$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa File: 2ec1e51d-6725-3407-9b6c-11caa275e537.roa (raw, json) Hash identifier: R19/BmMlLbM0X3vFZop+1DhB8/rL2i2+A2I/bRaiEiU= Subject key identifier: F8:59:90:9E:11:6B:FA:AD:03:73:36:F0:11:80:3D:B1:A9:67:6C:61 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D54EE3111150639F4100 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.127.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d5:4e:e3:11:11:50:63:9f:41:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=270c8341-b82a-42f1-a35e-2288f67238d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3d:de:90:3e:42:72:6c:e1:74:a0:06:a3:bd: 5c:21:e5:82:93:6b:09:a3:53:5b:6b:11:47:f8:fb: 32:30:99:0c:60:37:44:b4:88:53:79:8d:f5:bc:c7: dd:d0:4a:06:e5:b9:10:e1:b2:ce:95:09:72:c9:86: 0d:3e:70:0c:ee:2e:20:14:a3:b5:73:3a:c8:7c:40: c0:70:c3:19:52:93:b4:3c:6a:79:9c:d5:b9:5b:ba: 06:6b:d2:62:85:6c:e1:62:fd:79:b3:ae:b6:f5:32: 30:4a:65:87:34:74:be:4d:fa:bc:3b:ea:bf:77:a9: be:51:77:7a:b3:b6:da:6c:9a:7e:88:a2:e9:e0:51: 31:db:3b:71:e0:a3:95:85:fb:32:64:e7:8e:60:95: 87:9d:65:a7:9a:da:9b:af:1a:57:1b:14:21:9d:d2: e0:39:7b:cf:c5:90:84:27:e2:b7:b9:1e:95:2e:02: 65:3c:2e:91:50:f3:dc:f7:aa:fc:a6:04:e4:79:60: ca:a3:8d:fc:03:1c:bd:51:ca:9d:72:ad:11:b8:29: b0:36:46:8a:34:a3:56:28:b8:7b:3e:a5:40:fa:7d: 35:61:ec:16:de:60:0c:c6:c5:5c:db:cf:82:39:de: d2:da:93:7a:91:42:1e:f5:09:f2:b5:88:99:09:2c: 2a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:59:90:9E:11:6B:FA:AD:03:73:36:F0:11:80:3D:B1:A9:67:6C:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2ec1e51d-6725-3407-9b6c-11caa275e537.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.127.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 70:33:37:50:23:f0:86:3a:60:c8:7a:d7:9e:6b:8c:1f:1e:09: b3:e4:40:94:00:01:fc:0c:77:89:c4:82:27:a7:e9:fb:07:e4: 2c:fc:d9:d3:97:3a:86:0c:8b:63:f5:f4:aa:11:e0:35:75:b2: 47:d8:e5:7b:a1:2b:04:cc:05:fe:5e:ca:94:4f:f7:b6:fb:af: fb:92:00:5c:01:b0:46:9d:27:00:5a:30:11:3e:99:26:53:08: ff:5a:c9:33:2a:8f:c5:38:af:e7:24:20:c2:4b:8e:64:45:10: 3c:8a:12:10:7f:87:a3:55:60:3f:e8:b6:20:cf:d6:ad:bc:62: 73:02:fa:45:a2:7c:12:5e:f7:2a:1a:20:55:c6:37:ed:05:81: 85:76:e6:73:b3:1f:16:8b:49:71:f1:0d:87:9d:dc:c1:b0:bb: fc:80:db:cb:eb:98:50:d2:27:d2:ea:d0:8c:30:e4:6e:fd:e5: 8e:d8:4f:6d:10:ed:f0:5d:f2:3e:ed:67:f8:16:47:51:3d:2d: ac:c9:4b:b1:97:0a:8f:b0:b4:88:21:c8:5b:18:50:1d:4a:64: 40:75:bb:32:25:57:56:b6:9e:58:a9:7d:1b:a6:e6:97:05:12: 15:ec:fc:2d:20:d4:96:64:7e:cb:5b:ee:d6:73:bf:68:66:32: 72:68:31:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9VO4xERUGOfQQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjcwYzgzNDEtYjgyYS00MmYxLWEzNWUtMjI4OGY2NzIzOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT3ekD5CcmzhdKAGo71cIeWCk2sJo1NbaxFH +PsyMJkMYDdEtIhTeY31vMfd0EoG5bkQ4bLOlQlyyYYNPnAM7i4gFKO1czrIfEDA cMMZUpO0PGp5nNW5W7oGa9JihWzhYv15s6629TIwSmWHNHS+Tfq8O+q/d6m+UXd6 s7babJp+iKLp4FEx2ztx4KOVhfsyZOeOYJWHnWWnmtqbrxpXGxQhndLgOXvPxZCE J+K3uR6VLgJlPC6RUPPc96r8pgTkeWDKo438Axy9Ucqdcq0RuCmwNkaKNKNWKLh7 PqVA+n01YewW3mAMxsVc28+COd7S2pN6kUIe9QnytYiZCSwqxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhZkJ4Ra/qtA3M28BGAPbGpZ2xhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMmVjMWU1MWQtNjcyNS0z NDA3LTliNmMtMTFjYWEyNzVlNTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJ/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHAzN1Aj8IY6YMh6155rjB8eCbPkQJQAAfwMd4nEgien6fsH5Cz82dOX OoYMi2P19KoR4DV1skfY5XuhKwTMBf5eypRP97b7r/uSAFwBsEadJwBaMBE+mSZT CP9ayTMqj8U4r+ckIMJLjmRFEDyKEhB/h6NVYD/otiDP1q28YnMC+kWifBJe9yoa IFXGN+0FgYV25nOzHxaLSXHxDYed3MGwu/yA28vrmFDSJ9Lq0Iww5G795Y7YT20Q 7fBd8j7tZ/gWR1E9LazJS7GXCo+wtIghyFsYUB1KZEB1uzIlV1a2nlipfRum5pcF EhXs/C0g1JZkfstb7tZzv2hmMnJoMSo= -----END CERTIFICATE-----Generated at Sat Sep 26 17:40:55 2026 by rpki-client