$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa File: 5050e10f-3603-3531-ae6a-2649953d3026.roa (raw, json) Hash identifier: +WLYeYTjTlqgaKpQRw1zzbTFJvoB56ZcEu6wkVH3cK8= Subject key identifier: A4:7B:5E:76:3B:76:EC:10:0E:85:64:E3:AD:C3:EF:70:64:BA:CC:12 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F498441FF4D892BAED0577800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:41:ff:4d:89:2b:ae:d0:57:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=df1c3420-2055-487b-b11d-5e5342af4c97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:5c:7b:74:f6:f8:84:df:43:aa:8b:b5:05:30: 96:38:e6:e0:3a:01:09:26:2a:24:5d:53:88:de:0e: 33:90:90:6d:72:33:91:a5:89:aa:fa:cb:0c:96:37: e2:74:e9:db:9b:85:2b:4e:f9:84:92:b9:83:ae:34: cd:c1:0c:01:8d:0f:31:a2:dd:47:51:b3:e3:6f:e3: b5:ba:00:0c:90:27:a7:bf:34:01:13:3a:bf:b9:d8: 83:6e:6b:ca:7b:4b:bb:38:58:3c:62:f7:c9:f7:44: 41:9a:f4:83:c4:0e:1e:f9:9e:aa:3a:dd:d9:79:a3: e9:c5:90:46:d9:c9:d5:07:fb:20:5f:d1:d2:ff:ea: 1d:71:76:b3:c1:ff:05:64:87:2f:73:d9:99:e9:79: 49:94:5f:73:d1:61:01:d7:d9:47:ac:d9:d0:b6:6a: 2e:a5:56:89:92:b8:a8:85:90:cf:9a:25:07:e2:f7: 4a:26:96:b5:22:28:6d:4a:65:bc:a6:bf:51:cc:91: aa:f6:c5:00:14:6d:39:77:55:e4:30:8d:ee:5b:87: 20:6b:39:f1:58:8e:09:05:1b:95:5a:5d:0a:6e:83: f3:01:e3:d9:de:5b:83:85:c2:a0:8e:5c:8a:29:a4: 7b:79:16:aa:8a:1a:d4:56:52:05:f7:18:64:dc:87: 74:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7B:5E:76:3B:76:EC:10:0E:85:64:E3:AD:C3:EF:70:64:BA:CC:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5050e10f-3603-3531-ae6a-2649953d3026.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 02:45:35:c6:a0:36:35:56:55:e8:9e:91:96:b4:ae:8b:d4:37: 0b:c7:6b:a9:13:04:0f:cc:06:67:90:66:ab:41:0a:74:be:f2: 34:38:32:ef:f4:91:c2:be:23:49:f9:1a:5a:93:8f:14:1b:d0: ee:05:8f:a3:72:6c:98:e1:ab:89:22:fe:41:9f:6d:35:21:ca: d7:1d:4e:cd:c7:f8:be:81:5b:f1:52:e1:dd:27:1f:3a:d9:16: fc:73:3a:f9:a3:3b:98:ec:df:38:69:1f:4c:95:43:75:64:22: 2e:73:5b:7f:94:7d:13:e0:97:3b:01:43:8e:bb:9b:84:8f:ae: e4:ec:80:e6:bf:2d:7a:59:37:9b:db:81:aa:01:e8:a7:38:ef: 2b:f4:78:a8:1f:f5:a2:b0:cb:ff:80:9f:49:ba:f1:86:ef:43: 12:70:d5:a8:f2:59:d2:ea:f3:b8:ea:d4:e0:4f:08:48:4d:1c: f1:4c:a2:14:cf:c1:18:bf:2d:11:52:81:0b:91:96:d3:ea:a8: f7:b4:ff:cc:7e:89:e4:3d:3b:26:35:33:48:a0:c7:92:71:6e: 77:6d:ca:e4:c9:e4:9e:9e:cf:4e:df:ad:45:57:e4:a6:c5:9a: 3b:11:2d:3a:6f:f9:ff:ce:b2:1d:3e:e8:d9:ab:42:5d:e3:a4: 1b:98:eb:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhEH/TYkrrtBXeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGYxYzM0MjAtMjA1NS00ODdiLWIxMWQtNWU1MzQyYWY0Yzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnlx7dPb4hN9Dqou1BTCWOObgOgEJJiokXVOI 3g4zkJBtcjORpYmq+ssMljfidOnbm4UrTvmEkrmDrjTNwQwBjQ8xot1HUbPjb+O1 ugAMkCenvzQBEzq/udiDbmvKe0u7OFg8YvfJ90RBmvSDxA4e+Z6qOt3ZeaPpxZBG 2cnVB/sgX9HS/+odcXazwf8FZIcvc9mZ6XlJlF9z0WEB19lHrNnQtmoupVaJkrio hZDPmiUH4vdKJpa1IihtSmW8pr9RzJGq9sUAFG05d1XkMI3uW4cgaznxWI4JBRuV Wl0KboPzAePZ3luDhcKgjlyKKaR7eRaqihrUVlIF9xhk3Id0twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKR7XnY7duwQDoVk463D73BkuswSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTA1MGUxMGYtMzYwMy0z NTMxLWFlNmEtMjY0OTk1M2QzMDI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3vMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAJFNcagNjVWVeiekZa0rovUNwvHa6kTBA/MBmeQZqtBCnS+8jQ4Mu/0 kcK+I0n5GlqTjxQb0O4Fj6NybJjhq4ki/kGfbTUhytcdTs3H+L6BW/FS4d0nHzrZ FvxzOvmjO5js3zhpH0yVQ3VkIi5zW3+UfRPglzsBQ467m4SPruTsgOa/LXpZN5vb gaoB6Kc47yv0eKgf9aKwy/+An0m68YbvQxJw1ajyWdLq87jq1OBPCEhNHPFMohTP wRi/LRFSgQuRltPqqPe0/8x+ieQ9OyY1M0igx5JxbndtyuTJ5J6ez07frUVX5KbF mjsRLTpv+f/Osh0+6NmrQl3jpBuY6+o= -----END CERTIFICATE-----Generated at Mon Oct 12 19:38:46 2026 by rpki-client