$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823555e1-a51f-30a9-b747-993a095789e0.roa File: 823555e1-a51f-30a9-b747-993a095789e0.roa (raw, json) Hash identifier: edy6NmagqK2QN/Z+2D5usg5EP2vyL/yFkaT7mFnl5vs= Subject key identifier: 5A:99:D3:2C:43:4C:B0:FD:48:FA:93:C7:40:CE:DA:86:69:4E:1D:7B Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983E4C6EAF671D161626DC0 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823555e1-a51f-30a9-b747-993a095789e0.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.243.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:e4:c6:ea:f6:71:d1:61:62:6d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=317f4bcc-2c6c-457f-92d7-282a5744aa47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f3:06:9a:99:da:14:90:2f:3f:85:be:32:7f: 9e:ac:81:ab:90:d6:f6:55:69:1f:3c:17:10:db:ee: f5:9e:26:43:1c:5b:f5:f7:ab:28:23:86:68:c8:f6: 3a:c3:f2:d7:7a:13:0a:15:73:e3:e7:f8:01:3e:50: bc:07:2a:7e:0c:6f:07:3c:48:27:bc:11:d9:7d:45: 6c:f1:5c:16:b4:43:79:c7:06:7f:0e:2b:6f:56:d7: db:99:f7:fd:a0:f1:c7:a5:02:5e:42:2a:da:e7:e0: 77:0c:da:cf:2d:b9:ac:3f:2a:5f:a6:8d:71:c0:92: 62:76:aa:68:bb:75:28:77:4a:15:a1:5d:82:2f:1c: f4:48:e6:c9:2a:9f:aa:01:5e:f7:bb:a9:ad:16:ad: d3:69:d1:74:57:49:0c:d2:56:3d:75:9c:03:4c:cc: d9:79:ec:10:48:74:2f:53:f8:d2:6f:b9:15:05:49: 1d:d8:01:5f:1d:a3:44:01:d1:ac:bd:1a:eb:0b:0c: 28:1e:0f:8a:cb:4a:26:d5:33:cc:3d:34:63:29:ae: 9f:f9:b3:4b:9d:a1:f6:1c:30:77:77:02:7d:43:46: 5b:bb:f9:37:a7:f0:23:98:f6:56:1e:06:45:0b:de: 7d:af:fe:e6:7a:c6:92:b0:74:58:e4:c3:21:f1:56: 93:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:99:D3:2C:43:4C:B0:FD:48:FA:93:C7:40:CE:DA:86:69:4E:1D:7B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/823555e1-a51f-30a9-b747-993a095789e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.243.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4c:19:26:78:49:3a:d4:89:b0:cc:32:7f:7e:c3:e1:4d:e2:6d: 9d:77:bb:95:9f:b2:2a:a2:14:b3:e3:ee:e2:0c:ce:15:0a:03: f4:3b:ae:8e:3f:6c:e5:88:d3:4e:26:f6:23:68:eb:f3:a7:52: 03:29:b3:73:52:a7:8d:00:5c:05:2e:1b:36:11:5a:5a:f3:63: aa:4d:77:38:a9:3f:59:f1:b7:c2:2d:4c:ee:8c:fd:10:a9:74: 91:fc:20:c1:3e:2b:fa:e8:aa:e5:08:2a:69:e9:38:ee:93:83: 50:28:9c:c5:6d:12:c0:87:00:63:5d:ce:11:1e:9f:a7:f1:23: 6e:26:4a:db:e8:97:ce:4a:fb:a8:87:8a:9d:3a:85:96:b9:9b: 48:55:b1:ed:ef:00:73:17:df:12:17:0c:de:6a:94:ab:bb:aa: ec:a4:af:52:1b:2e:68:d7:4a:ae:a6:ba:f8:b3:67:76:7f:29: 1e:e7:03:d1:40:6f:97:22:e3:aa:85:3b:29:6d:aa:a9:4b:d3: 9d:63:fd:c2:0b:2e:b1:a4:6f:fa:b5:9d:fd:b3:4a:f7:05:ae: 25:3c:16:68:42:50:f9:30:1e:fe:4f:c2:2b:44:03:40:17:fc: 6f:0c:a6:0e:24:10:0a:5c:4f:6b:21:3e:c2:15:b0:48:f4:eb: c7:04:96:aa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg+TG6vZx0WFibcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzE3ZjRiY2MtMmM2Yy00NTdmLTkyZDctMjgyYTU3NDRhYTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/MGmpnaFJAvP4W+Mn+erIGrkNb2VWkfPBcQ 2+71niZDHFv196soI4ZoyPY6w/LXehMKFXPj5/gBPlC8Byp+DG8HPEgnvBHZfUVs 8VwWtEN5xwZ/DitvVtfbmff9oPHHpQJeQira5+B3DNrPLbmsPypfpo1xwJJidqpo u3Uod0oVoV2CLxz0SObJKp+qAV73u6mtFq3TadF0V0kM0lY9dZwDTMzZeewQSHQv U/jSb7kVBUkd2AFfHaNEAdGsvRrrCwwoHg+Ky0om1TPMPTRjKa6f+bNLnaH2HDB3 dwJ9Q0Zbu/k3p/AjmPZWHgZFC959r/7mesaSsHRY5MMh8VaTlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFqZ0yxDTLD9SPqTx0DO2oZpTh17MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODIzNTU1ZTEtYTUxZi0z MGE5LWI3NDctOTkzYTA5NTc4OWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPNeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEwZJnhJOtSJsMwyf37D4U3ibZ13u5WfsiqiFLPj7uIMzhUKA/Q7ro4/ bOWI004m9iNo6/OnUgMps3NSp40AXAUuGzYRWlrzY6pNdzipP1nxt8ItTO6M/RCp dJH8IME+K/roquUIKmnpOO6Tg1AonMVtEsCHAGNdzhEen6fxI24mStvol85K+6iH ip06hZa5m0hVse3vAHMX3xIXDN5qlKu7quykr1IbLmjXSq6muvizZ3Z/KR7nA9FA b5ci46qFOyltqqlL051j/cILLrGkb/q1nf2zSvcFriU8FmhCUPkwHv5PwitEA0AX /G8Mpg4kEApcT2shPsIVsEj068cElqo= -----END CERTIFICATE-----Generated at Mon Sep 28 22:16:06 2026 by rpki-client