$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56a48544-a1c9-3071-bef1-f5cefffd87b2.roa File: 56a48544-a1c9-3071-bef1-f5cefffd87b2.roa (raw, json) Hash identifier: v84SzQAfBYZYffL9iyuCabh912Whgww3i5LvjyZzmEM= Subject key identifier: 2B:8A:BD:34:2B:FA:E0:49:EB:95:06:32:33:A9:8F:09:F6:A3:E6:91 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4984401B33D0CA6890440F80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56a48544-a1c9-3071-bef1-f5cefffd87b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 Oct 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:84:40:1b:33:d0:ca:68:90:44:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8a5cbe0b-a1b8-473c-ae47-693c9aa0ed6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:ed:f7:df:68:0e:6e:b4:a6:67:24:01:97:a2: 4e:c2:8a:26:ad:57:87:45:e7:21:dc:c6:44:d4:25: 4f:ad:d5:f7:92:73:02:e1:38:67:7b:b1:8e:a5:6f: 12:95:6c:d5:86:9f:10:b7:f3:e3:1f:cc:86:4a:07: e3:b1:19:58:4a:c4:a3:d9:86:2e:dc:b1:f5:e0:09: a9:72:d5:d2:02:d5:91:b5:ad:b6:da:1c:e3:9d:4d: 9d:b8:72:51:fb:2c:71:32:3e:ad:a5:c4:34:f8:36: 63:a6:19:21:f6:fe:ac:37:f9:d1:d3:93:15:e1:79: 42:0c:99:7c:2a:48:e6:f3:c2:0d:2b:70:c7:11:64: 0e:f6:6d:2d:a6:e3:c6:7f:2f:7e:42:08:00:8e:78: 9d:8e:6c:aa:b4:d7:11:ed:f8:85:72:f1:7b:74:91: 46:a4:0f:2d:62:00:4f:f5:d8:08:4d:4a:c6:5a:97: 7c:6a:f2:b7:bb:f5:ab:34:61:b5:26:79:90:02:8c: db:46:6e:c9:14:88:9a:c6:20:48:56:f0:39:eb:47: 07:ff:cb:9c:fb:db:aa:b9:61:27:83:00:e8:34:46: 37:fc:0b:40:21:3d:ba:85:85:ac:f6:47:8e:b6:a3: fa:61:f0:24:83:e8:42:05:2f:7a:48:c8:a1:90:9e: 6e:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:BD:34:2B:FA:E0:49:EB:95:06:32:33:A9:8F:09:F6:A3:E6:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56a48544-a1c9-3071-bef1-f5cefffd87b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:39:76:c3:00:be:bb:2d:dc:f9:fd:6d:42:94:85:72:25:6f: ab:5c:48:24:23:db:0c:96:6f:57:41:d1:42:d5:31:6e:b1:64: c3:31:eb:93:2d:1e:20:7c:86:59:67:93:e7:35:3a:5b:2a:df: 07:a6:fa:97:b4:e7:36:7f:ca:6b:e7:00:84:10:c3:10:cf:74: a5:19:72:71:10:71:30:2b:35:11:82:08:f9:5a:9e:f7:41:e9: e0:e7:b9:23:e5:e4:40:1f:34:3e:4b:52:8a:fe:27:46:6f:cc: b9:51:55:9a:d8:f4:1f:a1:16:9b:3f:06:39:87:3f:d8:c9:41: 6d:86:2b:2f:31:ee:cd:15:25:ad:49:70:c8:2c:bb:b4:a8:7d: fd:44:47:33:00:d6:a4:ad:fe:ea:95:75:0b:90:4b:dd:71:b9: 2f:0d:d9:84:86:46:a7:e0:37:dd:74:f9:f8:a9:c0:71:6a:f5: 56:2c:2e:92:53:2d:9c:6a:0b:d7:28:28:ff:48:c8:b9:32:81: 51:3c:dd:11:b3:ab:c3:30:c0:fa:21:b5:39:b8:d3:e8:2d:3f: bf:75:82:56:8f:26:0c:bb:d9:94:50:38:77:74:77:58:17:35: b9:c4:8f:cd:e8:85:e9:39:43:c9:26:d8:a4:c8:b5:b4:b2:3e: 70:7f:4e:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JhEAbM9DKaJBED4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGE1Y2JlMGItYTFiOC00NzNjLWFlNDctNjkzYzlhYTBlZDZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe3332gObrSmZyQBl6JOwoomrVeHRech3MZE 1CVPrdX3knMC4Thne7GOpW8SlWzVhp8Qt/PjH8yGSgfjsRlYSsSj2YYu3LH14Amp ctXSAtWRta222hzjnU2duHJR+yxxMj6tpcQ0+DZjphkh9v6sN/nR05MV4XlCDJl8 Kkjm88INK3DHEWQO9m0tpuPGfy9+QggAjnidjmyqtNcR7fiFcvF7dJFGpA8tYgBP 9dgITUrGWpd8avK3u/WrNGG1JnmQAozbRm7JFIiaxiBIVvA560cH/8uc+9uquWEn gwDoNEY3/AtAIT26hYWs9keOtqP6YfAkg+hCBS96SMihkJ5uIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCuKvTQr+uBJ65UGMjOpjwn2o+aRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTZhNDg1NDQtYTFjOS0z MDcxLWJlZjEtZjVjZWZmZmQ4N2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi3LMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEA5dsMAvrst3Pn9bUKUhXIlb6tcSCQj2wyWb1dB0ULVMW6xZMMx65Mt HiB8hllnk+c1Olsq3wem+pe05zZ/ymvnAIQQwxDPdKUZcnEQcTArNRGCCPlanvdB 6eDnuSPl5EAfND5LUor+J0ZvzLlRVZrY9B+hFps/BjmHP9jJQW2GKy8x7s0VJa1J cMgsu7Soff1ERzMA1qSt/uqVdQuQS91xuS8N2YSGRqfgN910+fipwHFq9VYsLpJT LZxqC9coKP9IyLkygVE83RGzq8MwwPohtTm40+gtP791glaPJgy72ZRQOHd0d1gX NbnEj83ohek5Q8km2KTItbSyPnB/Ttk= -----END CERTIFICATE-----Generated at Sat Oct 10 14:59:18 2026 by rpki-client