$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b54aaf6-1f09-382f-bd7d-907b05195b43.roa File: 6b54aaf6-1f09-382f-bd7d-907b05195b43.roa (raw, json) Hash identifier: tEkbInUHJbNAn3wYO7tpnO8on+Hhk0xyazJPMO3G/4Y= Subject key identifier: 50:E4:93:9F:5E:D7:DE:67:4A:35:CE:CC:CF:A5:5A:30:74:29:7F:66 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E177A0F7C3167807ED80 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b54aaf6-1f09-382f-bd7d-907b05195b43.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 Oct 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e1:77:a0:f7:c3:16:78:07:ed:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3c61a954-4e66-45e4-9861-13bf75d19350 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ec:9e:33:2e:b6:76:44:e3:bd:71:c8:46:e7: d4:a5:41:c9:7a:5a:6b:aa:2f:4f:79:7a:54:0b:be: c7:81:d1:5a:65:e1:4c:d7:e9:be:c4:04:b6:dd:e6: 64:d6:6f:04:a3:c5:2f:71:c1:ce:b1:7f:17:01:d2: f8:cb:c2:fe:00:23:85:2b:fc:a6:03:da:55:f2:2c: 11:f7:9a:f5:9d:6a:8d:e8:4a:4a:5f:1c:ed:7d:aa: d2:16:b1:71:eb:4f:93:6d:5a:52:3b:e2:f5:bd:12: 52:a8:47:32:08:93:b2:23:bd:e7:09:42:bf:ea:2d: 7c:dc:71:c7:76:18:a3:ae:a5:0e:06:58:36:32:71: fa:e2:ae:54:3a:2e:8a:fe:89:f1:bb:fa:e6:09:e2: 49:89:3b:05:c5:9f:8f:7f:44:0c:47:bd:02:6c:59: 2e:9f:b1:64:81:af:7e:7c:f9:48:bd:8f:51:94:b9: 16:0c:df:a9:94:71:5d:b4:4d:eb:26:da:b1:2d:3b: 11:7a:06:c8:b7:68:2e:04:e4:8a:26:1e:ac:88:23: c4:0a:51:ba:ab:5b:ed:27:69:63:b0:cf:ff:7e:4d: c7:8a:9e:8b:9a:06:ed:fe:d7:61:2c:3d:33:e3:94: 9e:62:e6:07:aa:33:d3:14:b4:ab:64:09:a3:40:28: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:E4:93:9F:5E:D7:DE:67:4A:35:CE:CC:CF:A5:5A:30:74:29:7F:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6b54aaf6-1f09-382f-bd7d-907b05195b43.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:14:61:26:10:d6:ba:9c:84:f9:e9:72:79:8c:dd:14:f9:1a: 6f:12:ee:7a:a2:70:39:95:3c:4f:7e:5d:5d:37:5d:b0:c3:29: 59:7c:b0:e2:d1:a2:e4:d2:92:1c:b8:b1:53:4c:bd:e0:8d:ba: 85:5d:e9:ce:d6:4e:3a:74:16:23:f7:00:4a:5e:94:22:e1:7d: 1f:a2:37:d6:de:06:3d:78:2c:3d:dd:a3:05:98:21:8e:fe:97: 2f:34:a3:0f:85:80:a6:a5:95:b2:35:37:25:ec:e6:e1:52:5b: b6:4e:5c:85:71:9a:9f:2f:87:c2:c6:8e:7d:82:fa:74:38:13: 2e:d5:3e:21:83:e0:b2:a0:40:3b:f3:33:e3:e4:de:54:e0:71: ff:4b:f2:14:00:c7:26:9c:2b:59:45:37:12:f9:d5:e6:d9:98: ec:78:1b:d6:37:3a:0c:ba:f3:ab:11:0f:ba:87:d9:e0:27:fb: df:f3:7b:42:6b:f3:0f:e1:e3:cb:bb:84:3e:c3:b5:3d:23:1a: a4:49:15:43:01:f1:f4:b3:3d:9d:3d:78:ac:8d:6f:8d:f0:00: 51:3b:c6:f9:0f:e7:a6:4d:c5:c1:b2:8d:dd:94:46:f0:fa:98: 8f:88:11:b2:87:5e:82:b0:71:93:bd:be:81:3a:0d:c4:b3:82: db:ee:37:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+F3oPfDFngH7YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2M2MWE5NTQtNGU2Ni00NWU0LTk4NjEtMTNiZjc1ZDE5MzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuyeMy62dkTjvXHIRufUpUHJelprqi9PeXpU C77HgdFaZeFM1+m+xAS23eZk1m8Eo8UvccHOsX8XAdL4y8L+ACOFK/ymA9pV8iwR 95r1nWqN6EpKXxztfarSFrFx60+TbVpSO+L1vRJSqEcyCJOyI73nCUK/6i183HHH dhijrqUOBlg2MnH64q5UOi6K/onxu/rmCeJJiTsFxZ+Pf0QMR70CbFkun7Fkga9+ fPlIvY9RlLkWDN+plHFdtE3rJtqxLTsRegbIt2guBOSKJh6siCPEClG6q1vtJ2lj sM//fk3Hip6Lmgbt/tdhLD0z45SeYuYHqjPTFLSrZAmjQCgNzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFDkk59e195nSjXOzM+lWjB0KX9mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmI1NGFhZjYtMWYwOS0z ODJmLWJkN2QtOTA3YjA1MTk1YjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPM/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0UYSYQ1rqchPnpcnmM3RT5Gm8S7nqicDmVPE9+XV03XbDDKVl8sOLR ouTSkhy4sVNMveCNuoVd6c7WTjp0FiP3AEpelCLhfR+iN9beBj14LD3dowWYIY7+ ly80ow+FgKallbI1NyXs5uFSW7ZOXIVxmp8vh8LGjn2C+nQ4Ey7VPiGD4LKgQDvz M+Pk3lTgcf9L8hQAxyacK1lFNxL51ebZmOx4G9Y3Ogy686sRD7qH2eAn+9/ze0Jr 8w/h48u7hD7DtT0jGqRJFUMB8fSzPZ09eKyNb43wAFE7xvkP56ZNxcGyjd2URvD6 mI+IEbKHXoKwcZO9voE6DcSzgtvuN1k= -----END CERTIFICATE-----Generated at Thu Oct 8 21:13:33 2026 by rpki-client