7:c4:3b:ae:9b:f5:4c:d0:8c: aa:0a:e5:c5:ed:b7:4b:85:61:e9:83:59:49:70:9f: b3:4c:7a:73:ec:34:b9:2c:27:5a:20:37:65:e9:3d: 94:ce:6b:42:e1:1e:08:b0:63:87:91:9a:27:bc:c2: 09:c0:0b:0b:52:96:9e:d8:b7:59:47:14:fc:1f:31: ba:8e:68:a8:9f:40:3f:ac:d7:97:8d:ad:90:13:14: 04:bc:62:67:8e:bd:d2:07:cd:e1:06:54:e9:88:4a: c7:57:85:06:47:0a:71:a3:79:45:af:c0:23:66:ff: ad:fc:73:62:8f:a9:55:b3:13:be:9c:f1:d0:08:6b: 00:51:ff:1e:d6:55:bc:86:92:f0:5e:28:74:67:72: e5:45:b0:32:43:b2:e6:81:64:11:42:76:29:5c:ee: b8:89:03:78:4d:19:5b:24:13:33:94:44:ef:01:31: a3:40:53:89:9b:a9:3e:a4:02:0f:3f:b9:9a:ad:67: 9c:04:5b:00:3b:7b:46:07:e4:02:b7:3d:d9:a9:7d: 67:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:65:1F:02:10:8B:4A:24:EB:56:C3:C6:9B:26:26:8C:1A:90:C2:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/15b7a51a-8b39-326a-bb1d-946487ca5e9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:c6:08:2b:57:9a:41:96:10:68:1e:4b:fc:ba:de:c6:7d:59: 07:f7:9f:98:59:5b:2d:4d:13:1e:fc:3d:0b:84:26:2f:41:a5: 45:45:d3:a6:a9:5a:f9:b7:c5:0e:3a:cd:f0:28:25:e4:db:c0: 9c:1d:bf:ef:36:88:d2:3f:68:62:aa:77:71:de:2d:0f:ce:6e: 86:13:90:ee:1b:c0:ce:29:8b:79:28:1c:8e:35:ec:84:e4:5a: 35:fe:a7:74:d9:3e:98:aa:6f:92:20:33:a8:62:7b:7b:b8:b5: b5:47:15:7d:71:6b:dc:16:6e:17:0f:fd:1b:41:65:bc:c7:b9: 3d:0a:bf:4a:7b:91:c7:d6:19:0e:c3:be:e5:a9:39:18:f6:f7: f7:48:bc:0e:12:02:ea:9d:f8:85:27:a7:0d:fd:75:20:67:2f: 0f:fe:9b:09:00:a0:45:f9:6f:a2:49:bd:db:34:e1:ee:f6:ff: 8e:7d:46:32:92:08:0d:ad:a7:db:5e:b9:ea:4e:db:42:4a:0c: 2f:9b:94:e8:7d:2c:da:29:ec:cc:23:76:fa:70:24:fb:50:db: 76:02:8d:7b:d8:9a:f9:ba:14:9a:ee:18:0d:c8:ae:0b:f0:2a: 5d:ba:93:ed:5b:35:55:04:c6:1f:b4:00:d4:a2:5c:79:27:c8: 9c:b1:36:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+sTsUeyzvSGqgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YjZmNWQ3MDYtNmNjMS00YmRkLWIyNWQtMTJiZDMxOWY4MDEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKzesKJQPDFAt/UUwRThtJTieAv/qeMyStxS NrCgOxd2XfDC03xp6IC3e4ezvhUoFn2nxDuum/VM0IyqCuXF7bdLhWHpg1lJcJ+z THpz7DS5LCdaIDdl6T2UzmtC4R4IsGOHkZonvMIJwAsLUpae2LdZRxT8HzG6jmio n0A/rNeXja2QExQEvGJnjr3SB83hBlTpiErHV4UGRwpxo3lFr8AjZv+t/HNij6lV sxO+nPHQCGsAUf8e1lW8hpLwXih0Z3LlRbAyQ7LmgWQRQnYpXO64iQN4TRlbJBMz lETvATGjQFOJm6k+pAIPP7marWecBFsAO3tGB+QCtz3ZqX1nzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFlHwIQi0ok61bDxpsmJowakMIKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMTViN2E1MWEtOGIzOS0z MjZhLWJiMWQtOTQ2NDg3Y2E1ZTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPPHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABHGCCtXmkGWEGgeS/y63sZ9WQf3n5hZWy1NEx78PQuEJi9BpUVF06ap Wvm3xQ46zfAoJeTbwJwdv+82iNI/aGKqd3HeLQ/OboYTkO4bwM4pi3koHI417ITk WjX+p3TZPpiqb5IgM6hie3u4tbVHFX1xa9wWbhcP/RtBZbzHuT0Kv0p7kcfWGQ7D vuWpORj29/dIvA4SAuqd+IUnpw39dSBnLw/+mwkAoEX5b6JJvds04e72/459RjKS CA2tp9teuepO20JKDC+blOh9LNop7MwjdvpwJPtQ23YCjXvYmvm6FJruGA3Irgvw Kl26k+1bNVUExh+0ANSiXHknyJyxNiw= -----END CERTIFICATE-----Generated at Tue Oct 6 20:29:52 2026 by rpki-client