$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa File: 6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa (raw, json) Hash identifier: dXFOcwqtQTyo4lByeU8SOLD3NJU1Hk+yGj6YaIUqCCg= Subject key identifier: D3:D6:68:8D:43:8A:56:DA:E0:41:F8:E7:03:93:C9:AC:E6:09:E2:3C Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983CFAF0F8C5B1024FB4300 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.23.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:cf:af:0f:8c:5b:10:24:fb:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=da5025f1-ed42-4015-9907-a00ed8078a99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:38:56:9e:16:cb:bc:17:24:84:8e:65:19:95: 84:c6:0b:d4:ed:e3:f6:a4:b9:b8:94:12:bc:62:30: f6:2e:b9:9f:cb:d7:1c:7f:b7:b6:52:e4:24:17:eb: 3d:4e:1e:ff:be:9b:89:20:0d:ea:c4:22:7e:bc:60: fb:60:fc:ba:7e:88:b9:bb:fb:1f:17:c8:3d:c8:4a: 5f:15:1e:1c:3c:95:07:1e:7f:5f:07:b2:b7:f8:a4: 64:18:dc:18:b2:ba:ec:b6:1d:a2:56:8c:38:64:cc: 98:ae:5f:7e:86:96:65:a2:52:48:80:d7:dc:8f:95: 63:f6:f0:2b:dd:f2:7d:ca:7b:eb:b8:e5:0d:9b:07: 13:45:4a:0d:4a:59:41:6a:e3:9b:bf:a5:a1:aa:ce: b7:a2:d5:96:6d:9f:a3:85:49:e5:d1:e6:f9:ea:bb: ab:93:2f:bc:bf:6e:bf:cc:4b:f7:27:8a:42:ab:91: b2:bc:31:ad:47:9c:4a:e3:db:cb:56:02:ae:54:91: 03:55:83:07:2d:0d:6a:81:bb:86:c5:8d:e9:22:41: e1:fa:d1:79:d7:f7:7e:02:07:67:52:6d:09:91:3f: f6:9f:a0:6f:08:78:e0:dc:81:e4:64:0d:87:0a:8a: f6:b8:92:08:91:bd:82:45:91:f9:3f:05:91:2b:0c: a6:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:D6:68:8D:43:8A:56:DA:E0:41:F8:E7:03:93:C9:AC:E6:09:E2:3C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/6dd9c0f5-5847-3b8f-916d-3e9eb2190031.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.23.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0d:cd:d4:f3:82:ef:95:03:ae:61:45:66:7a:fb:75:9e:ef: 3a:fd:6c:d9:31:0b:4a:26:b6:28:28:a8:67:96:88:8c:61:e1: f1:5c:a6:c4:cc:34:2e:92:59:62:1f:0c:29:1d:d0:ac:51:67: bd:4b:ce:18:65:a4:21:f9:6d:60:1e:2c:ba:e4:61:c1:8b:72: e7:03:84:d6:9c:7f:9d:e7:92:88:4d:a9:ee:53:a5:77:82:8e: ec:3d:b2:9b:44:24:87:ac:ec:13:72:99:5d:56:26:79:39:21: b1:5c:1a:79:97:b4:23:b7:28:3b:7c:a1:99:55:cd:fd:6d:f7: d6:c7:3b:30:7c:b8:3d:01:80:c6:c5:56:62:4d:b6:1a:fb:ae: 4a:56:0d:ac:44:34:60:4c:3c:68:f3:cb:61:a6:c5:2c:5b:12: d7:59:98:43:ef:c8:97:e2:d4:df:5c:e3:7d:c2:e4:1a:58:7b: 8a:38:eb:1c:94:8e:d6:55:04:86:9f:f4:48:6b:28:74:fa:2b: 1e:64:0b:89:46:08:fd:20:da:ad:e3:37:66:48:a5:ae:6b:5e: aa:fd:e9:c7:07:3a:b9:d8:8d:9a:95:85:8a:74:0c:0b:de:05: 0a:8c:0d:56:96:3b:6c:96:7e:43:78:86:3d:aa:c6:d4:48:6a: 5d:d0:ae:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg8+vD4xbECT7QwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGE1MDI1ZjEtZWQ0Mi00MDE1LTk5MDctYTAwZWQ4MDc4YTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApzhWnhbLvBckhI5lGZWExgvU7eP2pLm4lBK8 YjD2Lrmfy9ccf7e2UuQkF+s9Th7/vpuJIA3qxCJ+vGD7YPy6foi5u/sfF8g9yEpf FR4cPJUHHn9fB7K3+KRkGNwYsrrsth2iVow4ZMyYrl9+hpZlolJIgNfcj5Vj9vAr 3fJ9ynvruOUNmwcTRUoNSllBauObv6Whqs63otWWbZ+jhUnl0eb56rurky+8v26/ zEv3J4pCq5GyvDGtR5xK49vLVgKuVJEDVYMHLQ1qgbuGxY3pIkHh+tF51/d+Agdn Um0JkT/2n6BvCHjg3IHkZA2HCor2uJIIkb2CRZH5PwWRKwymWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPWaI1Dilba4EH45wOTyazmCeI8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNmRkOWMwZjUtNTg0Ny0z YjhmLTkxNmQtM2U5ZWIyMTkwMDMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPIXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoNzdTzgu+VA65hRWZ6+3We7zr9bNkxC0omtigoqGeWiIxh4fFcpsTM NC6SWWIfDCkd0KxRZ71LzhhlpCH5bWAeLLrkYcGLcucDhNacf53nkohNqe5TpXeC juw9sptEJIes7BNymV1WJnk5IbFcGnmXtCO3KDt8oZlVzf1t99bHOzB8uD0BgMbF VmJNthr7rkpWDaxENGBMPGjzy2GmxSxbEtdZmEPvyJfi1N9c433C5BpYe4o46xyU jtZVBIaf9EhrKHT6Kx5kC4lGCP0g2q3jN2ZIpa5rXqr96ccHOrnYjZqVhYp0DAve BQqMDVaWO2yWfkN4hj2qxtRIal3QrsU= -----END CERTIFICATE-----Generated at Mon Sep 28 21:40:51 2026 by rpki-client