$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa File: 239c4599-2f7f-356a-86bd-f8a86a18042f.roa (raw, json) Hash identifier: 8hMUEXprUGFOwrt2YCGMfugFttofpSAjs2DmlJcO0lA= Subject key identifier: D2:06:68:2B:68:98:6F:B0:B8:46:6F:17:27:66:C7:F8:A4:F8:C1:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BAE9F8E6F7A3A22930E30 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.245.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:ae:9f:8e:6f:7a:3a:22:93:0e:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=ba96b1e8-1b27-41ed-bcfe-c7d255cff447 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d8:76:39:e5:3e:c7:a3:24:4c:38:fc:a7:18: 83:2b:aa:47:0d:7f:69:ac:3c:f9:68:16:2b:1c:60: a5:a9:2c:4a:b0:f6:3b:71:4a:7b:6b:dc:80:80:2b: d1:0d:17:db:d0:00:af:4d:18:b1:b0:c6:f6:c5:59: 0e:3d:f4:31:39:9a:34:35:9f:3a:24:c1:8c:db:a4: 1c:48:44:cc:97:03:09:60:c0:7d:ff:b4:5d:d7:46: d5:1d:4f:20:9a:ba:aa:45:2c:b8:30:29:72:34:ec: 4f:29:05:ce:54:07:57:bd:12:d1:29:bd:ac:f2:3e: 42:1e:f1:83:4d:f4:cf:87:a9:1d:d1:5b:25:e4:cc: f8:4d:51:7c:16:e5:1e:b4:ae:fa:75:b6:58:55:da: 57:4a:a9:51:f6:42:f8:2c:e3:8c:c7:67:37:7c:7d: c2:df:da:37:85:0a:8a:98:fc:78:ce:da:e4:76:eb: 37:7e:0b:bb:f1:46:36:ec:ca:48:d0:d8:6b:63:77: 2a:3c:10:a4:ae:9d:e2:14:5b:fe:65:d2:f2:4a:85: 02:ea:e7:08:91:d6:9c:0e:80:8b:dc:1d:34:5b:25: ae:b6:6c:9a:b3:6c:33:7d:08:82:c7:71:5b:16:68: 28:f8:d0:53:9f:9e:d0:a9:58:bd:50:3e:12:e2:b4: 83:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:06:68:2B:68:98:6F:B0:B8:46:6F:17:27:66:C7:F8:A4:F8:C1:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/239c4599-2f7f-356a-86bd-f8a86a18042f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.245.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:7a:8d:65:6b:be:d4:59:99:77:17:86:65:75:bd:fe:7f:15: f6:7a:b5:2b:f9:f4:72:56:e1:37:86:f1:83:a9:07:40:9f:d7: f7:ef:8e:79:df:f5:b0:ae:77:6d:4b:75:d2:2e:70:ef:cd:d4: c2:39:2a:f9:58:f6:4a:03:ea:02:96:03:fa:fb:98:dd:ff:84: ab:11:ed:24:4c:5b:fe:24:12:56:c1:b5:57:f0:f4:d0:5e:3a: d2:ec:42:09:7e:dc:9d:f5:02:04:69:99:f4:6c:f9:50:81:a3: 4e:83:9a:70:a9:dc:e3:ca:1b:e0:95:4b:10:d8:ac:a6:c1:3d: 17:ed:29:23:1e:4e:53:3e:c5:05:ed:06:64:03:dc:2d:ec:06: c0:0f:f2:4d:1a:7a:b1:0a:7e:0e:12:93:8b:73:d9:bc:fc:56: a6:0a:53:d0:32:41:3a:d8:76:81:e6:1e:cd:cc:fd:5d:ed:cd: 27:36:ed:f9:2d:92:ac:9e:9b:28:72:a8:16:01:6a:ba:57:e8: c3:6b:2b:c8:e6:3c:98:dd:d6:e1:75:d6:5a:63:7a:c6:3c:3c: b9:57:43:2f:94:67:52:3b:0d:46:0e:3d:3e:5c:d4:7d:8f:42: f3:4d:c9:41:bc:53:90:01:7a:d3:a5:4a:c7:30:22:35:95:9b: b5:8f:60:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je66fjm96OiKTDjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YmE5NmIxZTgtMWIyNy00MWVkLWJjZmUtYzdkMjU1Y2ZmNDQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNh2OeU+x6MkTDj8pxiDK6pHDX9prDz5aBYr HGClqSxKsPY7cUp7a9yAgCvRDRfb0ACvTRixsMb2xVkOPfQxOZo0NZ86JMGM26Qc SETMlwMJYMB9/7Rd10bVHU8gmrqqRSy4MClyNOxPKQXOVAdXvRLRKb2s8j5CHvGD TfTPh6kd0Vsl5Mz4TVF8FuUetK76dbZYVdpXSqlR9kL4LOOMx2c3fH3C39o3hQqK mPx4ztrkdus3fgu78UY27MpI0NhrY3cqPBCkrp3iFFv+ZdLySoUC6ucIkdacDoCL 3B00WyWutmyas2wzfQiCx3FbFmgo+NBTn57QqVi9UD4S4rSDrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNIGaCtomG+wuEZvFydmx/ik+MHYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjM5YzQ1OTktMmY3Zi0z NTZhLTg2YmQtZjhhODZhMTgwNDJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPP1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADN6jWVrvtRZmXcXhmV1vf5/FfZ6tSv59HJW4TeG8YOpB0Cf1/fvjnnf 9bCud21LddIucO/N1MI5KvlY9koD6gKWA/r7mN3/hKsR7SRMW/4kElbBtVfw9NBe OtLsQgl+3J31AgRpmfRs+VCBo06DmnCp3OPKG+CVSxDYrKbBPRftKSMeTlM+xQXt BmQD3C3sBsAP8k0aerEKfg4Sk4tz2bz8VqYKU9AyQTrYdoHmHs3M/V3tzSc27fkt kqyemyhyqBYBarpX6MNrK8jmPJjd1uF11lpjesY8PLlXQy+UZ1I7DUYOPT5c1H2P QvNNyUG8U5ABetOlSscwIjWVm7WPYPM= -----END CERTIFICATE-----Generated at Mon Sep 28 11:04:24 2026 by rpki-client