$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa File: 2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa (raw, json) Hash identifier: phamN0EQIzNXzMweqSvMYiDHhtOXdWU+90VQJKRWEDA= Subject key identifier: 2A:C2:21:8A:0D:F7:6D:5C:3E:63:2B:92:6B:0E:D3:1F:50:24:DF:ED Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9B174309656F93C01B00 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9b:17:43:09:65:6f:93:c0:1b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=d8a0b011-6d5b-4c3f-8375-14a5a8fcf223 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:58:ba:63:86:9f:b7:24:56:21:4e:ab:78:99: f8:61:2e:bf:6c:8d:16:61:d9:04:9d:ae:c9:e1:ec: 04:88:2d:fb:63:a4:79:c9:41:5a:cc:2c:b0:be:65: bb:99:84:59:60:2a:14:ae:56:c4:a6:0c:d4:1d:be: 2e:bf:30:24:aa:18:d3:96:a4:fa:5b:2a:af:5c:15: f0:0c:ee:34:23:8f:6b:da:60:6e:8c:fd:fc:55:1b: 4e:c8:4b:4d:f7:60:93:d1:90:c5:cd:e1:92:9d:6a: c4:30:bd:6c:37:bb:3e:90:c6:52:4c:ec:07:d8:53: d7:55:bc:16:8d:02:8d:a8:ea:95:62:80:f8:75:08: d0:e7:cd:49:34:a0:74:79:a9:a0:c3:12:24:c9:cf: ed:a4:9a:46:40:82:97:35:8f:ee:05:a7:ad:0a:80: 82:00:68:52:bd:03:38:6a:e7:69:2b:71:09:87:1d: b9:ee:22:61:ca:34:24:d7:8f:0d:aa:a3:8b:b6:23: 5b:2e:74:34:83:0b:58:c0:49:ec:43:ac:f2:21:16: 81:29:79:c4:68:d3:90:4e:6b:09:4f:37:96:15:e7: 7f:97:88:c7:c2:2a:21:9b:d3:45:19:dd:18:ae:b3: 9b:f5:73:72:cc:ec:ad:34:7e:14:b7:e7:ec:02:28: 38:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C2:21:8A:0D:F7:6D:5C:3E:63:2B:92:6B:0E:D3:1F:50:24:DF:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2a5bf4e4-ffaa-3a1e-9e0a-73b0eb6d12fb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:d6:77:c1:65:9f:29:7f:04:a0:59:e4:64:08:bd:fc:5a:b3: 17:d2:3e:cf:79:94:9a:da:44:bf:6c:7b:9a:42:35:7a:e9:7a: b4:70:95:b4:ba:0a:c6:b3:0d:54:07:0e:ee:b8:94:b0:9a:ab: d1:96:cb:78:13:c3:af:ee:e7:33:00:cd:35:64:fe:e0:0a:12: 43:7d:8c:d6:70:43:ac:cd:39:45:e5:1f:85:e3:0c:bb:0d:3d: e4:fd:e0:ab:e3:13:74:3a:af:53:d5:b4:25:a4:f0:56:55:e3: 2c:95:51:35:f0:ba:eb:f3:49:9b:f4:ec:45:04:a6:d5:be:96: 56:9f:f0:00:39:e0:eb:7f:b8:c4:cd:1e:4b:7d:0c:3d:c8:c0: fb:01:61:6b:c7:e6:ed:f6:b2:59:4c:fe:bf:69:bd:34:11:dc: 11:68:89:f0:ca:14:1a:8f:58:a7:83:22:cf:6c:11:e8:0e:33: 92:70:e7:25:a0:10:91:7c:ed:5b:9e:dc:9d:c6:1e:c0:1c:74: 72:c4:21:e0:57:e0:fc:be:6c:44:c9:2b:ef:8e:4d:4a:25:ff: fe:7b:e0:ff:eb:46:81:54:1a:cf:df:cb:ca:92:91:ef:4e:8c: cb:0e:1e:5b:88:51:31:09:3e:dc:18:70:ba:2f:98:a5:62:fe: 73:ef:e1:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5sXQwllb5PAGwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZDhhMGIwMTEtNmQ1Yi00YzNmLTgzNzUtMTRhNWE4ZmNmMjIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1i6Y4aftyRWIU6reJn4YS6/bI0WYdkEna7J 4ewEiC37Y6R5yUFazCywvmW7mYRZYCoUrlbEpgzUHb4uvzAkqhjTlqT6WyqvXBXw DO40I49r2mBujP38VRtOyEtN92CT0ZDFzeGSnWrEML1sN7s+kMZSTOwH2FPXVbwW jQKNqOqVYoD4dQjQ581JNKB0eamgwxIkyc/tpJpGQIKXNY/uBaetCoCCAGhSvQM4 audpK3EJhx257iJhyjQk148NqqOLtiNbLnQ0gwtYwEnsQ6zyIRaBKXnEaNOQTmsJ TzeWFed/l4jHwiohm9NFGd0YrrOb9XNyzOytNH4Ut+fsAig4LQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrCIYoN921cPmMrkmsO0x9QJN/tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmE1YmY0ZTQtZmZhYS0z YTFlLTllMGEtNzNiMGViNmQxMmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjWd8Flnyl/BKBZ5GQIvfxasxfSPs95lJraRL9se5pCNXrperRwlbS6 CsazDVQHDu64lLCaq9GWy3gTw6/u5zMAzTVk/uAKEkN9jNZwQ6zNOUXlH4XjDLsN PeT94KvjE3Q6r1PVtCWk8FZV4yyVUTXwuuvzSZv07EUEptW+llaf8AA54Ot/uMTN Hkt9DD3IwPsBYWvH5u32sllM/r9pvTQR3BFoifDKFBqPWKeDIs9sEegOM5Jw5yWg EJF87Vue3J3GHsAcdHLEIeBX4Py+bETJK++OTUol//574P/rRoFUGs/fy8qSke9O jMsOHluIUTEJPtwYcLovmKVi/nPv4Wo= -----END CERTIFICATE-----Generated at Sat Sep 26 02:16:56 2026 by rpki-client