$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa File: 2af33beb-28bf-3e20-8796-37fd8256bd13.roa (raw, json) Hash identifier: BC+AgOCngRFVqgaLTlpN2YUCWIZvL12ijNTiyMc/XM8= Subject key identifier: 81:0F:9D:78:F7:52:B1:78:51:DE:94:6D:80:FF:A4:53:0A:6F:4A:D1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B9C6D4777604389EF6170 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:9c:6d:47:77:60:43:89:ef:61:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2c441b10-bee2-4992-ac9e-589360ebb4fb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:28:52:dc:b5:06:a0:5c:f7:dd:72:e5:e3:94: 85:3e:f0:37:1c:9a:2b:8b:4e:2d:e7:5e:f1:bf:61: 4e:c1:63:ea:a9:59:d7:62:a1:c2:bd:a3:e0:bf:77: f3:2e:2a:b8:da:e4:75:78:3e:13:8d:e5:69:de:b2: f3:88:59:9c:22:b0:56:ab:1e:9c:6d:59:d9:07:ea: 8f:43:d0:a9:39:8e:c8:f4:aa:eb:3f:d5:35:f8:6d: 9d:e9:7a:2a:eb:ba:ff:d4:25:39:23:ea:d7:b4:9c: 09:b6:a1:0f:a1:6e:a4:b6:e3:ee:27:d5:32:ab:4d: 35:9d:a7:82:ec:5f:83:a0:e4:9d:cf:5e:07:a2:01: d2:e6:d3:90:e0:75:1c:8d:cb:3f:35:d1:d3:44:6e: 37:fe:32:f1:8e:5a:d7:5a:25:b6:88:54:4c:63:3b: 44:a1:b6:98:98:48:ea:69:70:20:03:4d:34:a4:39: 58:81:03:10:19:64:9e:f1:e9:c0:f8:e7:43:db:ba: bc:0a:5e:57:30:e4:24:19:06:0b:fb:ce:45:6e:a1: 68:8d:60:f0:db:4e:7f:ec:f2:d1:d3:70:0c:26:95: 88:99:5f:7e:aa:ed:5d:de:3c:51:9d:0d:5f:eb:a6: bb:3b:d6:ff:a7:6f:b1:cf:fc:34:ff:94:ee:ad:10: b9:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:0F:9D:78:F7:52:B1:78:51:DE:94:6D:80:FF:A4:53:0A:6F:4A:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2af33beb-28bf-3e20-8796-37fd8256bd13.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8d:0c:8a:5a:f8:e4:21:97:f0:b7:bd:9a:89:1c:8b:41:09:84: db:c6:53:42:7c:28:5e:c5:5e:c6:d4:db:87:dc:f8:46:74:9e: 19:0e:fc:7c:e5:7b:56:28:a8:f7:c8:cf:52:ac:eb:38:6f:b5: b5:c4:f6:df:4d:56:ae:fd:9e:54:b7:47:3e:c6:d7:2e:09:90: 16:38:eb:70:5c:b5:6a:af:e8:69:a6:41:f7:f6:72:95:54:d7: 1d:06:c1:d7:63:1e:3e:cd:be:20:f5:c0:54:ab:d0:d8:2d:12: 5f:6c:56:55:4a:05:43:43:e4:73:77:81:08:55:ee:fb:ee:04: 89:1f:99:6d:c8:3f:b7:4c:fd:b1:f6:c1:3a:8d:a2:da:f0:63: 06:0a:5c:57:83:61:7f:68:ed:14:49:27:a2:b6:65:18:76:6e: 85:b6:b2:0e:fc:73:02:8b:ac:50:eb:31:79:b8:58:78:74:c3: 5a:8c:2a:8b:96:7f:9f:b1:e1:ee:3b:64:e4:6b:a6:55:9f:07: e0:ac:1a:b1:bb:fe:ed:a9:88:0f:70:08:d7:61:55:b8:4e:e9: 29:35:d4:af:3c:69:d1:18:fe:93:9b:b2:24:da:ef:bc:89:12: 40:b4:fa:11:25:8e:7d:41:61:89:41:ae:eb:22:ed:9e:cc:39: b6:c0:5a:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5xtR3dgQ4nvYXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MmM0NDFiMTAtYmVlMi00OTkyLWFjOWUtNTg5MzYwZWJiNGZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiChS3LUGoFz33XLl45SFPvA3HJori04t517x v2FOwWPqqVnXYqHCvaPgv3fzLiq42uR1eD4TjeVp3rLziFmcIrBWqx6cbVnZB+qP Q9CpOY7I9KrrP9U1+G2d6Xoq67r/1CU5I+rXtJwJtqEPoW6ktuPuJ9Uyq001naeC 7F+DoOSdz14HogHS5tOQ4HUcjcs/NdHTRG43/jLxjlrXWiW2iFRMYztEobaYmEjq aXAgA000pDlYgQMQGWSe8enA+OdD27q8Cl5XMOQkGQYL+85FbqFojWDw205/7PLR 03AMJpWImV9+qu1d3jxRnQ1f66a7O9b/p2+xz/w0/5TurRC5nwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEPnXj3UrF4Ud6UbYD/pFMKb0rRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmFmMzNiZWItMjhiZi0z ZTIwLTg3OTYtMzdmZDgyNTZiZDEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPMhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI0Milr45CGX8Le9mokci0EJhNvGU0J8KF7FXsbU24fc+EZ0nhkO/Hzl e1YoqPfIz1Ks6zhvtbXE9t9NVq79nlS3Rz7G1y4JkBY463BctWqv6GmmQff2cpVU 1x0GwddjHj7NviD1wFSr0NgtEl9sVlVKBUND5HN3gQhV7vvuBIkfmW3IP7dM/bH2 wTqNotrwYwYKXFeDYX9o7RRJJ6K2ZRh2boW2sg78cwKLrFDrMXm4WHh0w1qMKouW f5+x4e47ZORrplWfB+CsGrG7/u2piA9wCNdhVbhO6Sk11K88adEY/pObsiTa77yJ EkC0+hEljn1BYYlBrusi7Z7MObbAWtM= -----END CERTIFICATE-----Generated at Sat Sep 26 07:49:52 2026 by rpki-client