$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa File: 56b50f1e-7768-31f4-883e-4ac810d5160b.roa (raw, json) Hash identifier: 5hOEciOZZbAtMWnO7cIh7lkPF/gHrOyHUY49cQI/sBs= Subject key identifier: E4:92:C5:DF:C8:9D:EE:94:E6:C3:BE:37:6A:8C:87:5A:30:E5:0B:C5 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497BF8D9DA0C223515673500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 198.45.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:f8:d9:da:0c:22:35:15:67:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=77e74b00-57a6-425e-95d7-aee0c412a0e4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6c:a4:e0:23:28:48:af:6e:fc:92:ff:b4:10: 3c:2c:36:3f:f0:0f:f0:85:b1:e6:8f:95:4d:69:f6: 03:ea:59:93:ad:e4:6d:58:42:3b:79:a6:6e:34:f0: 2f:fc:1b:a0:97:3a:6f:94:0c:d7:4f:50:e1:e3:a1: 9e:d1:c6:5f:13:a9:85:f9:54:bf:ba:08:b9:98:6b: d8:c7:18:59:cb:41:c9:97:c9:33:ea:9e:d3:17:ae: 95:8e:3f:0d:92:27:5a:d1:68:72:80:a0:df:c4:5b: ef:9e:c7:7e:00:63:07:e3:23:93:0a:21:55:8a:25: aa:6b:0b:87:16:f4:6e:9a:95:3f:33:19:5f:48:72: e3:ad:69:54:14:bc:fd:9c:39:f4:23:87:42:ea:e3: 86:d6:ef:50:d7:6b:cb:86:8e:a4:a8:68:fa:83:49: dc:5b:44:46:e3:af:de:99:fd:58:22:79:d0:f2:27: df:41:d0:89:d3:23:2a:f4:62:2f:00:c4:ec:2f:df: 3f:4b:f4:ea:8e:b0:b5:4b:24:96:1d:44:68:5f:3d: 80:cd:91:26:ab:b0:e8:b2:9a:b6:7e:2e:a8:da:25: b3:07:f9:4b:06:d4:49:d4:0e:1e:01:c1:ac:c6:bf: d1:75:f9:86:f6:87:3d:59:e1:37:d9:8a:c3:8f:b7: c5:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:92:C5:DF:C8:9D:EE:94:E6:C3:BE:37:6A:8C:87:5A:30:E5:0B:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/56b50f1e-7768-31f4-883e-4ac810d5160b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 198.45.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:60:f0:18:79:f2:d4:eb:75:c0:b5:5a:41:0d:d6:2e:cb:4c: 78:75:c3:0f:4f:61:53:9a:5e:7c:6c:95:2f:04:d2:00:f1:a2: 16:76:cb:be:7b:03:bb:c9:3b:a4:4d:c5:30:49:61:6d:e6:f9: c2:8c:fa:d9:ba:03:f4:a3:e7:db:27:4d:f5:42:69:3b:c3:7e: 4a:36:fb:56:b5:68:99:ae:05:73:34:2e:37:81:b8:27:51:98: 5d:17:fa:a6:41:70:61:51:e2:fe:fb:f4:40:34:ba:e8:81:99: 51:c5:a1:7f:c6:a3:2c:7e:8c:24:fa:15:3e:36:9c:eb:c5:c0: 46:c7:93:57:58:71:06:5c:a4:9a:71:24:11:06:6f:3f:d3:2f: 23:f7:bc:13:21:00:40:e9:91:b0:b9:20:7a:6e:b2:71:60:f8: a2:73:af:0f:e6:d5:a6:7b:dc:4f:b7:94:e6:7a:e7:17:0b:c1: 3b:8b:fe:ca:33:4b:d9:0a:92:4a:88:6d:89:4b:ff:19:b0:33: b1:e4:16:77:0f:49:bf:69:a8:4e:99:b7:07:4c:a4:5c:44:09: b2:58:72:f6:a5:ff:6f:00:9d:27:12:a9:d4:a3:63:d8:34:ec: a5:b9:46:ff:d2:76:9d:12:50:a8:12:cd:ce:ec:18:0a:48:dd: ad:62:b3:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je/jZ2gwiNRVnNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NzdlNzRiMDAtNTdhNi00MjVlLTk1ZDctYWVlMGM0MTJhMGU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2yk4CMoSK9u/JL/tBA8LDY/8A/whbHmj5VN afYD6lmTreRtWEI7eaZuNPAv/BuglzpvlAzXT1Dh46Ge0cZfE6mF+VS/ugi5mGvY xxhZy0HJl8kz6p7TF66Vjj8Nkida0WhygKDfxFvvnsd+AGMH4yOTCiFViiWqawuH FvRumpU/MxlfSHLjrWlUFLz9nDn0I4dC6uOG1u9Q12vLho6kqGj6g0ncW0RG46/e mf1YInnQ8iffQdCJ0yMq9GIvAMTsL98/S/TqjrC1SySWHURoXz2AzZEmq7Dospq2 fi6o2iWzB/lLBtRJ1A4eAcGsxr/RdfmG9oc9WeE32YrDj7fFfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSSxd/Ine6U5sO+N2qMh1ow5QvFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNTZiNTBmMWUtNzc2OC0z MWY0LTg4M2UtNGFjODEwZDUxNjBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxi2JMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxg8Bh58tTrdcC1WkEN1i7LTHh1ww9PYVOaXnxslS8E0gDxohZ2y757 A7vJO6RNxTBJYW3m+cKM+tm6A/Sj59snTfVCaTvDfko2+1a1aJmuBXM0LjeBuCdR mF0X+qZBcGFR4v779EA0uuiBmVHFoX/Goyx+jCT6FT42nOvFwEbHk1dYcQZcpJpx JBEGbz/TLyP3vBMhAEDpkbC5IHpusnFg+KJzrw/m1aZ73E+3lOZ65xcLwTuL/soz S9kKkkqIbYlL/xmwM7HkFncPSb9pqE6ZtwdMpFxECbJYcval/28AnScSqdSjY9g0 7KW5Rv/Sdp0SUKgSzc7sGApI3a1is1w= -----END CERTIFICATE-----Generated at Mon Sep 28 15:45:00 2026 by rpki-client