$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4764f622-d284-3683-bb0a-1d1f5c82a42d.roa File: 4764f622-d284-3683-bb0a-1d1f5c82a42d.roa (raw, json) Hash identifier: LaY2Jd0GVvXtmeF4b3GxQLMOUxA9woMWQ7xX7zC7nu0= Subject key identifier: D6:CF:55:9C:EE:A4:22:1A:AC:53:A3:86:50:51:DF:03:4D:D4:75:EC Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B8CC6A03474C8AFDDC200 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4764f622-d284-3683-bb0a-1d1f5c82a42d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:8c:c6:a0:34:74:c8:af:dd:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=4a74da87-1e02-487d-9c80-9b1d7930ad7e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:68:c4:91:84:91:6a:13:3e:a6:85:02:b1:02: a7:24:bf:07:c9:f3:3d:3a:fe:7c:ec:e5:17:12:82: 03:84:e4:27:ad:d1:14:ef:7d:53:c5:48:74:e4:f7: 6e:1b:da:d9:9f:e6:d5:ba:c3:30:8a:4e:33:b8:cc: 0a:83:ec:d9:b1:18:d7:ec:51:94:98:17:1a:2a:00: 74:28:c2:b9:d3:fc:aa:17:aa:97:58:11:04:a3:f5: cf:bf:5f:9c:e9:5a:4f:3c:35:1f:e0:f7:28:ae:a2: 8a:a7:b9:70:d8:51:79:e1:17:61:90:dc:7c:88:66: 16:98:37:52:39:90:b0:ac:29:ed:6f:59:d5:cd:ae: 7c:33:5c:ba:df:8e:b8:6f:52:ae:2c:63:b7:e0:30: 6e:96:19:9d:df:b3:28:a6:f2:18:64:ea:ef:d3:e7: e6:54:0e:20:15:55:fb:51:ac:13:31:cc:87:c4:2b: 68:ad:a9:91:b8:ce:62:b3:da:fb:81:0a:5b:cb:8c: 44:f7:7f:79:b5:d3:09:1d:79:57:aa:02:2b:a7:cb: 86:5d:7a:d3:d8:ee:75:69:35:2e:ff:cf:f1:61:1f: da:a4:48:92:ed:81:45:d9:b3:99:41:0a:d2:14:af: 25:7e:3e:cf:66:c6:50:e5:d4:c0:2c:5e:83:ba:72: 30:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:CF:55:9C:EE:A4:22:1A:AC:53:A3:86:50:51:DF:03:4D:D4:75:EC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/4764f622-d284-3683-bb0a-1d1f5c82a42d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:5b:5a:d5:07:12:9b:b9:c3:7a:ae:89:08:e0:d7:4d:3a:ab: 97:d0:2c:4a:09:fc:5d:30:8b:43:e2:a1:59:24:6a:27:b7:b1: c9:84:e6:87:9c:40:18:b1:41:e2:38:0e:21:c4:35:4d:e9:bf: 17:61:61:5f:77:3a:91:23:91:b6:fe:b5:82:a5:36:4d:35:ec: e7:9a:b1:e3:ae:2d:da:36:6b:e5:df:11:17:ca:ff:fb:81:7e: 20:b5:a7:8b:3e:71:be:1e:b4:b3:6f:f5:26:e9:1a:cd:05:91: 38:25:10:52:0a:14:d5:09:cb:b1:0d:b0:6a:2c:64:cf:a9:6f: 03:f6:09:4d:48:b4:36:22:57:e8:fa:07:09:57:84:b7:a1:36: 7b:89:32:34:d6:29:92:2f:22:4b:31:90:74:7b:4d:a1:33:35: 6b:ae:f5:69:6e:59:25:04:39:33:92:f0:29:e1:6d:80:d9:c3: 6f:71:2f:84:03:e5:f4:1d:21:8d:8c:f5:b3:2e:68:79:0e:39: d4:dc:15:ee:06:7f:79:79:e1:91:8c:94:89:e3:8b:9a:c6:10: bc:da:fc:97:3f:05:e8:c7:e1:ce:42:6a:ed:58:26:e7:62:93: d2:b6:65:c1:74:0e:9f:01:7a:6d:63:55:24:50:cc:ef:4f:60: 63:89:27:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je4zGoDR0yK/dwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NGE3NGRhODctMWUwMi00ODdkLTljODAtOWIxZDc5MzBhZDdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsGjEkYSRahM+poUCsQKnJL8HyfM9Ov587OUX EoIDhOQnrdEU731TxUh05PduG9rZn+bVusMwik4zuMwKg+zZsRjX7FGUmBcaKgB0 KMK50/yqF6qXWBEEo/XPv1+c6VpPPDUf4PcorqKKp7lw2FF54RdhkNx8iGYWmDdS OZCwrCntb1nVza58M1y63464b1KuLGO34DBulhmd37MopvIYZOrv0+fmVA4gFVX7 UawTMcyHxCtoramRuM5is9r7gQpby4xE9395tdMJHXlXqgIrp8uGXXrT2O51aTUu /8/xYR/apEiS7YFF2bOZQQrSFK8lfj7PZsZQ5dTALF6DunIwLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNbPVZzupCIarFOjhlBR3wNN1HXsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNDc2NGY2MjItZDI4NC0z NjgzLWJiMGEtMWQxZjVjODJhNDJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADNbWtUHEpu5w3quiQjg1006q5fQLEoJ/F0wi0PioVkkaie3scmE5oec QBixQeI4DiHENU3pvxdhYV93OpEjkbb+tYKlNk017OeaseOuLdo2a+XfERfK//uB fiC1p4s+cb4etLNv9SbpGs0FkTglEFIKFNUJy7ENsGosZM+pbwP2CU1ItDYiV+j6 BwlXhLehNnuJMjTWKZIvIksxkHR7TaEzNWuu9WluWSUEOTOS8CnhbYDZw29xL4QD 5fQdIY2M9bMuaHkOOdTcFe4Gf3l54ZGMlInji5rGELza/Jc/BejH4c5Cau1YJudi k9K2ZcF0Dp8Bem1jVSRQzO9PYGOJJ04= -----END CERTIFICATE-----Generated at Mon Sep 28 21:00:09 2026 by rpki-client