$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa File: 29b59850-75d0-35cc-8677-b593f8d2b02b.roa (raw, json) Hash identifier: 0LFyJRyFl5WWxuSKybwWWIf3w4y3TnpUJEmCWUmMEsg= Subject key identifier: 71:46:E7:53:1A:06:75:3B:15:EF:84:33:D3:BB:00:E8:0A:FB:68:9F Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983420B8DC812410138B580 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 75.104.139.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:42:0b:8d:c8:12:41:01:38:b5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3134a5f8-abe3-4a97-ae69-b304bdf4a838 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:56:03:aa:05:18:a7:6e:e9:fd:86:00:69:11: c1:14:9d:ea:81:44:57:f1:26:cd:46:83:ef:70:65: cc:9a:36:fe:6f:88:69:7b:47:66:8d:26:5e:99:2f: 8b:49:55:5b:7c:89:18:f1:73:1f:b3:12:61:a0:0f: fd:7a:eb:76:4f:e2:84:d5:48:24:93:3c:88:5f:8c: 51:6c:60:87:e5:67:c6:b3:56:3e:42:b3:b3:af:cd: d2:04:5e:42:27:e9:1f:35:ce:6a:7e:71:a3:aa:f4: 92:5a:18:67:d8:14:16:df:2a:4a:9b:c4:be:65:56: 56:f6:bf:77:4e:d6:ff:2b:9d:ef:56:7d:84:cd:84: 8d:87:03:bb:32:b0:13:fa:6e:d7:51:e9:14:72:b7: dc:45:23:34:6b:0b:2a:4f:1f:62:11:27:fb:94:08: eb:15:fb:4c:e2:eb:f9:96:83:14:9a:6b:2a:6c:bd: 1c:5f:6f:72:b9:84:9e:60:79:e0:ae:d6:a8:83:4a: ea:48:94:51:e9:79:31:f5:03:a4:e3:be:d4:fc:1d: 97:4f:5e:18:fa:dc:58:4b:66:55:9f:c6:e0:59:8f: 3e:d6:db:07:a1:d9:df:e6:a9:dd:1c:81:1e:98:7f: cf:24:bb:14:db:e8:c9:b8:2f:41:e3:eb:fa:8a:4e: fa:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:46:E7:53:1A:06:75:3B:15:EF:84:33:D3:BB:00:E8:0A:FB:68:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/29b59850-75d0-35cc-8677-b593f8d2b02b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 75.104.139.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:ff:11:07:6c:16:4d:5d:4d:8f:99:07:c2:94:26:22:ce:58: 02:ae:3b:56:22:93:a5:d2:0f:03:82:51:c2:64:64:8f:55:9e: 3e:2e:a2:e6:59:e0:4b:80:84:8e:9b:cb:a9:65:d8:3d:a5:a8: 1f:29:12:d9:8c:94:db:09:6e:80:a7:74:30:e8:d0:ca:34:1a: 6d:5d:ef:e7:d3:0b:e4:bb:ed:d9:30:fa:ac:06:34:a9:8a:64: 6e:d0:ff:ed:e2:76:b9:2d:62:66:9b:26:71:dc:33:1d:fc:3e: a6:7d:dd:ce:0f:17:38:a8:fe:89:07:1b:79:55:ea:c3:b6:00: 43:12:d0:8a:25:2e:57:50:89:08:f5:ef:8e:a3:17:cd:1f:86: c5:1d:42:19:00:0b:0f:59:84:4d:43:42:80:8b:f1:40:21:dc: 8e:81:f1:37:62:62:55:40:bd:d0:08:1c:ea:08:67:6f:0e:c6: e3:fd:68:32:3a:b1:73:fe:c2:bb:0d:02:45:44:e0:79:e2:80: c5:70:07:ad:18:68:54:32:bf:bc:68:ef:f5:f1:2b:6c:b9:8c: f6:65:df:31:fe:d7:3e:bd:25:cc:6e:fc:b0:85:38:d9:64:4c: 8d:2a:44:21:5a:0b:04:e3:46:88:1a:8d:24:ae:cd:a0:05:43: 34:c3:8c:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg0ILjcgSQQE4tYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzEzNGE1ZjgtYWJlMy00YTk3LWFlNjktYjMwNGJkZjRhODM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVYDqgUYp27p/YYAaRHBFJ3qgURX8SbNRoPv cGXMmjb+b4hpe0dmjSZemS+LSVVbfIkY8XMfsxJhoA/9eut2T+KE1UgkkzyIX4xR bGCH5WfGs1Y+QrOzr83SBF5CJ+kfNc5qfnGjqvSSWhhn2BQW3ypKm8S+ZVZW9r93 Ttb/K53vVn2EzYSNhwO7MrAT+m7XUekUcrfcRSM0awsqTx9iESf7lAjrFftM4uv5 loMUmmsqbL0cX29yuYSeYHngrtaog0rqSJRR6Xkx9QOk477U/B2XT14Y+txYS2ZV n8bgWY8+1tsHodnf5qndHIEemH/PJLsU2+jJuC9B4+v6ik766QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFG51MaBnU7Fe+EM9O7AOgK+2ifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMjliNTk4NTAtNzVkMC0z NWNjLTg2NzctYjU5M2Y4ZDJiMDJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAS2iLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj/EQdsFk1dTY+ZB8KUJiLOWAKuO1Yik6XSDwOCUcJkZI9Vnj4uouZZ 4EuAhI6by6ll2D2lqB8pEtmMlNsJboCndDDo0Mo0Gm1d7+fTC+S77dkw+qwGNKmK ZG7Q/+3idrktYmabJnHcMx38PqZ93c4PFzio/okHG3lV6sO2AEMS0IolLldQiQj1 746jF80fhsUdQhkACw9ZhE1DQoCL8UAh3I6B8TdiYlVAvdAIHOoIZ28OxuP9aDI6 sXP+wrsNAkVE4HnigMVwB60YaFQyv7xo7/XxK2y5jPZl3zH+1z69Jcxu/LCFONlk TI0qRCFaCwTjRogajSSuzaAFQzTDjEI= -----END CERTIFICATE-----Generated at Sat Sep 26 09:24:22 2026 by rpki-client