$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa File: 290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa (raw, json) Hash identifier: QfV6PF2+s3P4TJ+mvWl6VywSDA9MNJcyPPx+xCkGz5M= Subject key identifier: 39:C0:F2:E4:2E:20:71:71:13:94:12:22:61:6E:E7:B9:41:00:8E:BE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9C838C78C4D2CF3CD480 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.36.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9c:83:8c:78:c4:d2:cf:3c:d4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=28180353-0324-4c41-af77-1e90dab9e131 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:61:c5:b2:36:04:87:06:27:5d:24:0f:c4:b5: bf:fd:79:54:df:7d:db:c3:17:25:bb:3e:aa:b1:86: b2:7e:52:9b:44:77:39:36:40:57:9c:f3:a9:f7:af: 5d:93:ac:06:03:c7:90:92:41:44:33:de:cb:8a:b4: 43:76:81:c3:f2:65:f7:02:a9:29:66:fb:18:50:7c: b2:56:ca:84:08:61:1f:0f:38:83:bf:13:94:aa:27: ea:77:11:b8:4e:d5:69:9c:c9:87:77:53:ab:f4:a0: 3d:9c:40:3d:d7:d0:15:a2:b6:fc:b3:1f:5f:b4:2a: f3:2c:7b:6a:fa:d6:f9:38:91:f6:ca:66:4b:10:b7: 6e:15:ff:7c:9b:79:eb:6a:05:be:d8:43:c0:12:4e: 4a:d0:47:6e:98:a7:d3:89:b5:9b:64:a7:b0:47:22: 4e:dc:a8:26:8c:42:e8:da:01:f3:33:b4:f4:a1:5e: e0:ea:e9:bf:c5:a5:ae:5c:75:a8:b8:8a:77:24:1b: ec:89:d6:e2:ed:58:f1:04:70:9f:e2:28:78:f8:e4: f0:83:a6:4a:25:0c:ce:cc:ef:74:df:da:e7:a2:ed: 0e:ab:0d:07:23:08:25:48:89:72:80:fe:12:40:0c: d3:0c:15:16:27:fc:64:8b:fb:46:52:a6:ba:7c:26: ae:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:C0:F2:E4:2E:20:71:71:13:94:12:22:61:6E:E7:B9:41:00:8E:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/290fcfd4-17cb-338a-b652-3cf2305e2aa4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.36.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:c9:f5:9c:1f:38:a1:13:d1:97:9b:d5:aa:e2:bb:28:73:41: de:9f:11:d4:f4:9f:d7:92:02:a4:22:39:ff:a0:26:af:38:50: f9:59:90:db:78:b5:4d:a5:bc:fc:b9:c3:30:15:5f:1a:56:96: 4b:d8:dc:37:b3:21:c3:8d:f1:ad:cb:61:77:89:c5:81:a2:ec: 6d:12:1a:7c:68:a3:66:f6:0a:35:22:19:3f:27:2b:04:0d:ed: 4c:c0:0c:cf:73:5a:57:96:db:6c:62:37:d0:10:e6:2b:3f:96: 42:90:f7:dc:89:70:60:b5:78:39:db:4f:7b:aa:4d:0f:5a:2c: 74:8c:ea:7e:d4:bc:b6:f0:5b:db:f9:4c:be:da:27:0d:76:9d: 5e:1f:44:67:a5:2e:89:0b:15:b2:66:69:df:6d:1a:80:f4:2a: aa:10:09:22:28:9f:ca:15:b1:20:52:d8:62:17:03:c9:21:25: 4d:cc:46:dd:a6:10:8c:64:4b:1f:8f:b9:58:05:9b:0d:bc:22: 80:f5:f0:b2:9c:1a:13:04:ef:79:5a:52:50:6a:5d:66:b4:5f: 69:b4:d9:89:bc:5d:19:96:44:29:c5:1d:7e:43:7c:03:e1:00: 48:26:b4:db:2a:d1:a4:2f:5c:73:4c:ff:62:eb:d5:7b:c4:da: 06:53:86:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5yDjHjE0s881IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjgxODAzNTMtMDMyNC00YzQxLWFmNzctMWU5MGRhYjllMTMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWHFsjYEhwYnXSQPxLW//XlU333bwxcluz6q sYayflKbRHc5NkBXnPOp969dk6wGA8eQkkFEM97LirRDdoHD8mX3AqkpZvsYUHyy VsqECGEfDziDvxOUqifqdxG4TtVpnMmHd1Or9KA9nEA919AVorb8sx9ftCrzLHtq +tb5OJH2ymZLELduFf98m3nragW+2EPAEk5K0EdumKfTibWbZKewRyJO3KgmjELo 2gHzM7T0oV7g6um/xaWuXHWouIp3JBvsidbi7VjxBHCf4ih4+OTwg6ZKJQzOzO90 39rnou0Oqw0HIwglSIlygP4SQAzTDBUWJ/xki/tGUqa6fCaurwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnA8uQuIHFxE5QSImFu57lBAI6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjkwZmNmZDQtMTdjYi0z MzhhLWI2NTItM2NmMjMwNWUyYWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKbJ9ZwfOKET0Zeb1ariuyhzQd6fEdT0n9eSAqQiOf+gJq84UPlZkNt4 tU2lvPy5wzAVXxpWlkvY3DezIcON8a3LYXeJxYGi7G0SGnxoo2b2CjUiGT8nKwQN 7UzADM9zWleW22xiN9AQ5is/lkKQ99yJcGC1eDnbT3uqTQ9aLHSM6n7UvLbwW9v5 TL7aJw12nV4fRGelLokLFbJmad9tGoD0KqoQCSIon8oVsSBS2GIXA8khJU3MRt2m EIxkSx+PuVgFmw28IoD18LKcGhME73laUlBqXWa0X2m02Ym8XRmWRCnFHX5DfAPh AEgmtNsq0aQvXHNM/2Lr1XvE2gZThrA= -----END CERTIFICATE-----Generated at Sun Sep 27 21:12:50 2026 by rpki-client