$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa File: 5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa (raw, json) Hash identifier: lrKAoaaldd0Xl2phLbckTpKkRLUW4VofsuMEdMN+im8= Subject key identifier: D7:3A:61:32:62:EF:53:0B:DD:6A:0F:98:9F:C3:36:38:95:39:6D:AE Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B8E85E2A43CE2A8B7E080 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.97.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:8e:85:e2:a4:3c:e2:a8:b7:e0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=1f13507d-61cc-4d00-bcd6-c3c871694b6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:6c:f9:d4:86:56:8c:15:d7:c0:7b:ff:4f:08: bd:cd:d7:80:ae:dd:cc:42:ee:af:c5:d3:53:de:9a: ca:57:1c:e2:b7:16:32:ff:1b:fd:63:bd:c7:26:5c: d4:76:a3:9b:e4:db:63:a7:6f:45:2a:eb:88:8b:85: 2f:02:d3:e6:96:52:28:11:48:96:59:4b:19:b7:03: 8d:2b:ea:bf:80:b4:1c:ab:64:09:12:45:7b:a4:61: 7a:26:f6:7d:66:41:ab:d6:d8:59:c1:3c:02:3f:43: 31:91:7b:bd:25:73:6b:79:98:85:96:3a:58:b7:c9: 7c:0d:04:cd:d9:95:c5:dc:77:ec:17:47:c2:f2:cf: 58:06:7f:3c:56:12:d9:94:0b:e5:03:3e:9e:f9:bd: c5:2b:3e:22:94:80:38:36:f7:a2:d2:54:ff:8c:08: 84:93:8a:a1:f9:60:87:1f:a9:db:ee:b2:97:66:f6: f1:e3:5e:cb:4b:48:7f:0f:12:f1:ab:28:47:2d:69: 19:3b:75:11:e5:53:04:86:c4:a5:18:73:bd:a8:3c: 36:27:2a:06:c4:9f:96:f3:c7:d2:ec:9c:c7:d1:51: ba:83:76:59:ef:0a:86:09:9c:99:99:9f:4f:dc:eb: a5:f3:cd:11:89:3a:6b:fe:06:57:97:4f:4a:5d:0c: cd:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:3A:61:32:62:EF:53:0B:DD:6A:0F:98:9F:C3:36:38:95:39:6D:AE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/5a1d68a6-dea1-3be9-8b6b-d0a0af2ab8b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.97.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:65:cd:f4:3d:6a:6b:cc:b3:11:88:9b:2b:b4:24:ee:9d:a3: 46:10:f8:b0:76:5a:9f:f8:e8:e8:96:9e:2c:d6:fd:0c:90:2b: fb:3b:a8:de:49:44:89:17:45:07:c4:49:1e:f4:92:49:58:ef: f5:da:1c:60:af:51:b9:e4:75:0b:51:78:ea:a0:29:ed:c8:99: 43:68:28:7b:da:42:26:86:17:80:e8:72:4b:ef:eb:a3:af:a1: b5:26:ca:c4:37:85:02:4c:02:b5:06:53:9d:0e:16:f5:cd:4c: f0:06:ce:65:fb:40:ae:2e:1a:eb:7d:d0:e7:5f:e2:2c:aa:a0: b4:1f:54:57:21:01:14:58:aa:d6:e8:51:5b:d7:5f:c1:3d:a8: d4:81:47:93:23:96:c2:42:69:8e:73:25:f7:e3:32:e4:f6:fe: d4:f7:28:8a:4c:bb:ee:c3:28:a6:c7:6a:11:db:f4:04:1c:da: 74:36:be:03:0e:fb:10:5c:0f:1f:7b:01:97:a5:dd:10:a6:af: f0:7d:18:45:0a:bb:13:fe:be:74:3d:54:9b:cd:2e:fe:98:28: bb:bd:75:0c:12:bf:2e:08:79:47:e7:52:bf:0e:56:94:c1:62: 32:65:83:6a:30:08:bf:29:43:62:f0:5a:cb:b5:a6:6d:a7:77: e3:4c:20:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je46F4qQ84qi34IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MWYxMzUwN2QtNjFjYy00ZDAwLWJjZDYtYzNjODcxNjk0YjZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Wz51IZWjBXXwHv/Twi9zdeArt3MQu6vxdNT 3prKVxzitxYy/xv9Y73HJlzUdqOb5Ntjp29FKuuIi4UvAtPmllIoEUiWWUsZtwON K+q/gLQcq2QJEkV7pGF6JvZ9ZkGr1thZwTwCP0MxkXu9JXNreZiFljpYt8l8DQTN 2ZXF3HfsF0fC8s9YBn88VhLZlAvlAz6e+b3FKz4ilIA4Nvei0lT/jAiEk4qh+WCH H6nb7rKXZvbx417LS0h/DxLxqyhHLWkZO3UR5VMEhsSlGHO9qDw2JyoGxJ+W88fS 7JzH0VG6g3ZZ7wqGCZyZmZ9P3Oul880RiTpr/gZXl09KXQzN5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNc6YTJi71ML3WoPmJ/DNjiVOW2uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNWExZDY4YTYtZGVhMS0z YmU5LThiNmItZDBhMGFmMmFiOGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPJhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtlzfQ9amvMsxGImyu0JO6do0YQ+LB2Wp/46OiWnizW/QyQK/s7qN5J RIkXRQfESR70kklY7/XaHGCvUbnkdQtReOqgKe3ImUNoKHvaQiaGF4Dockvv66Ov obUmysQ3hQJMArUGU50OFvXNTPAGzmX7QK4uGut90Odf4iyqoLQfVFchARRYqtbo UVvXX8E9qNSBR5MjlsJCaY5zJffjMuT2/tT3KIpMu+7DKKbHahHb9AQc2nQ2vgMO +xBcDx97AZel3RCmr/B9GEUKuxP+vnQ9VJvNLv6YKLu9dQwSvy4IeUfnUr8OVpTB YjJlg2owCL8pQ2LwWsu1pm2nd+NMIKo= -----END CERTIFICATE-----Generated at Sun Sep 27 12:33:07 2026 by rpki-client