$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa File: 387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa (raw, json) Hash identifier: T2KzfZJzTh4cNdMSUP79PYYZ0xd5uSJFzFQ/bQyskxw= Subject key identifier: 6C:61:85:51:89:6B:DA:F7:B4:07:B0:A6:7F:05:6F:F6:7B:53:65:53 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B8D8FBEC6C96D3D22BF40 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.82.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:8d:8f:be:c6:c9:6d:3d:22:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=a113ec1f-76bd-46d2-8f5d-515a19682ee5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:c1:63:0c:cc:47:5f:7e:78:c8:49:3c:8b: 12:11:2e:46:d6:50:fa:be:6c:54:41:41:c5:ae:64: 6a:11:2c:7a:64:33:2c:8b:12:73:d0:a6:32:13:43: e6:44:3d:09:60:eb:30:2e:95:b4:a0:c6:29:ec:d5: d5:1d:05:8c:83:ae:26:60:27:31:24:a3:8c:bf:78: 81:db:56:6e:86:64:f6:ff:22:35:aa:ee:03:15:71: 0f:41:43:f3:67:5f:f9:af:04:c4:48:88:26:8c:cf: b8:60:b8:90:46:79:b2:59:6a:9c:20:3a:84:89:8d: 72:e2:2f:d4:6e:4b:30:d5:b5:99:24:3f:c0:05:6c: 2d:0c:7b:be:bb:07:b1:47:9f:94:50:00:f7:25:1d: 0e:90:cf:a2:98:c5:94:8a:2e:cf:7a:30:b7:52:48: 4a:66:0d:ff:1b:c1:1d:6a:38:3a:f8:13:05:c2:6c: db:43:e1:67:a4:92:08:53:5f:5e:ce:23:08:9d:64: 01:a1:99:df:da:3e:49:99:2a:59:35:1b:cd:19:d0: 5a:2c:6c:38:69:a8:0e:68:05:90:7f:b7:bf:8e:26: 8d:9a:db:73:46:5c:33:32:05:f0:b8:0c:1e:b3:1d: 47:23:87:4f:39:4a:c1:e1:75:d6:e8:19:a7:65:f2: be:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:61:85:51:89:6B:DA:F7:B4:07:B0:A6:7F:05:6F:F6:7B:53:65:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/387a87a1-716d-3c87-b3dc-83e3fb7f12e6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.82.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:79:bd:70:e5:06:1a:56:cb:f5:00:c0:de:d9:46:da:5c:6c: ef:2c:08:6d:e1:ad:fb:df:6f:90:79:a9:d1:ad:60:5f:aa:4d: fc:73:40:69:60:50:46:85:18:3f:92:5a:04:81:fd:e9:5c:4e: 89:7d:f4:b6:84:c4:ac:ad:65:46:7c:88:3f:12:37:ee:dd:06: 18:e0:9b:79:ae:4f:fa:76:f1:83:37:87:a7:1a:67:fc:89:4b: 86:83:70:59:7a:4f:a1:b7:e5:82:61:a8:86:1f:2b:e6:db:64: b9:3b:09:f5:bb:05:2c:5f:0c:61:d6:5f:fd:32:02:08:f0:e6: 40:a2:4f:1a:a8:fd:75:0f:94:b9:46:81:9f:26:ea:08:80:24: 43:93:d2:4c:2b:11:68:c5:f4:a9:9a:ea:e4:85:0a:f4:c4:f3: d6:2b:07:e0:02:0d:39:a2:34:0b:b3:da:d5:18:cf:17:a9:9d: 89:d6:5a:16:96:f4:be:82:3a:cf:40:89:c6:28:44:3c:22:c7: dc:ee:e7:8a:dd:1b:7a:53:0a:9f:cb:09:c0:99:72:ce:80:1e: 2e:1b:af:dd:c1:4a:72:9e:73:f1:21:54:f1:51:69:53:2c:72: fc:88:f1:81:1a:49:45:35:02:92:9f:d2:dd:bd:6f:09:63:a5: fa:ce:fa:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je42PvsbJbT0iv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk YTExM2VjMWYtNzZiZC00NmQyLThmNWQtNTE1YTE5NjgyZWU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4LBYwzMR19+eMhJPIsSES5G1lD6vmxUQUHF rmRqESx6ZDMsixJz0KYyE0PmRD0JYOswLpW0oMYp7NXVHQWMg64mYCcxJKOMv3iB 21ZuhmT2/yI1qu4DFXEPQUPzZ1/5rwTESIgmjM+4YLiQRnmyWWqcIDqEiY1y4i/U bksw1bWZJD/ABWwtDHu+uwexR5+UUAD3JR0OkM+imMWUii7PejC3UkhKZg3/G8Ed ajg6+BMFwmzbQ+FnpJIIU19eziMInWQBoZnf2j5JmSpZNRvNGdBaLGw4aagOaAWQ f7e/jiaNmttzRlwzMgXwuAwesx1HI4dPOUrB4XXW6BmnZfK+KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxhhVGJa9r3tAewpn8Fb/Z7U2VTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzg3YTg3YTEtNzE2ZC0z Yzg3LWIzZGMtODNlM2ZiN2YxMmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIx5vXDlBhpWy/UAwN7ZRtpcbO8sCG3hrfvfb5B5qdGtYF+qTfxzQGlg UEaFGD+SWgSB/elcTol99LaExKytZUZ8iD8SN+7dBhjgm3muT/p28YM3h6caZ/yJ S4aDcFl6T6G35YJhqIYfK+bbZLk7CfW7BSxfDGHWX/0yAgjw5kCiTxqo/XUPlLlG gZ8m6giAJEOT0kwrEWjF9Kma6uSFCvTE89YrB+ACDTmiNAuz2tUYzxepnYnWWhaW 9L6COs9AicYoRDwix9zu54rdG3pTCp/LCcCZcs6AHi4br93BSnKec/EhVPFRaVMs cvyI8YEaSUU1ApKf0t29bwljpfrO+rs= -----END CERTIFICATE-----Generated at Sun Sep 27 06:46:32 2026 by rpki-client