$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa File: 6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa (raw, json) Hash identifier: iHKDadykVMNcI5Df88e5unTay3SIL13J5+GgVZTLHmI= Subject key identifier: B9:CD:9A:3C:AE:94:F2:1E:CA:29:C2:D5:19:D7:A4:C3:63:EF:D1:67 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B977DAC5FC9A8C6A90800 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.241.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:97:7d:ac:5f:c9:a8:c6:a9:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8bb36f3a-b69b-4e8d-b630-180272e96b6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:bc:80:73:ff:f5:5b:ad:d6:cf:23:69:fd:7f: c8:4e:77:fc:a4:9e:59:22:4a:e2:f0:31:65:be:8b: e0:ea:97:a8:7d:21:76:d1:f0:be:00:51:38:28:c9: 6d:9b:af:bd:41:e9:b6:12:a4:c5:bd:d9:e6:d7:e4: 78:63:98:32:a7:95:d0:61:c1:e8:21:99:2c:0d:b9: 71:c1:fd:8b:18:ce:f5:e1:3f:91:33:f6:fd:80:80: d7:0f:a6:2d:d7:69:d3:aa:ca:4a:40:f7:b8:f2:5c: 87:02:f7:cc:c2:56:84:00:a6:51:14:5b:33:50:03: fe:4a:1e:6f:0a:76:25:73:b7:6b:fb:b4:d4:b4:5c: 79:c4:14:0b:7e:c2:57:6a:d8:49:14:8e:69:82:61: 26:49:23:83:a0:f2:f4:62:86:fc:b9:a1:ae:8d:9a: 42:f5:43:59:3b:29:34:7c:aa:0a:da:bb:c1:e6:97: 1a:27:45:48:d1:25:63:20:f0:6d:65:a6:49:92:42: 9a:bc:2d:c9:0c:76:7d:18:9c:27:e8:d1:3f:95:67: bf:db:fe:57:53:1d:80:72:b6:58:ce:52:cc:80:db: 8f:aa:07:b7:72:f7:cb:57:a5:e1:66:5f:d2:38:4d: 6f:cb:06:01:58:19:66:c3:b0:40:e1:30:d3:be:67: 50:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:CD:9A:3C:AE:94:F2:1E:CA:29:C2:D5:19:D7:A4:C3:63:EF:D1:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6aa8af21-2c82-3299-b18e-6f4f34a7e576.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.241.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:a2:fd:1a:41:9c:b2:93:3d:40:af:c2:09:d6:f2:ed:61:e7: 7a:2f:54:da:c9:f8:ca:6c:5a:f1:b7:0c:42:77:cd:d3:01:b0: 91:6c:44:94:b6:2e:f7:ae:3a:d3:01:4b:d7:58:19:5b:15:3c: 8d:d2:77:44:d3:26:80:0e:37:76:20:48:38:7c:87:f8:f5:f7: f4:a1:65:2f:a5:0b:48:48:19:6e:47:89:32:14:2e:d7:9e:d2: 08:9c:8f:95:96:eb:88:ce:d9:fa:fc:b3:d2:e7:6f:4f:28:f1: 3d:71:9e:df:5e:12:3f:dd:c9:26:2a:dc:48:54:bd:b0:21:b5: 06:74:98:54:9c:b8:d3:64:98:93:59:59:97:67:4b:1d:e1:a9: d6:97:d0:43:6c:bb:38:32:87:9b:91:8e:7b:7f:c1:c9:55:c1: 84:64:f0:5f:1a:c2:87:38:38:ee:0a:06:33:35:24:be:a7:fe: 74:8a:37:0f:db:8f:9c:80:9c:48:58:76:0a:0d:90:e8:70:f2: 49:26:35:97:0f:d6:a1:e0:e7:8f:47:81:ec:b8:80:d2:b1:b7: 62:ac:3c:89:5d:57:6e:2b:7f:cf:fd:33:a1:e1:40:ee:e2:14: 7f:3a:e6:07:94:91:57:43:43:2c:c5:5a:bf:3d:38:ae:8d:d5: 53:42:ca:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5d9rF/JqMapCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGJiMzZmM2EtYjY5Yi00ZThkLWI2MzAtMTgwMjcyZTk2YjZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7yAc//1W63WzyNp/X/ITnf8pJ5ZIkri8DFl vovg6peofSF20fC+AFE4KMltm6+9Qem2EqTFvdnm1+R4Y5gyp5XQYcHoIZksDblx wf2LGM714T+RM/b9gIDXD6Yt12nTqspKQPe48lyHAvfMwlaEAKZRFFszUAP+Sh5v CnYlc7dr+7TUtFx5xBQLfsJXathJFI5pgmEmSSODoPL0Yob8uaGujZpC9UNZOyk0 fKoK2rvB5pcaJ0VI0SVjIPBtZaZJkkKavC3JDHZ9GJwn6NE/lWe/2/5XUx2AcrZY zlLMgNuPqge3cvfLV6XhZl/SOE1vywYBWBlmw7BA4TDTvmdQZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLnNmjyulPIeyinC1RnXpMNj79FnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmFhOGFmMjEtMmM4Mi0z Mjk5LWIxOGUtNmY0ZjM0YTdlNTc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPLxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADei/RpBnLKTPUCvwgnW8u1h53ovVNrJ+MpsWvG3DEJ3zdMBsJFsRJS2 LveuOtMBS9dYGVsVPI3Sd0TTJoAON3YgSDh8h/j19/ShZS+lC0hIGW5HiTIULtee 0gicj5WW64jO2fr8s9Lnb08o8T1xnt9eEj/dySYq3EhUvbAhtQZ0mFScuNNkmJNZ WZdnSx3hqdaX0ENsuzgyh5uRjnt/wclVwYRk8F8awoc4OO4KBjM1JL6n/nSKNw/b j5yAnEhYdgoNkOhw8kkmNZcP1qHg549Hgey4gNKxt2KsPIldV24rf8/9M6HhQO7i FH865geUkVdDQyzFWr89OK6N1VNCyrQ= -----END CERTIFICATE-----Generated at Mon Sep 28 10:50:16 2026 by rpki-client