$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/391074b6-fdc3-3a71-a0ae-0f123817890e.roa File: 391074b6-fdc3-3a71-a0ae-0f123817890e.roa (raw, json) Hash identifier: QaU95Gks+XX3IjCoht5PIwo3cB59I6ubJsldl8JQL8E= Subject key identifier: E3:F9:49:31:0A:B3:77:B4:1E:73:5E:EC:26:E0:16:89:4B:33:AD:85 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D0D78C9123CE2428C4BC Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/391074b6-fdc3-3a71-a0ae-0f123817890e.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.35.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d0:d7:8c:91:23:ce:24:28:c4:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=5538feae-23c1-4aca-affc-8231f9e7ee71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:e7:7d:f7:1a:c1:fa:69:b4:f9:d8:d3:f2:e1: 8a:68:ad:07:5d:09:a1:cb:e0:d6:14:96:5e:10:46: 59:13:5a:0a:3e:b7:1e:33:19:3c:12:3f:43:eb:73: cd:6f:8e:bf:e3:b6:7f:c6:43:0e:35:3f:bb:2a:c1: 31:bd:4d:e4:83:63:53:6a:6d:86:2d:9e:19:fc:30: 29:08:7b:c6:28:8b:1f:17:fc:6b:f0:3d:02:3c:66: 2c:d5:10:9f:8c:28:1d:2e:da:fb:04:ac:9d:b2:66: 67:e4:1f:dc:c9:65:5b:c2:c2:85:2b:9f:7f:98:b1: 50:c6:9d:07:08:82:cb:b1:c6:86:0a:7e:1d:ab:7c: 19:d9:7b:f7:a6:67:1b:09:04:04:5e:f7:68:97:49: 5e:8f:3d:33:08:84:b2:48:fd:1b:17:39:4c:87:07: 96:bf:09:9f:60:84:5c:50:27:51:b2:11:da:9c:8e: 79:dd:b9:4c:fd:87:72:9c:0b:e0:41:99:a2:1b:19: 08:ca:78:71:d7:37:57:6e:3c:22:22:5e:02:16:f9: fd:8a:9c:5b:3d:50:0f:d0:81:3e:2e:95:d3:c6:c2: b3:43:b6:75:88:53:26:a3:fd:bb:f3:f8:97:e1:fd: 6d:a0:62:b9:dd:d7:e5:2c:8d:4f:26:4e:28:21:1f: cb:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:F9:49:31:0A:B3:77:B4:1E:73:5E:EC:26:E0:16:89:4B:33:AD:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/391074b6-fdc3-3a71-a0ae-0f123817890e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.35.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption d8:27:51:f4:23:26:04:76:fe:a8:44:7e:6d:34:ae:6c:5b:08: 12:c2:8d:ba:09:a5:7b:8a:77:9c:61:b9:e3:67:b4:82:c0:f1: b7:eb:f4:bb:2f:cb:ac:d4:dc:c5:c3:b4:4d:c0:28:34:e8:f1: ca:1f:7e:6b:9b:11:cd:e8:31:f1:02:49:54:e4:44:05:9f:1a: 77:2d:2b:ab:f4:02:07:8e:67:00:fd:a4:f1:4e:cf:07:6d:e8: 17:0c:ab:e2:30:d4:9f:ab:8a:bb:10:57:67:be:39:9e:d3:d4: bd:55:cf:c6:51:5a:61:ca:53:bd:e1:7d:51:4f:81:a8:8b:1c: e8:42:d6:5a:45:11:be:7a:47:f1:a8:99:df:ec:0c:86:02:d2: 76:a8:c6:e6:6f:95:0c:d9:6d:e9:92:e8:ad:72:75:80:f7:2a: 40:f1:02:2b:7f:9c:23:99:a1:d2:53:3c:2b:68:80:56:24:38: 35:c0:17:26:be:b3:54:11:59:c1:26:94:c1:68:b2:b9:28:a4: 11:ba:13:11:88:86:f1:ac:21:20:2f:17:70:c8:c3:c3:6c:4a: 44:74:5a:d0:cc:12:2f:21:28:e8:ad:2e:4e:bc:3a:01:43:32: b4:cf:a5:00:bb:16:4f:bc:b2:9d:c2:26:35:c5:74:93:87:65: 2d:7a:de:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9DXjJEjziQoxLwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NTUzOGZlYWUtMjNjMS00YWNhLWFmZmMtODIzMWY5ZTdlZTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Od99xrB+mm0+djT8uGKaK0HXQmhy+DWFJZe EEZZE1oKPrceMxk8Ej9D63PNb46/47Z/xkMONT+7KsExvU3kg2NTam2GLZ4Z/DAp CHvGKIsfF/xr8D0CPGYs1RCfjCgdLtr7BKydsmZn5B/cyWVbwsKFK59/mLFQxp0H CILLscaGCn4dq3wZ2Xv3pmcbCQQEXvdol0lejz0zCISySP0bFzlMhweWvwmfYIRc UCdRshHanI553blM/YdynAvgQZmiGxkIynhx1zdXbjwiIl4CFvn9ipxbPVAP0IE+ LpXTxsKzQ7Z1iFMmo/278/iX4f1toGK53dflLI1PJk4oIR/LLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOP5STEKs3e0HnNe7CbgFolLM62FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvMzkxMDc0YjYtZmRjMy0z YTcxLWEwYWUtMGYxMjM4MTc4OTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBANgnUfQjJgR2/qhEfm00rmxbCBLCjboJpXuKd5xhueNntILA8bfr9Lsv y6zU3MXDtE3AKDTo8coffmubEc3oMfECSVTkRAWfGnctK6v0AgeOZwD9pPFOzwdt 6BcMq+Iw1J+rirsQV2e+OZ7T1L1Vz8ZRWmHKU73hfVFPgaiLHOhC1lpFEb56R/Go md/sDIYC0naoxuZvlQzZbemS6K1ydYD3KkDxAit/nCOZodJTPCtogFYkODXAFya+ s1QRWcEmlMFosrkopBG6ExGIhvGsISAvF3DIw8NsSkR0WtDMEi8hKOitLk68OgFD MrTPpQC7Fk+8sp3CJjXFdJOHZS163mY= -----END CERTIFICATE-----Generated at Tue Oct 6 20:31:40 2026 by rpki-client