$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/850e397a-cf34-3e4a-8479-300ab4c961bd.roa File: 850e397a-cf34-3e4a-8479-300ab4c961bd.roa (raw, json) Hash identifier: RV4YVUGjo/rKfxk/ExChzC+9zf4A8WWR81a5gazmVu8= Subject key identifier: DC:0E:DB:8B:77:B0:53:3F:8B:5A:D6:B6:02:41:B2:EE:AC:C9:CE:CA Certificate issuer: /CN=2bc601f7-daff-4d8b-8556-b61503268309 Certificate serial: 010D0C9F4328584F4983D2058B5A3A0AB7016500 Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/850e397a-cf34-3e4a-8479-300ab4c961bd.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7155 IP address blocks: 172.242.59.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:83:d2:05:8b:5a:3a:0a:b7:01:65:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f2dc2c38-2d8b-4376-9b63-b16be5f84802 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:af:c9:01:7b:47:4d:db:26:04:d3:a7:cd:5f: d2:44:b4:47:62:e8:ae:60:45:10:9a:58:d6:83:6b: 39:93:54:9e:2c:cb:bd:07:e5:ec:59:43:6d:ca:b8: cd:f6:75:e7:87:35:0b:83:3c:fb:23:a3:86:7d:b9: 1c:76:2b:fb:8a:ca:79:b7:26:00:8d:a2:7d:dc:91: 6f:5c:42:b6:18:fe:aa:aa:c5:dd:ea:10:d9:39:a8: 29:01:eb:5b:49:f0:91:39:7b:cf:e7:cd:8a:83:47: 48:68:d6:ca:80:b3:a2:b7:1a:d3:6c:c8:40:2e:f0: c4:6e:d2:39:dc:a9:1e:32:ca:08:65:fc:36:64:c1: c3:c3:e3:ef:9e:ec:d5:3f:ec:f9:39:2c:e5:ef:81: 21:2d:8f:4f:a5:9a:06:be:fb:03:01:4c:1a:1e:28: e5:fc:1f:6a:14:c2:d3:85:3e:99:2d:c4:59:fd:4e: 26:99:30:5e:a1:d5:3d:07:dd:c7:dd:0d:a7:04:0e: b7:e2:76:53:51:bb:34:ca:76:45:e9:dd:77:0f:c9: 7b:cd:b4:88:f5:2e:bc:94:ac:4a:99:05:d2:c8:23: a3:e9:f0:e8:0d:7c:56:d6:94:ac:84:fa:88:5f:0c: 24:f6:99:b7:02:63:3b:13:b1:2f:85:9c:d8:88:19: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:0E:DB:8B:77:B0:53:3F:8B:5A:D6:B6:02:41:B2:EE:AC:C9:CE:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/850e397a-cf34-3e4a-8479-300ab4c961bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl X509v3 Authority Key Identifier: keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer sbgp-ipAddrBlock: critical IPv4: 172.242.59.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:0f:bd:ed:ca:8d:be:ef:7f:a7:37:97:a4:8e:9c:ca:5f:31: 82:7a:a7:23:1e:da:67:44:be:da:c2:6d:fd:3f:fd:10:52:15: 5c:90:45:3a:76:09:12:00:e9:89:08:ec:7e:53:6c:80:15:68: a4:45:c8:27:94:7c:b0:f1:d6:f6:4e:78:13:21:25:03:5f:a3: b0:13:58:13:1b:0f:ab:97:c6:ca:61:e6:37:ea:c5:8b:b8:da: 46:2a:28:69:bb:85:bd:96:72:b2:50:d0:bd:e0:1f:ff:2f:6f: 5a:68:1a:15:33:67:49:c2:a3:48:20:17:98:3e:c8:22:01:53: f5:74:b8:7d:51:e7:b5:61:6e:07:2a:63:af:05:ed:88:dc:fd: d5:8b:23:ea:73:aa:68:3e:8d:c7:dd:07:54:50:87:4b:7e:ef: 5a:1c:2a:10:6b:83:a4:bb:58:7e:ff:95:d7:d5:11:78:c7:84: 06:7a:34:8b:f9:59:b3:cf:a5:a5:7e:22:15:42:39:74:e7:41: 3b:c8:72:f6:90:5a:d2:2a:b3:8b:50:03:91:c4:a7:90:6a:45: ec:af:e1:a3:be:6a:07:c1:21:2c:d4:cc:ae:54:b3:46:4e:f6: d0:49:f8:b5:58:7c:89:7a:e6:62:14:75:7e:8c:0c:d2:04:ca: 9b:fc:22:84 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jg9IFi1o6CrcBZQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4 MzA5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZjJkYzJjMzgtMmQ4Yi00Mzc2LTliNjMtYjE2YmU1Zjg0ODAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6/JAXtHTdsmBNOnzV/SRLRHYuiuYEUQmljW g2s5k1SeLMu9B+XsWUNtyrjN9nXnhzULgzz7I6OGfbkcdiv7isp5tyYAjaJ93JFv XEK2GP6qqsXd6hDZOagpAetbSfCROXvP582Kg0dIaNbKgLOitxrTbMhALvDEbtI5 3KkeMsoIZfw2ZMHDw+PvnuzVP+z5OSzl74EhLY9PpZoGvvsDAUwaHijl/B9qFMLT hT6ZLcRZ/U4mmTBeodU9B93H3Q2nBA634nZTUbs0ynZF6d13D8l7zbSI9S68lKxK mQXSyCOj6fDoDXxW1pSshPqIXwwk9pm3AmM7E7EvhZzYiBngTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwO24t3sFM/i1rWtgJBsu6syc7KMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2 MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODUwZTM5N2EtY2YzNC0z ZTRhLTg0NzktMzAwYWI0Yzk2MWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1 NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2 ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1 MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPI7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgPve3Kjb7vf6c3l6SOnMpfMYJ6pyMe2mdEvtrCbf0//RBSFVyQRTp2 CRIA6YkI7H5TbIAVaKRFyCeUfLDx1vZOeBMhJQNfo7ATWBMbD6uXxsph5jfqxYu4 2kYqKGm7hb2WcrJQ0L3gH/8vb1poGhUzZ0nCo0ggF5g+yCIBU/V0uH1R57Vhbgcq Y68F7Yjc/dWLI+pzqmg+jcfdB1RQh0t+71ocKhBrg6S7WH7/ldfVEXjHhAZ6NIv5 WbPPpaV+IhVCOXTnQTvIcvaQWtIqs4tQA5HEp5BqReyv4aO+agfBISzUzK5Us0ZO 9tBJ+LVYfIl65mIUdX6MDNIEypv8IoQ= -----END CERTIFICATE-----Generated at Mon Sep 28 21:57:15 2026 by rpki-client