$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa File: 31d11128-7316-3ee2-8bcd-d753890928ec.roa (raw, json) Hash identifier: s5ACeorLgzEkU0FXbEhFtQUUbj9yXakxpVvHufdTidE= Subject key identifier: 93:56:61:74:0B:47:CE:94:99:61:09:A2:CD:D5:B1:D0:C8:67:01:E1 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B8881C5F7853B2A71D680 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:88:81:c5:f7:85:3b:2a:71:d6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4fcc293c-6038-4829-b15c-f6ab47884011 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:49:95:a2:66:6a:a1:5b:af:81:ac:ed:85:dc: 53:a0:58:a1:10:94:60:91:82:9e:50:55:d6:ca:6e: 05:6c:30:c0:e5:66:cf:29:60:c5:62:7c:28:06:3c: 3a:ad:bb:15:de:03:04:80:f7:ce:ce:07:44:d3:a8: 2a:0f:6f:79:27:9c:00:85:ed:37:33:f3:c7:5e:2b: 13:5b:4c:4d:3c:c5:66:60:22:20:f1:47:27:47:13: 41:c9:2f:fa:d9:7c:0d:8e:5e:ef:df:13:11:92:bf: e7:e8:34:c6:33:91:c1:88:33:2e:46:00:34:51:25: 15:65:51:93:ab:c9:3a:c5:61:17:82:ac:83:e9:52: 83:10:e4:27:43:42:7c:26:a0:9d:e3:9e:a1:42:04: 24:9f:ca:44:04:87:03:c4:e0:a5:99:55:ae:dd:fb: e7:f5:e1:8f:43:f3:40:90:f0:7b:54:18:dd:1d:dc: c3:b4:d7:0e:17:bd:bf:5c:04:36:1e:5d:f4:2f:61: 20:8b:1f:23:9f:de:27:29:ca:1c:bd:e5:03:16:23: 17:a4:94:f7:f3:92:ad:d4:35:95:20:0b:ef:86:1b: 54:c6:37:18:54:17:fb:f8:f3:19:c0:c4:32:d9:f5: c4:fb:77:b8:0a:d2:20:a4:8c:cc:ac:68:f4:c4:11: 16:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:56:61:74:0B:47:CE:94:99:61:09:A2:CD:D5:B1:D0:C8:67:01:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/31d11128-7316-3ee2-8bcd-d753890928ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a6:9c:dc:6a:84:65:06:d7:a0:e4:69:36:91:00:47:9a:86:cd: 57:68:9c:28:c8:c1:2f:70:d3:dd:5f:13:f6:e2:56:29:16:2c: 36:2c:42:68:a3:0e:bc:d5:c6:2d:15:e3:ab:15:d1:00:16:8c: 1e:ac:6e:a9:d5:8e:48:e2:d6:21:14:6a:5e:d1:17:16:8e:15: 0c:8d:06:69:eb:24:6a:db:43:ec:da:41:ba:16:ea:0c:d8:1a: 4d:20:19:f8:54:43:3a:7e:ca:ac:de:77:99:67:fe:76:bd:d3: e4:e3:a1:a1:6a:31:73:6a:fb:a0:8f:b9:c9:4f:c7:f0:65:fd: 33:9d:11:71:f6:e1:9e:1f:ac:1f:66:2e:8f:1e:7c:b0:90:24: 2b:c5:5d:00:31:a2:f8:26:ca:de:59:91:6e:63:ee:46:37:cc: ab:a5:7d:66:bd:ae:85:99:e7:95:6c:a2:8d:84:e2:e4:5c:66: 9f:ba:c8:b2:39:8b:bb:03:5a:65:e6:82:98:80:f1:13:4c:27: cc:0a:67:ea:3f:08:79:0a:04:4e:f0:96:65:d1:34:23:e0:92: 5d:94:fc:cc:1a:af:e8:e4:81:f7:ff:59:76:5e:71:7b:1b:ea: 93:fa:c7:bd:9d:87:17:1e:9b:27:ff:cd:04:36:a2:1f:ff:47: 08:10:75:52 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je4iBxfeFOypx1oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGZjYzI5M2MtNjAzOC00ODI5LWIxNWMtZjZhYjQ3ODg0MDExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkmVomZqoVuvgazthdxToFihEJRgkYKeUFXW ym4FbDDA5WbPKWDFYnwoBjw6rbsV3gMEgPfOzgdE06gqD295J5wAhe03M/PHXisT W0xNPMVmYCIg8UcnRxNByS/62XwNjl7v3xMRkr/n6DTGM5HBiDMuRgA0USUVZVGT q8k6xWEXgqyD6VKDEOQnQ0J8JqCd456hQgQkn8pEBIcDxOClmVWu3fvn9eGPQ/NA kPB7VBjdHdzDtNcOF72/XAQ2Hl30L2Egix8jn94nKcocveUDFiMXpJT385Kt1DWV IAvvhhtUxjcYVBf7+PMZwMQy2fXE+3e4CtIgpIzMrGj0xBEW2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJNWYXQLR86UmWEJos3VsdDIZwHhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzFkMTExMjgtNzMxNi0z ZWUyLThiY2QtZDc1Mzg5MDkyOGVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKac3GqEZQbXoORpNpEAR5qGzVdonCjIwS9w091fE/biVikWLDYsQmij DrzVxi0V46sV0QAWjB6sbqnVjkji1iEUal7RFxaOFQyNBmnrJGrbQ+zaQboW6gzY Gk0gGfhUQzp+yqzed5ln/na90+TjoaFqMXNq+6CPuclPx/Bl/TOdEXH24Z4frB9m Lo8efLCQJCvFXQAxovgmyt5ZkW5j7kY3zKulfWa9roWZ55Vsoo2E4uRcZp+6yLI5 i7sDWmXmgpiA8RNMJ8wKZ+o/CHkKBE7wlmXRNCPgkl2U/Mwar+jkgff/WXZecXsb 6pP6x72dhxcemyf/zQQ2oh//RwgQdVI= -----END CERTIFICATE-----Generated at Sun Oct 4 17:14:27 2026 by rpki-client