$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa File: 709022ba-bce3-332b-b27b-e9977a14f24c.roa (raw, json) Hash identifier: NpiXWj0Kyxdyf/zWU97ygqmocBBTMJUUKwoVKxK+ISo= Subject key identifier: A9:37:5A:E6:C6:50:03:23:5E:86:5F:80:3D:F0:AC:B6:34:BC:A3:D8 Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F497B88F05C77CA083742F700 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.18.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7b:88:f0:5c:77:ca:08:37:42:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=320898c8-b097-4ebe-adf5-a1fe61371fbb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:a0:94:fb:80:fb:e6:2d:4c:b6:40:75:96:ba: 0f:0d:d7:05:f7:2c:5b:b8:2c:dd:53:72:22:41:7c: e7:c5:90:45:77:20:09:9b:df:19:c4:23:26:4e:65: f6:53:56:35:af:b8:44:c5:0a:e2:17:98:45:41:a3: f3:c2:26:02:43:78:be:bb:be:67:ec:c5:c1:f2:4d: a0:2d:f4:57:33:2d:12:0b:1d:32:59:16:5d:39:32: f4:d6:ea:93:de:1a:8e:51:60:3b:ae:e9:ff:28:d5: 85:00:58:33:d0:7b:49:74:66:16:4f:f9:ab:a2:4f: ef:5f:a8:fa:f9:67:6c:24:7a:bc:5f:8a:f8:f8:06: 2e:dd:55:ca:c3:8b:6a:1c:0e:db:b3:54:96:15:d5: 60:68:6e:79:e6:81:98:93:29:67:03:91:d4:6f:3e: 7e:bd:2f:28:c6:1f:cf:d4:ac:2f:0e:79:a4:fd:03: 9e:ac:98:ec:13:10:c2:fe:dc:eb:8a:d6:6d:c4:b5: 1a:6e:3a:c5:94:b1:fa:c5:9c:d4:f6:27:70:0f:12: bc:05:c6:3a:36:68:07:1f:8c:71:6a:6b:f8:9f:88: d8:13:69:cf:48:24:52:00:04:5e:51:4f:63:97:38: 87:3f:ed:9a:18:56:f9:48:b4:5f:51:dc:bc:cf:e3: 5e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:37:5A:E6:C6:50:03:23:5E:86:5F:80:3D:F0:AC:B6:34:BC:A3:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/709022ba-bce3-332b-b27b-e9977a14f24c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.18.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:62:00:27:d1:34:7c:e7:09:7a:57:15:fe:15:b8:8f:aa:c7: c4:ee:70:6d:56:7e:a6:0b:3d:e0:ee:26:05:31:b3:38:af:7d: af:44:12:55:ea:75:4b:05:32:96:1e:6e:a4:e0:87:37:57:cf: 34:e0:8a:a5:e4:78:fb:27:05:b8:ba:2a:94:1a:e2:77:1e:a7: e6:55:7b:3f:1b:83:fc:6c:80:e9:0b:60:3d:e0:f4:32:29:48: 4d:4d:f9:13:79:6a:06:7c:de:82:1d:3a:af:6c:99:73:dc:25: 7e:42:cb:ed:b7:0d:27:fd:a6:de:d5:d7:7b:56:f8:a6:e6:6b: 2c:eb:61:1c:ad:67:b3:f1:2f:20:b5:a1:23:c7:56:7b:cf:49: ee:a5:c6:9b:21:64:03:3b:33:c4:8c:07:05:2f:5e:65:56:93: f2:6e:f0:bc:14:da:75:4f:cc:5e:34:cf:0d:d4:9c:df:53:a8: 35:a1:dc:98:82:64:2b:9b:29:cd:52:85:12:38:9e:79:a3:78: b1:75:72:12:7f:6a:95:4b:44:11:8d:99:88:ce:42:21:32:75: fd:bf:a8:75:eb:59:ad:4b:18:4d:0c:bc:16:f2:dd:55:5b:34: 06:79:02:f6:19:bd:5b:74:80:8b:28:b2:86:57:af:53:8b:13: 53:b8:1c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Je4jwXHfKCDdC9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzIwODk4YzgtYjA5Ny00ZWJlLWFkZjUtYTFmZTYxMzcxZmJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqCU+4D75i1MtkB1lroPDdcF9yxbuCzdU3Ii QXznxZBFdyAJm98ZxCMmTmX2U1Y1r7hExQriF5hFQaPzwiYCQ3i+u75n7MXB8k2g LfRXMy0SCx0yWRZdOTL01uqT3hqOUWA7run/KNWFAFgz0HtJdGYWT/mrok/vX6j6 +WdsJHq8X4r4+AYu3VXKw4tqHA7bs1SWFdVgaG555oGYkylnA5HUbz5+vS8oxh/P 1KwvDnmk/QOerJjsExDC/tzritZtxLUabjrFlLH6xZzU9idwDxK8BcY6NmgHH4xx amv4n4jYE2nPSCRSAAReUU9jlziHP+2aGFb5SLRfUdy8z+NemQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKk3WubGUAMjXoZfgD3wrLY0vKPYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvNzA5MDIyYmEtYmNlMy0z MzJiLWIyN2ItZTk5NzdhMTRmMjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPISMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9iACfRNHznCXpXFf4VuI+qx8TucG1WfqYLPeDuJgUxszivfa9EElXq dUsFMpYebqTghzdXzzTgiqXkePsnBbi6KpQa4ncep+ZVez8bg/xsgOkLYD3g9DIp SE1N+RN5agZ83oIdOq9smXPcJX5Cy+23DSf9pt7V13tW+KbmayzrYRytZ7PxLyC1 oSPHVnvPSe6lxpshZAM7M8SMBwUvXmVWk/Ju8LwU2nVPzF40zw3UnN9TqDWh3JiC ZCubKc1ShRI4nnmjeLF1chJ/apVLRBGNmYjOQiEydf2/qHXrWa1LGE0MvBby3VVb NAZ5AvYZvVt0gIsosoZXr1OLE1O4HG8= -----END CERTIFICATE-----Generated at Tue Sep 29 00:50:15 2026 by rpki-client