$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa File: 6d02bb79-bd14-3045-b676-fd4335e3f038.roa (raw, json) Hash identifier: Bn1BNeUq/hu2K5l1HAepWtajSwGrUPfaQiXErS2fSB4= Subject key identifier: A3:1F:51:E4:AF:61:AF:BC:AA:33:40:4C:05:5E:63:54:2E:F4:5B:78 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B94AC22360B08502C3000 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.191.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:94:ac:22:36:0b:08:50:2c:30:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=09bee0d7-e867-4b3d-a4e7-8dba968aba16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b2:ea:52:49:fc:97:73:65:da:84:af:c4:cc: 6b:f0:b7:1e:85:2b:f2:cb:17:54:fc:ea:dd:c9:a1: 9c:f2:3e:da:c5:ab:53:96:85:dc:cd:ad:37:98:4e: 50:7c:dc:8d:58:df:13:eb:b8:22:c1:c1:5b:52:3a: 71:7b:99:bb:6c:43:a5:76:87:53:4c:47:ac:d9:9e: 4f:f3:bb:a3:9b:e7:81:ee:d4:38:82:3e:0c:46:e0: 05:a3:1c:99:d4:27:8f:e8:74:0b:fe:cb:5f:04:fc: 9e:ee:3f:66:78:7d:9c:db:ba:d5:3b:e6:fc:ec:78: cc:17:9c:bc:77:15:e8:34:52:0f:ec:b9:d9:67:b6: c5:18:35:c2:7a:2e:31:db:70:d0:a4:ff:91:6d:0c: dc:32:7a:9f:b0:80:e2:53:d7:0a:a4:c3:a5:f5:bb: b6:8a:02:b8:cf:62:56:06:42:90:cc:58:69:c2:e9: 42:5a:3f:1a:cc:e5:d8:99:a4:94:5d:39:f0:c2:71: df:be:00:d1:48:29:a7:52:77:81:d5:d3:73:de:89: 6a:f9:88:a0:3a:34:02:76:99:ed:af:79:6e:d8:6e: 39:82:0c:96:de:e2:37:1b:56:4d:f7:d8:41:0a:6b: ab:fa:7d:50:ef:ff:e1:a4:58:39:e3:60:2d:85:91: 66:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1F:51:E4:AF:61:AF:BC:AA:33:40:4C:05:5E:63:54:2E:F4:5B:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6d02bb79-bd14-3045-b676-fd4335e3f038.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.191.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:bf:f7:34:0d:7b:61:e6:a8:2f:be:89:4b:d9:db:48:b1:7e: b7:21:5a:d4:18:09:82:55:4e:32:f7:03:c5:24:b8:25:5b:79: 9a:94:af:cc:9a:a0:4c:31:83:e9:67:40:79:af:54:91:5b:90: f9:a4:43:26:c5:3d:0e:aa:f4:14:1d:9d:be:d6:c8:13:6f:1b: 4a:a4:b6:1d:aa:02:79:c8:6d:44:8f:c0:51:d8:b9:3c:1a:d2: fc:15:b5:88:55:0d:91:0e:b3:ed:4f:16:7b:b2:42:4d:f8:b5: e6:38:4d:79:0a:c5:a1:19:bf:9b:4c:65:05:cf:5f:56:e5:b9: a9:2d:98:76:e7:4a:ff:1f:eb:54:e4:c1:e7:42:86:8d:4c:53: 43:34:8c:ea:ec:d1:47:9c:0c:7f:f5:d7:e2:93:17:33:58:72: de:46:6e:80:39:8f:79:cb:e0:4a:2a:88:21:65:81:87:d6:ec: 3f:0b:1e:5b:11:b1:6d:a0:29:af:5b:e5:c2:47:b4:aa:07:ed: 1f:f4:17:00:f2:d4:52:67:d7:1c:90:ee:53:ca:2e:4d:10:a7: 92:8a:03:0e:43:cc:fa:56:d0:95:03:a5:95:ff:3a:b8:0c:4e: e6:c0:ab:4a:f3:06:09:23:6c:b8:9b:60:30:e8:48:68:92:33: c0:83:99:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je5SsIjYLCFAsMAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MDliZWUwZDctZTg2Ny00YjNkLWE0ZTctOGRiYTk2OGFiYTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1bLqUkn8l3Nl2oSvxMxr8LcehSvyyxdU/Ord yaGc8j7axatTloXcza03mE5QfNyNWN8T67giwcFbUjpxe5m7bEOldodTTEes2Z5P 87ujm+eB7tQ4gj4MRuAFoxyZ1CeP6HQL/stfBPye7j9meH2c27rVO+b87HjMF5y8 dxXoNFIP7LnZZ7bFGDXCei4x23DQpP+RbQzcMnqfsIDiU9cKpMOl9bu2igK4z2JW BkKQzFhpwulCWj8azOXYmaSUXTnwwnHfvgDRSCmnUneB1dNz3olq+YigOjQCdpnt r3lu2G45ggyW3uI3G1ZN99hBCmur+n1Q7//hpFg542AthZFmQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKMfUeSvYa+8qjNATAVeY1Qu9Ft4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmQwMmJiNzktYmQxNC0z MDQ1LWI2NzYtZmQ0MzM1ZTNmMDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPK/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm/9zQNe2HmqC++iUvZ20ixfrchWtQYCYJVTjL3A8UkuCVbeZqUr8ya oEwxg+lnQHmvVJFbkPmkQybFPQ6q9BQdnb7WyBNvG0qkth2qAnnIbUSPwFHYuTwa 0vwVtYhVDZEOs+1PFnuyQk34teY4TXkKxaEZv5tMZQXPX1bluaktmHbnSv8f61Tk wedCho1MU0M0jOrs0UecDH/11+KTFzNYct5GboA5j3nL4EoqiCFlgYfW7D8LHlsR sW2gKa9b5cJHtKoH7R/0FwDy1FJn1xyQ7lPKLk0Qp5KKAw5DzPpW0JUDpZX/OrgM TubAq0rzBgkjbLibYDDoSGiSM8CDmU0= -----END CERTIFICATE-----Generated at Sun Sep 27 07:59:40 2026 by rpki-client